Privacy & digital rights
GDPR explained for citizens: your data rights and how to use them.
Automated decisions and profiling: your rights under Article 22
Loans refused by an algorithm, job applications screened out automatically: what Article 22 GDPR provides and how to demand a review by a human.
Biometric data: fingerprints, face and voice under the GDPR
Phone unlocking, gym access, fingerprint clock-in systems: when biometric data is protected by Article 9 GDPR and what to ask before you hand it over.
Children online: digital consent, minimum age and safeguards
At what age a teenager can join social media alone in Italy, what the GDPR and Digital Services Act change and how parents can protect children.
Complaint to the data protection authority: when and how to file
How a complaint to the data protection authority under Article 77 GDPR works, when it makes sense, what to attach and which alternatives exist.
Consent to data processing: when it is needed and how to withdraw
Consent is only one of the GDPR's legal bases. When it is really needed, what makes it valid and how you can withdraw it at any time, with examples.
Cookie banners: how to read them and refuse cookies knowingly
Technical, analytics and profiling cookies: what cookie banner options mean, which rules websites must follow and how to manage your choices.
Data breach: what to do when a company loses your data
Received a data breach notice? What Articles 33 and 34 GDPR require, what information to demand and the steps to take right away to protect yourself.
Data portability: moving your data from one service to another
What the Article 20 GDPR right to data portability is, which data it covers, the required format and how to use it to switch services safely.
The Digital Services Act explained for citizens: your new rights
Reporting, reasons for removals, internal complaints, transparent ads and non-profiled feeds: what Regulation (EU) 2022/2065 guarantees you.
Newsletters and email pixels: who knows when you open a message
Promotional emails can record opens and clicks. How tracking pixels work, what the law says, how to unsubscribe safely and how to protect your inbox.
Health data and fitness apps: what you are really sharing
Smartwatches and apps for sleep, cycles or diet collect health data. What Article 9 GDPR provides, what to check first and how to manage your data.
Home and apartment building CCTV: the privacy rules to know
Cameras on the landing, smart doorbells, shared building systems: what you may film, when the GDPR applies and the limits you must always respect.
Location data: what it reveals and how to manage it
Location history, geotagged photos, live location sharing, connected cars: why location data is so sensitive and how to limit how widely it spreads.
Online tracking beyond cookies: pixels, fingerprinting and logins
How websites recognise you without cookies: pixels, browser fingerprints, link parameters and always-on accounts. What the law says and what to do.
Privacy notice: how to read one in five minutes
What a privacy notice must contain under Articles 13 and 14 GDPR, which sections to read first and which signs point to processing that lacks transparency.
Restriction of processing: the right to freeze your data
When to request restriction of processing under Article 18 GDPR, what the controller may and may not do with frozen data and how to word the request.
Right of access to personal data: a guide to Article 15 GDPR
How to ask a company which personal data it holds about you, what it must tell you under Article 15 GDPR, the deadline, and what to do if it stays silent.
Right to erasure of personal data: when you can request it
Closed accounts, forgotten sign-ups, data collected for no reason: the cases in which Article 17 GDPR lets you have data erased, and the exceptions.
Right to object: how to stop direct marketing and profiling
Article 21 GDPR lets you object to processing based on legitimate interest and, unconditionally, to direct marketing. Here is how to use it in practice.
Right to rectification: how to correct inaccurate personal data
Wrong address, misspelt name, outdated marital status: how to get your data corrected under Article 16 GDPR and what obligations the controller has.
Smartphone app permissions: which to grant and which to refuse
Camera, microphone, contacts, location: how to assess the permissions apps ask for, which are really needed and how to review them on your phone.
Social media privacy: the settings you should check
Who sees your posts, who can tag you, what advertisers know: a structured review of social media privacy settings that works on every platform.
Unwanted telemarketing: how to fight back and use the register
Endless sales calls? How Italy's public opt-out register works, what Article 130 of the Privacy Code provides and how to keep a record of calls.
Voice assistants and smart homes: how to protect privacy at home
Smart speakers, connected TVs, robot vacuums: what data they collect and how to manage voice recordings, device settings and guests in your home.
Cameras and monitoring at work: what an employer may do
CCTV, work email, GPS on vehicles: the limits of Article 4 of the Italian Workers' Statute, the notice owed to staff and employees' data rights.