Privacy
Personal data, correspondence and visits to this website.
Last updated
Who is responsible
The Field Witness Society is a personal editorial project managed by Tommaso Bruno, who is the data controller for personal data handled for the project. The project is based in Italy.
For privacy questions or to exercise your rights, email thefieldwitnesssociety
When you write to us
The contact form prepares an email on your device. It does not submit your message to a form service or store the text on the website. Opening your email app is a separate step from sending the message. Your app may save or synchronise a draft under its own settings.
If you send the email, the project receives your email address, any name you provide, your message, attachments and the email’s associated technical information in its Gmail inbox. Your name is optional. Providing information is voluntary; without a message and a usable reply address, we cannot respond to your enquiry.
We use correspondence to read and respond to enquiries and manage related follow-up. The legal basis is our legitimate interest in handling communications that people choose to send us, under Article 6(1)(f) of the GDPR. Where you request steps towards a contract, Article 6(1)(b) applies to those steps. Any processing needed to meet a specific legal obligation is based on Article 6(1)(c).
Writing to the project does not subscribe you to a mailing list or authorise publication of your message or photographs. Please include only information needed for your enquiry.
Website visits and cookies
The website is hosted on GitHub Pages. Serving a page involves processing technical data, including the visitor’s IP address and request information. GitHub describes its processing, security and retention practices in its privacy statement.
The site has no analytics, advertising pixels, embedded social feeds or reCAPTCHA. Its code does not set cookies or use browser storage to track visitors. Fonts, photographs and the static map image are served with the website. This does not mean that hosting providers process no technical data.
External services are accessed when you follow their links or open your email app. Their own privacy notices apply to their processing. Our purpose in making the website available and maintaining its security is a legitimate interest under Article 6(1)(f) of the GDPR.
Services that handle data
GitHub provides website hosting. Google provides the project’s Gmail mailbox; see Google’s privacy policy. Your chosen email provider also handles messages you send. Correspondence is not published or shared with other contributors simply because you contact the project. Disclosure may be necessary where required by applicable law.
These providers operate internationally, including in the United States. GitHub and Google describe their use of adequacy frameworks and standard contractual clauses in their respective international transfer information and transfer frameworks. Those documents explain the mechanisms each provider uses; they do not mean that data stays exclusively in the EU. You can contact the controller for information about the arrangements relevant to your enquiry.
How long information is kept
Enquiry correspondence is kept while the enquiry and reasonably related follow-up are active. Once these are complete, messages are reviewed and deleted when they are no longer needed. A record needed for an ongoing collaboration, a specific legal obligation or a legal claim is retained only for the period required by that purpose.
Website technical records and provider backup copies follow the applicable provider’s retention arrangements. Deleting a message from the project’s mailbox does not delete the sender’s copy.
Your rights
Subject to the conditions in the GDPR, you can request access to your personal data, correction, deletion or restriction of processing. You can object to processing based on legitimate interests. Data portability applies where its legal conditions are met. If a separate activity relies on consent, you can withdraw that consent without affecting earlier lawful processing.
Send requests to thefieldwitnesssociety
The website does not carry out profiling or make automated decisions with legal or similarly significant effects.
Changes to this notice
This notice is updated when the website’s services or data practices change. New activities involving personal data, such as a mailing list, require appropriate information before they begin.