Política de privacidad

Last updated: November 2026

1. Controller

Mateus Guzzo
[Postal address — required before publishing]
Email: hello@matguzzo.com

2. In short

This website sets no cookies and has no forms and no ads. Fonts and scripts are served from this site itself. Personal data is processed only where that is technically necessary (hosting, images) or in anonymised form for simple visitor statistics (Umami).

3. Hosting: GitHub Pages

This website is served by GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you open a page, GitHub processes technically necessary connection data, in particular your IP address, and says it stores it for security purposes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in delivering the website securely and reliably). Data may be transferred to the USA; GitHub bases such transfers on the EU–US Data Privacy Framework or on standard contractual clauses. More: GitHub's privacy statement.

4. Visitor statistics: Umami

For anonymous audience measurement I use Umami Cloud (umami.is). Umami sets no cookies, stores no IP addresses and does not follow you across other websites. It records the page visited, the referring website, browser, operating system, device type, screen size, language and approximate country or region, which is derived from the IP address without storing it. None of this identifies you. If your browser sends "Do Not Track", nothing is recorded. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in minimal statistics about which pages are read). More: umami.is/privacy.

5. Images from Cargo

Some images on the visual arts project pages are loaded from the servers of Cargo (freight.cargo.site), where my art portfolio is hosted. Your IP address is sent to Cargo so the images can be delivered. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in showing my work).

6. Contact by email

If you write to me, I process your message and contact details in order to reply (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that.

7. External links

Links to other websites (such as X / Twitter, Substack, YouTube or Medium) only connect to them when you click; from then on, that provider's privacy policy applies.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). An email is enough. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).