Privacy Notice

Who is responsible for your data

VesuRock is the trading name used by Andrew James Eyre for his independent business activity in Italy. Andrew James Eyreis the data controller for the personal data described in this notice.

Controller

Andrew James Eyre, trading as VesuRock

P. IVA

06432750658

Privacy contact

vesurock@proton.me

What is collected

When you use the enquiry form

• your name;
• your email address;
• your company or organisation, if you choose to give it;
• what you write in your message.

Please do not send confidential documents or sensitive personal information through the form. If a conversation develops, we can agree a suitable way to share anything confidential.

When you email directly

Your email address and whatever you choose to include in your message.

When you visit the website

Like any website, the hosting provider necessarily processes technical data to deliver pages and keep the service secure, such as your IP address, browser type, the page requested and the time of the request. This is not used to profile you.

Why it is used, and the legal basis

Responding to your enquiry

To read and reply to your message and to assess whether and how VesuRock may be able to help. Legal basis: taking steps at your request before a possible contract (GDPR Article 6(1)(b)) and the legitimate interest in responding to business enquiries (Article 6(1)(f)).

Keeping correspondence

To keep a sensible record of conversations for the period described below. Legal basis: legitimate interest (Article 6(1)(f)).

Security and spam prevention

To keep the website and enquiry form working and to filter abusive or automated submissions. Legal basis: legitimate interest (Article 6(1)(f)).

Legal and accounting obligations

If an enquiry leads to an engagement, to keep the records that Italian law requires. Legal basis: legal obligation (Article 6(1)(c)).

Submitting an enquiry does not add you to any mailing list. There is no newsletter or marketing, your data is not sold, and no decisions about you are made by automated means.

Giving your name, email address and message is voluntary, but without them it is not possible to reply to you.

Who processes it

Personal data is handled by the following service providers, only for the purposes above:

• Netlify, Inc. (United States) hosts the website and receives and stores enquiry form submissions. Netlify screens submissions for spam as part of its form service.
• Proton AG (Switzerland) provides the vesurock@proton.me mailbox, which receives a notification of each enquiry and holds any email correspondence.
• Cloudflare, Inc. (United States) provides the domain name system (DNS) for vesurock.com. Website traffic and enquiry content do not pass through Cloudflare.

Data may also be disclosed to professional advisers or public authorities where the law requires it.

International transfers

Netlify is based in the United States and is certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing adequate protection. Switzerland, where Proton is based, is covered by a European Commission adequacy decision. Where a provider relies on other safeguards, such as the European Commission’s Standard Contractual Clauses, these form part of its data processing terms.

How long it is kept

• Enquiries that do not lead to an engagement are deleted no later than 24 months after the last meaningful contact.
• If an enquiry develops into an engagement, the relevant records are kept for as long as the engagement requires and afterwards for the periods required by Italian accounting and tax law, or for longer only where needed to establish or defend legal claims.
• Technical hosting logs are kept by Netlify for its own limited operational retention periods.

Cookies and browser storage

This website does not use cookies, analytics, advertising tags, tracking pixels or similar technologies. Fonts and all other assets are served from vesurock.com itself, so visiting the site does not contact any third-party service.

While the site is hosted on Netlify’s free plan, Netlify adds a small “Powered by Netlify” badge to its pages. The badge is served from vesurock.com and makes no requests to other services. If you minimise or hide it, your browser stores that choice in its local storage so the badge stays out of your way, until that setting expires or you clear your browser data. Nothing else is stored, and the setting is never used to identify or track you. For these reasons there is no cookie banner.

Your rights

Under the GDPR you can ask to:

• access the personal data held about you;
• correct inaccurate data;
• have your data deleted;
• restrict how it is used;
• object to processing based on legitimate interests;
• receive data you provided in a portable format, where applicable.

To exercise any of these rights, email vesurock@proton.me. You also have the right to complain to the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the data protection authority where you live or work.

Changes to this notice

If the way personal data is handled changes, for example because a new service provider is introduced, this notice will be updated before the change takes effect.

Version 1.1 · Last updated 1 November 2026