Privacy Policy (Articles 13 and 14 GDPR)

Last updated: November 8th, 2025

This notice explains how the website hymotor.it processes personal data. It is provided pursuant to Regulation (EU) 2016/679 (GDPR).

1. Data Controller

The Data Controller is the person who determines the purposes and means of the processing.

Thomas Dalberto - Via Solivo Frazione Morca, 16 - 13019 Varallo (Italy)

Contact email: privacy@hymotor.it

The Controller collects and processes personal data for the following purposes:

Data category Purpose of processing Legal basis
Contact form data (name, email, company, message) To respond to requests sent via the Web3forms contact form. Pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR).
Analytical data (GA4) Site usage analysis and performance measurement to improve the website. Explicit user consent (Art. 6(1)(a) GDPR), obtained via the Cookie Banner.
Navigation data Maintain site security and integrity (technical logs, IP) via GitHub Pages hosting. Legitimate interest of the Controller (Art. 6(1)(f) GDPR).
User preferences Store interface preferences (e.g. dark/light theme) and cookie consent state. Legitimate interest of the Controller (improving site usability).

3. Processing Methods and Storage Location

Processing is carried out in an automated, digital form. Data are kept only for the time necessary to achieve the purposes for which they were collected.

  • Contact form data: retained for the time strictly necessary to handle the request and then deleted.
  • Google Analytics 4 (GA4): user and event data are retained for 14 months (default maximum setting).

4. Data Transfers to Third Parties and Outside the EU

Personal data may be disclosed to the following parties acting as Data Processors or independent Controllers:

Third party Role / Purpose Transfer outside the EU
GitHub, Inc. (GitHub Pages) Hosting and distribution of the site. Collects security logs (IPs) acting as a Data Processor (DPA included in Terms of Service). Data may be transferred to the USA.
Google Ireland Ltd. / Google LLC Google Analytics 4: analytics service (Data Processor). Google Fonts: font delivery (independent Controller). Data may be transferred to the USA. Standard Contractual Clauses (SCC) and appropriate measures are used.
Web3forms Receives and forwards contact form submissions (Data Processor). The Controller undertakes to use Web3forms only where adequate GDPR safeguards are in place (DPA and/or SCC).

5. Data Subject Rights

Under the GDPR the user has the right to:

  1. Access personal data concerning them (Art. 15).
  2. Rectify inaccurate data (Art. 16).
  3. Erase data (Art. 17 — right to be forgotten).
  4. Restrict processing (Art. 18).
  5. Data portability (Art. 20).
  6. Object to processing (Art. 21).
  7. Withdraw consent at any time (Art. 7(3)), without affecting the lawfulness of prior processing.
  8. Lodge a complaint with the supervisory authority.

To exercise these rights, contact the Controller at: privacy@hymotor.it.


Cookies are small text files (letters and/or numbers) that allow a web server to store information in the browser to be reused during the same visit (session cookies) or later (persistent cookies).

This site uses the following types of cookies and local storage:

A. Technical Cookies (Always Active)

These are necessary for correct functioning and provision of the service. They do not require user consent.

Name / Storage Category Purpose Duration
analyticsConsent (Local Storage) Technical / Functional Stores the user’s cookie consent status (Accepted/Rejected). Persistent
theme (Local Storage) Functional Stores the display theme preference (dark/light). Does not contain personal data. Persistent

These cookies are used for statistical analysis and are set only after the user has given consent via the Cookie Banner.

Cookie name Provider Purpose Duration
_ga Google Analytics 4 Distinguish users for analytics purposes. 2 years
_ga_<ContainerID> Google Analytics 4 Maintain session state. 2 years

Consent for analytical cookies (GA4) is managed via the Cookie Banner. If the user does not give consent, analytical cookies will not be activated.