Privacy Policy: No Personal Data Collected or Stored

1. Data Controller

The data controller for personal data processing is:

Name: Calcola Lordo Netto
Website: calcolalordonetto.it
Contact: contact page

The data controller is the entity that determines the purposes and means of personal data processing, pursuant to Article 4(7) of Regulation (EU) 2016/679. For any enquiry related to personal data processing, users may contact the controller via the website's contact page.

2. Data Protection Officer (DPO)

Given the nature of the website and the absence of large-scale personal data processing, a Data Protection Officer (DPO) has not been appointed pursuant to Article 37 of the GDPR, as the mandatory prerequisites set out by the regulation do not apply. Should processing conditions change, the controller will appoint a DPO and publish the relevant contact details in this notice.

For any enquiry regarding personal data protection, users may contact the data controller directly via the details provided above.

3. Types of Data Processed (or Not Processed)

The website does not collect, store or transmit any personal data from users.

The net salary calculator operates entirely client-side (in the user's browser). Data entered into the calculator (RAL, region, family situation, number of monthly payments, any deductions and every other required parameter) is never transmitted to our servers or to third parties. All calculations take place locally on the user's device and never leave the browser.

For clarity, the website does not collect or process the following categories of data:

Identifying data: name, surname, tax code, address
Contact data: email address, telephone number (except those voluntarily communicated via the contact page)
Financial data: banking information, credit card details, specific salary amounts
Identifying browsing data: IP address, tracking cookies, unique device identifiers
Sensitive or special category data: data relating to health, political opinions, religious beliefs or other categories under Article 9 of the GDPR

The following are not provided:

Registration or login forms
Newsletters or email address collection
User tracking via profiling cookies
Data sharing with advertising platforms
Comment systems or forums requiring personal data collection

4. Client-Side Processing

The technical architecture of the website has been designed following the "privacy by design" principle pursuant to Article 25 of the GDPR. The net salary calculator performs all operations directly in the user's browser, without any communication with remote servers during processing.

This means that data entered by the user into the calculator (RAL amount, region of residence, number of dependent children, contract type and every other parameter) never travels through the internet and never reaches the website's servers. Once the page has loaded in the browser, the calculator operates completely autonomously and independently of the network connection.

Users can independently verify this behaviour using their browser's developer tools, checking that no HTTP requests are made during calculator use.

5. Browsing Data and Analytics: Plausible Analytics

The website uses Plausible Analytics, a web traffic analysis service that:

Does not use cookies of any kind
Does not collect identifying personal data
Does not track users across sessions or websites
Does not use fingerprinting or other persistent identification techniques
Is GDPR compliant without requiring consent (as confirmed by data protection authorities in France, Italy, Sweden and other EU nations)
Data is hosted on servers within the European Union

Plausible collects exclusively aggregated and anonymous data such as: pages visited, traffic source (referrer), country of origin, device type and browser. This data does not allow user identification in any way. Plausible does not create individual profiles, does not assign unique identifiers to users and does not enable tracking across different sessions.

For more information about Plausible Analytics' GDPR compliance, please refer to the official documentation: https://plausible.io/data-policy.

6. Cookies and Local Storage Technologies

The website does not use profiling or tracking cookies. For more details, please refer to our Cookie Policy.

User preferences (such as dark/light mode) are stored in the browser's localStorage, which is not a cookie and is never transmitted to our servers. localStorage is a local storage mechanism provided by the HTML5 standard that remains confined to the user's device and can be cleared at any time through the browser's settings.

7. Legal Basis for Processing

As no identifying personal data is processed, it is not necessary to identify a specific legal basis under Article 6 of the GDPR.

Regarding the anonymous statistical data collected by Plausible Analytics, the applicable legal basis is the legitimate interest of the controller (Article 6(1)(f) of the GDPR), consisting of the need to understand how the website is used in order to improve its content and functionality. As this processing is limited to anonymous and aggregated data, it does not prejudice the fundamental rights and freedoms of users.

Should features requiring personal data processing be introduced in the future, this notice will be updated and the appropriate legal basis will be identified from those provided by Article 6 of the GDPR: consent of the data subject (point a), performance of a contract (point b), legal obligation (point c), legitimate interest (point f) or another applicable basis.

