Information on the processing of personal data provided under Regulation (EU) 2016/679 (GDPR).
The data controller is Digipa S.r.l., owner of the Wikicraft brand, Piazza Giuseppe Grandi 7, 20129 Milano (MI), Italy, VAT no. IT10745180967. For any request concerning your personal data write to info@wikicraft.it.
Last updated: 16 October 2026.
To deliver the pages, the web server processes the technical data your browser sends, such as IP address, date and time of the request, page requested, browser and operating system. We use these data only to run the site and protect it from abuse (legitimate interest, Art. 6(1)(f) GDPR). Our forms and the Wikipedia assessment limit the number of requests per address: for this they keep only a protected hash of the IP address, never the readable address, and delete it when the time window ends.
When you fill in the contact form we collect: first name, last name, email address, phone number and the content of your message. When you write to us by email, phone or WhatsApp we receive the data you choose to send. We use these data only to answer you and to assess your request for a Wikipedia page.
The assessment on the home page has two paths. The page analysis uses the address of a public Wikipedia article. The eligibility check uses the answers you give in the wizard: name of the person or company, activity, geographic area, optional official website and your connection to the subject. Neither path asks for your email. The answers stay in a temporary record on our server and are not written to the logs.
When you ask for the full report we also collect your email address, your optional newsletter choice, and the time and version of the privacy notice you accepted. We use them to send the report.
The assessment score is calculated automatically, but it is only an indication: it has no legal effect and no similarly significant effect on you, and every decision about a Wikipedia page is made by people.
If the eligibility check concerns another person, make sure you are entitled to share their name and professional information with us. We use those data only for the assessment and the report.
Analysed articles, wizard answers and delivery records are deleted after 48 hours. For each report sent we keep a record (date, language, type of assessment, subject, email, result, newsletter choice and version of the accepted notice) for 365 days. Records are stored in monthly files, and a file is deleted when its newest record expires, so a record can stay up to one month longer. Technical logs contain outcomes and hashed identifiers, never answers or readable email addresses.
The unsubscribe link in the report records only a protected hash of your email, so that we never write to that address again. We keep this list for as long as needed to respect your objection; it contains no readable email addresses. The unsubscribe page sets no cookies, and the reports contain no tracking pixels.
Our forms and the assessment are protected by Google reCAPTCHA v3, which tells people from automated programs. Without it we could not keep the forms working, so it is not subject to the cookie choices. It loads only when you start using a form or the assessment, never on page load.
reCAPTCHA sends Google, from your browser, your IP address, technical data about your browser and device and data about how you interact with the page. To verify the result our server also sends Google the IP address of the request. The legal basis is our legitimate interest in protecting the site and our inboxes from spam and abuse (Art. 6(1)(f) GDPR). Google processes these data under the Google Privacy Policy and the Google Terms of Service. If you do not want to use reCAPTCHA, you can write to us at the email address above.
With your consent, given in the cookie banner, we use:
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time from the "Cookie preferences" button at the bottom of every page; withdrawal does not affect processing carried out before it. For the collection and transmission of data through the Meta Pixel, Digipa S.r.l. and Meta Platforms Ireland Limited are joint controllers under Art. 26 GDPR, according to the Meta Controller Addendum. Meta is responsible for its own later processing, described in the Meta Privacy Policy, and you can exercise your rights with Meta as well. Details on cookies are in the Cookie Policy.
The PDF of the report is created on our server. We will update this notice before adding any new service that receives personal data.
Our servers are in the European Union. Google and Meta may transfer data to their parent companies in the United States (Google LLC, Meta Platforms, Inc.). Both are certified under the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission on 10 July 2023 (Art. 45 GDPR); their contracts also include the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR).
Under Articles 15-22 GDPR you can ask at any time for access to your data, rectification, erasure, restriction of processing and portability. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. Write to info@wikicraft.it: we answer within one month.
Right to object: you can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21 GDPR). To stop all emails about a report, use the link in the email or write to us.
You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), https://www.garanteprivacy.it.
We may update this notice when our services change. The date of the last update is shown at the top of this page.