PRIVACY & COOKIES
A small site, a small privacy policy.
matteorollin.com is a personal portfolio. It does not use advertising, behavioural profiling, or sell visitor data. This page explains the limited personal data that may be processed when you use the site.
Last updated 6 October 2026
01
Who is responsible for the data?
The data controller for this website is Matteo Rollin-Dijkhuis. Privacy questions or requests can be sent to matteorollin@gmail.com.
02
Technical website data
When you request a page, the hosting and web-server infrastructure necessarily processes technical request information such as your IP address, the requested URL, browser information, and the time of the request so that the site can be delivered securely.
This processing is based on the legitimate interest in operating, securing, and troubleshooting the website. Technical or security logs, where retained, are kept only for as long as needed to investigate or resolve the relevant operational or security issue and are then deleted. They are not used to build advertising or behavioural profiles.
03
Approximate location feature
The homepage includes a feature that estimates your approximate location and distance from my displayed location. Your public IP address is used by a server-side lookup against a locally stored MaxMind GeoLite2 database. The lookup is intentionally approximate.
The site's location service does not store the IP address or the resulting location after responding to the request. The purpose of the processing is solely to provide the interactive distance feature, on the basis of the legitimate interest in providing that limited site feature.
The interactive map uses MapLibre GL JS, currently delivered throughUNPKG ↗, and map data supplied byOpenFreeMap ↗. Your browser therefore makes requests to those services when the map loads, which exposes normal request metadata such as your IP address and browser information to their infrastructure. OpenFreeMap states that it uses no cookies or tracking technologies and does not store IP addresses in its regular server logs, although temporary IP logging may be enabled during security incidents.
04
Analytics
No public-site analytics service is currently enabled. If privacy-friendly traffic analytics are introduced, this notice will be updated before the analytics are activated and the configuration will be limited to what is necessary to understand aggregate site usage.
The site does not currently use advertising pixels, cross-site tracking, session replay, or behavioural profiling.
05
Cookies and local storage
The public website does not currently place analytics, advertising, or preference cookies on ordinary visitors' devices and does not use browser local storage for tracking.
A strictly necessary session cookie is used only when the private administration area is successfully logged into. It is restricted to the administration API, is HTTP-only, Secure, SameSite=Strict, and expires after a maximum of 12 hours. It is not used for visitor analytics or profiling.
Because no non-essential cookies or equivalent tracking technologies are currently used on the public site, there is no consent banner. If that changes, non-essential tracking will not be activated before the required consent has been obtained.
06
Contact and external links
The website does not contain a contact form. If you choose to contact me by email or another external service, the information you provide is used to read and respond to your message. Correspondence is retained only for as long as it remains reasonably relevant to the conversation, a request, or any resulting relationship or legal requirement.
Links to services such as LinkedIn, Instagram, WhatsApp, and other external websites do not embed those services into this site. When you choose to follow an external link, the destination service processes data under its own privacy terms.
07
Hosting and recipients
This website is hosted on OVHcloud infrastructure in Switzerland. Website traffic therefore passes through the hosting infrastructure as necessary to deliver the service. Switzerland is recognised by the European Commission as providing an adequate level of protection for personal data transferred from the European Union.
Other recipients are limited to service providers that are technically necessary for the features described above, including UNPKG and OpenFreeMap for the map display, and service providers you independently choose to contact by following an external link.
08
Your rights
Where the GDPR applies, you may have the right to request access to, correction of, deletion of, or restriction of your personal data, and to object to processing based on legitimate interests. Where applicable, you may also have a right to data portability and to withdraw consent for any processing that is based on consent.
Requests can be sent to matteorollin@gmail.com. You also have the right to lodge a complaint with theGarante per la protezione dei dati personali ↗or another competent supervisory authority.
09
Automated decisions and changes
This website does not make decisions about visitors using automated decision-making or profiling that produces legal or similarly significant effects.
This notice may be updated when the website, its infrastructure, or its data-processing practices change. The date at the top of the page shows the latest revision.