8. Third-Party Services

The website uses the following third-party services:

Plausible Analytics (Plausible Insights OU, Estonia): a cookie-free web analytics service, GDPR compliant. The data collected is exclusively anonymous and aggregated. Servers are located within the European Union.
Hosting service: the website is hosted on infrastructure with servers in the European Union. The hosting service may collect technical logs (IP address, date and time of request, page requested) for security and maintenance purposes, in compliance with the GDPR.

The website does not integrate third-party services that profile users. There are no social media buttons, advertising widgets, remarketing services or other tools that allow user tracking by third parties.

9. Transfer of Data Outside the EU

No personal data is transferred outside the European Union or the European Economic Area. All third-party services used by the website operate with servers located within the European Union.

Should it become necessary in the future to use services with servers outside the EU, the controller will ensure that the transfer complies with Chapter V of the GDPR (Articles 44-49), using the legal instruments provided by the legislation, such as European Commission adequacy decisions, standard contractual clauses or other appropriate safeguards.

10. Data Retention Period

As no personal data of users is retained, no specific retention period applies.

The aggregated statistical data from Plausible Analytics is retained for the duration necessary for website traffic analysis. As this data is anonymous and cannot be traced back to individual users, it falls outside the scope of GDPR provisions regarding personal data retention.

Technical logs from the hosting service, where present, are retained for a limited period strictly necessary for security and maintenance purposes, in compliance with the principle of storage limitation under Article 5(1)(e) of the GDPR.

11. Data Subject Rights

Pursuant to Articles 15-22 of Regulation (EU) 2016/679 (GDPR), every user has the right to:

Access (Art. 15): obtain confirmation of whether personal data concerning them is being processed and, if so, obtain a copy and the information required by law
Rectification (Art. 16): obtain correction of inaccurate personal data or completion of incomplete personal data
Erasure (Art. 17, "right to be forgotten"): obtain deletion of personal data when the conditions provided by law are met
Restriction of processing (Art. 18): obtain restriction of processing in certain cases provided by law
Data portability (Art. 20): receive personal data in a structured, commonly used and machine-readable format, and transmit it to another controller
Objection (Art. 21): object to processing of personal data on grounds relating to their particular situation, and object to processing for direct marketing purposes
Withdrawal of consent (Art. 7): withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

Since the website does not collect personal data, these rights are currently not applicable in practice. However, for any request, clarification or exercise of the rights listed above, users may contact us via the contact page. The controller undertakes to respond to such requests within 30 days, as required by Article 12 of the GDPR.

12. Children's Data

The website is not directed at children under 16 and does not knowingly collect personal data from minors. As no registration or personal data collection is required, there is no need to verify the user's age pursuant to Article 8 of the GDPR.

Should the website introduce features involving personal data collection in the future, appropriate measures will be implemented to ensure the protection of children's data, in compliance with Article 8 of the GDPR and Article 2-quinquies of Italian Legislative Decree 196/2003.

13. Complaints to the Supervisory Authority

Every user has the right to lodge a complaint with the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority), the Italian supervisory authority pursuant to Article 77 of the GDPR and Articles 140-bis et seq. of Italian Legislative Decree 196/2003:

Website: www.garanteprivacy.it
Email: protocollo@gpdp.it
PEC: protocollo@pec.gpdp.it
Phone: (+39) 06 696771
Address: Piazza Venezia, 11, 00187 Roma (RM)

Users also have the right to lodge a complaint with any other supervisory authority of the EU Member State in which they habitually reside, work or in which the alleged infringement occurred, pursuant to Article 77(1) of the GDPR.

14. Changes to This Notice

The controller reserves the right to modify this privacy notice at any time, publishing the updated version on the website. The date of the last update is shown at the top of this page. We recommend checking this page periodically for any updates.

In the event that new features requiring personal data processing are introduced, this notice will be updated before such features are activated and, where necessary, explicit user consent will be requested. In the event of substantial changes affecting user rights, the controller will endeavour to provide adequate communication of the changes made.