Privacy

Short version: I keep what I need to write your music and to be able to prove I paid my taxes. Nothing else, and nothing is sold to anyone, ever.

Who is responsible

Santiago Bianchi, composer, Rome, Italy. Write to contact@santiagobianchi.it about anything on this page and you will get a person, not a form.

What I hold, and why

If you write to me

Your name, your email address, and what you wrote. It goes into a private thread so that six months later I can remember what we agreed. Attachments you send stay for one year; after thirty days they are replaced by a compressed copy and the original is deleted.

If you buy something

Name, email, country, and company name and VAT number if you give them. This is what an order needs to exist and what the Italian tax authority expects to see behind an invoice. Orders are kept for ten years because accounting law says so, not because I want them.

I never see your card. Payment happens on the payment provider’s own page, with their own form. What comes back to me is «paid» or «not paid», and the last four digits at most.

If you just read the site

Nothing. There is no analytics, no pixel, no tracker, no heatmap, no session recorder. The web server keeps ordinary access logs for a short period, as every web server does.

The one thing that leaves my server

The private conversation has a translation switch. When it is on, the text of the message being displayed — that message alone, with no name, no email and no history — is sent to a language model to be translated, and the translation comes back and is stored so it is not requested twice. Turn the switch off and nothing leaves.

The assistant on the public pages works the same way: what you type into it is what it sends. Do not type anything into a chat window, mine or anyone else’s, that you would not want a third party to process.

Who else touches it

• Hostinger — the server this site runs on, in the European Union.
• PayPal and the card processor — only for the payment itself.
• The translation provider — only the message text, only when the switch is on.

That is the whole list. No advertising network, no data broker, no mailing list I sold you to.

What you can ask for

Under the GDPR: a copy of what I hold, a correction, deletion, restriction, portability, and objection. Ask by email and it happens within a month, usually the same week. The only things I cannot delete on request are invoices, which the law requires me to keep.

You can also complain to the Garante per la protezione dei dati personali, though I would rather you told me first.

Children

This site sells professional services and is not meant for anyone under sixteen.

Last changed: 27 August 2026