Website privacy

Who is responsible

Denis Subotic, operating as SuboVision, is responsible for personal data processed through this website (the data controller). SuboVision is based in San Canzian d’Isonzo, Gorizia, Italy. VAT number: 01189320318. For privacy questions or requests, email denis@subo.vision.

This notice covers subo.vision, its project pages, and its digital business card. It does not cover the use of the apps themselves. For example, the Mealix app privacy policy describes the app separately. Websites reached through external links have their own privacy notices.

Delivering the website and answering messages

Your browser sends connection information, including your IP address, requested address, and browser information, to the server to load the website. The hosting infrastructure may record access and error logs for operation, security, and troubleshooting. These requests still occur if you reject analytics.

This processing supports our legitimate interests in operating and protecting the website (GDPR Article 6(1)(f)). If you contact us by email, we use the details you provide to respond and, where relevant, take steps at your request before entering a contract (Article 6(1)(b)), or to handle general correspondence under our legitimate interests. Providing information for optional analytics is not a condition of browsing the site.

Optional website analytics

Only after you choose “Accept analytics” do we load Umami from analytics.subo.vision. We use this self-hosted software to understand page popularity, estimated visitor numbers, visits over time, referral sources, and approximate visitor locations. We rely on your consent (Article 6(1)(a)).

Analytics can include the page path and title, referring website, visit time, browser and device information, language, screen size, and country, region, or city inferred from the IP address. Location is approximate, not GPS location. Our website removes query parameters and fragments from analytics page addresses and sends only the origin of a referring website.

Umami does not use tracking cookies for these pageviews. It processes connection information to estimate visitors using hashed identifiers. This does not identify an exact individual, and a hashed identifier should not be treated as a guarantee of anonymity. Umami states that it does not store raw IP addresses in its analytics records; separate infrastructure logs may contain them.

These website controls enable pageview statistics only. They do not enable session recordings, advertising profiles, or account identification. Analytics is hosted under our control using Hetzner infrastructure; we do not use Umami Cloud for this collection. Hosting providers may process data as needed to supply their services, and data may be disclosed where legally required.

Your choice and browser storage

Choose “Reject analytics” to keep analytics off. Closing the initial notice also keeps it off. Use “Analytics choices” at the bottom of any covered page to accept later or turn analytics off. Withdrawal stops future analytics collection through this website; it does not undo lawful processing that took place before withdrawal or automatically erase earlier records.

We save your analytics choice, its date, expiry, and notice version in your browser’s local storage and treat it as valid for six months. Expired records are removed when you next visit. This preference is used to remember and apply your request, rather than to track you. Choices are specific to this browser and website origin. After expiry, or if you clear browser storage, we ask again with analytics off by default. If we cannot save a choice, analytics stays off for that page.

The homepage also uses local storage to remember language and animation choices until you change them or clear browser storage. These preferences support the presentation you request and are separate from analytics consent. With JavaScript disabled, the analytics script is not loaded.

How long information is needed

The six-month browser preference period is separate from the retention of records on the server. For analytics, retention is assessed against the period needed to compare website traffic and evaluate changes to the site. For infrastructure logs, the criteria are operational troubleshooting, investigation of security incidents, and any applicable legal requirements. Correspondence is retained as needed to handle your enquiry, any resulting business relationship, and applicable record-keeping or legal claims.

You can contact us for information about records still held or to request deletion where applicable. Clearing your browser preferences does not delete server records.

Your rights

Where the GDPR applies, you may request access, correction, erasure, restriction, and portability of your personal data, subject to the applicable conditions. You may object to processing based on legitimate interests and withdraw analytics consent at any time. We may need information to verify a request, and may be unable to associate a particular analytics record with you without additional information.

Contact denis@subo.vision to exercise your rights. You may also complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or your competent supervisory authority. We do not use website analytics to make automated decisions with legal or similarly significant effects on you.