Who the controller is
The controller is Boris Myznikov, publisher of TorinoMia and responsible for its editorial content, resident in Turin. For any question about this page: privacy [at] torinomia [dot] it.
We have not appointed a data protection officer: we are not a public body, we do not process data on a large scale to profile people, and we do not systematically monitor our readers.
When you read the site
The server records the requests it receives: IP address, date and time, the page requested, the browser, the referring page. This keeps the service running and protects it from abuse, and it is our only measure of how much the site is read. The legal basis is legitimate interest (art. 6(1)(f)).
The site sets no cookies and uses no third-party counters: no Google Analytics, no pixels, no advertising networks. That is why it asks you for no consent at the door: there is nothing to consent to. The project's only cookie is the technical one of the personal area, and only those who sign in to it with a code receive it (see below).
The fonts and the map library are served from our own domain, not from Google or anyone else: opening a page sends your address to nobody. There are two exceptions. The first: on pages with a map, the map tiles come from OpenStreetMap servers, and at that moment your IP address is visible to them.
The second is photos from news outlets. Many entries show the photo with which the outlet cited as a source illustrated its own article. We do not copy it onto our servers: your browser loads it directly from the outlet's site, and next to the image there are always the outlet's name and a link to the original article. At that moment the outlet's server receives your IP address and browser type, and handles them under its own privacy notice. We only show images this way when they arrive without cookies.
The same holds for the guided visit (the Itinerari pages where the camera flies): the base map, the fonts and the library are ours, the terrain relief, however, comes from an outside service, Terrain Tiles (open data on Amazon Web Services), and it is on from the start: opening the visit makes your IP address visible to them. You can switch it off under “Settings”. The satellite view (imagery by Esri, Maxar, Earthstar Geographics) stays off until you switch it on yourself.
The access log is kept for 30 days and then deleted: we do not use it to build profiles, we do not link it to names, and we pass it to no one.
On sites that display the Torino Top 100 button, their readers' browsers load the button image from our address top.torinomia.it. We log the IP address already truncated before it is written (the last digits zeroed), the date, the referring site and the browser type: this counts those sites' visits and estimates how many come from Piedmont. No cookies, no profiles; same legal basis and same retention as the access log.
When you write to us
The form in the personal area collects: your email address, the address of the page you are writing about, how you relate to that page, the text of the request, the IP address it came from and the date. Every request gets a case number.
It serves one purpose: to examine the request and answer you. For correction and deletion requests the processing is a legal obligation (arts. 12, 16 and 17 of the regulation); for error reports it is our legitimate interest in publishing accurate information. Your email is never published, never enters any list and is not used for anything else.
We keep the request and the answer as long as they are needed to show how we handled it, and in any case no longer than 24 months after the case is closed. Once that term passes, the email address, the text, the IP address and your stated relation to the page are deleted automatically: the case number, the date and the outcome remain.
In the free text field you can write anything, including sensitive facts about yourself: please write only what we need in order to understand the mistake.
If you ask for a permanent copy of a link, for a watch over a site or to follow an entry, the form collects the address you leave and, if you wish, a line for yourself. We send the address of the page to the Internet Archive so that it makes a copy: the link goes to them, not your name and not your email. While the watch or the follow is active we keep your email address in order to write to you; to make them stop, just ask.
If you suggest an entry, the form additionally collects the name of the missing entry and, if you leave one, a link to a source. The legal basis is our legitimate interest in writing the encyclopedia. We tell no one who suggested an entry: the published entry carries its sources, not your name and not your email.
Signing in to the personal area. To see your own requests you can sign in with a six-digit code sent by email. The address is used only to send the code and to show you the requests that came from it; the code is valid for ten minutes and is not kept after use. Signing in sets one cookie, a technical one, which remembers the sign-in for seven days or until you sign out: it is needed to provide the service you asked for, which is why the law requires no consent (art. 122 of the Italian Privacy Code).
When you are named in an entry
The encyclopedia tells the facts of the city, and people appear in those facts. We process this data for journalistic and information purposes: article 85 of the regulation, articles 136 to 139 of legislative decree 196/2003 and the deontological rules for journalism allow it without asking the consent of the person named.
The data comes from publications that are already out, and the source is named under every line and at the foot of every entry. We compile dossiers on no one: we tell facts, not people.
You can ask for correction, deletion or anonymisation at the dedicated door. A person makes the decision, not the machine: art. 17(3)(a) leaves a publication standing where a public interest remains, and in that case we write to you and say why.
Who else touches the data
- Hetzner Online GmbH
The server the site runs on, in Finland. European Union.
- Resend
Outgoing mail. A United States company: the transfer relies on the European Commission's standard contractual clauses.
- Cloudflare
The domain records (DNS) only. Pages do not pass through them.
- OpenStreetMap Foundation
Map tiles, requested by your browser when you open a page with a map.
- Amazon Web Services (Terrain Tiles)
Terrain elevation data, requested by your browser when you open the guided visit: the relief is on by default and can be switched off under “Settings”.
- Esri
Satellite imagery, requested by your browser only if you switch on the satellite view in the guided visit.
- Anthropic
The models we use to draft the preliminary text of entries receive the text of publications, in which names may appear. A United States company, same standard clauses; the data is not used to train models.
- Internet Archive
Copies of the pages you ask us to save and of sites that stop answering. A United States foundation: it receives the address of the page, not your name and not your email.
None of them uses the data for their own purposes. We sell nothing and hand nothing to anyone else.
Your rights
You can ask for access to the data concerning you, its correction or deletion, the restriction of or objection to processing, and the portability of the data you gave us. Write to privacy [at] torinomia [dot] it or use the door in the personal area: we answer within a month, as article 12 requires.
If our answer does not satisfy you, you can turn to the Italian data protection authority or to a court.
Minors
We do not name minors in entries, even when the source does. If you find one, it is our mistake: report it and we will take it out.
If this page changes
We rewrite it when something substantial changes and leave the date of the latest version here. Last updated: 7 October 2026.