Privacy Policy

    Last updated: 29 July 2026. Privacy notice provided pursuant to Articles 13-14 of Regulation (EU) 2016/679 (GDPR).

    1. Data controller

    [TO BE COMPLETED: legal name]
    [TO BE COMPLETED: registered address]
    VAT number: [TO BE COMPLETED] — Tax code: [TO BE COMPLETED]
    Website: historyunlocked.org
    E-mail: info@historyunlocked.org

    Representative in the European Union (Art. 27 GDPR): [TO BE COMPLETED, if applicable].

    No Data Protection Officer (DPO) has been appointed.

    2. Data collected

    • Data provided voluntarily: e-mail address for the newsletter; name, e-mail and message text sent through the contact form.
    • Browsing data: IP address (also truncated), device and browser type, pages visited and traffic source, collected through cookies and similar technologies subject to consent.
    • Advertising data: identifiers and ad interactions processed by Google and its partners, subject to consent.
    • Authentication data: e-mail and credentials of site administrators.

    No special categories of data (Art. 9 GDPR) are collected.

    3. Purposes and legal bases

    • Replying to contact-form requests — legal basis: pre-contractual measures / legitimate interest (Art. 6.1.b and 6.1.f).
    • Sending the newsletter — legal basis: consent (Art. 6.1.a), withdrawable at any time.
    • Usage statistics via Google Analytics 4 — legal basis: consent (Art. 6.1.a).
    • Serving, personalising and measuring ads via Google AdSense — legal basis: consent (Art. 6.1.a).
    • Site security, abuse prevention and legal obligations — legal basis: legitimate interest and legal obligation (Art. 6.1.f and 6.1.c).

    4. Google Analytics and Google AdSense

    This site uses Google Analytics 4 (ID G-CHXCNBVVP9) for statistical purposes and Google AdSense (publisher ca-pub-7917648120524429) to serve advertising. Both services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Scripts are activated only after consent, following the Google Consent Mode v2 model.

    5. Advertising profiling

    If you consent to personalisation, Google and its partners may use identifiers and browsing data to display interest-based ads and measure their performance. Without consent, ads are served in non-personalised form based on page content. No automated decision-making with legal effects is carried out.

    6. Recipients and data processors

    Data may be processed by suppliers acting as processors under Art. 28 GDPR: the hosting and infrastructure provider, the database and authentication provider, e-mail and messaging services used for editorial notifications, and Google for analytics and advertising. Data is never disclosed or sold to third parties for their own purposes.

    [TO BE COMPLETED] named list of data processors, available on request.

    7. Transfers outside the EU

    Some suppliers, including Google, may process data outside the European Economic Area, on the basis of adequacy decisions (EU-US Data Privacy Framework) or Standard Contractual Clauses approved by the European Commission, with supplementary measures where required.

    8. Retention

    • Contact requests: up to 24 months from the last communication.
    • Newsletter subscription: until consent is withdrawn or the address is deleted.
    • Analytics data: according to Google Analytics 4 retention periods (up to 14 months).
    • Advertising data: according to Google's retention policies.
    • Administrative authentication data: for the duration of the relationship and legal obligations.

    9. Your rights

    You may exercise the rights under Articles 15-22 GDPR: access, rectification, erasure, restriction, portability and objection. Requests can be sent to info@historyunlocked.org; we reply within one month.

    10. Withdrawing consent

    Consent can be withdrawn at any time without affecting the lawfulness of prior processing. For analytics and advertising use the Cookie Policy; for the newsletter use the unsubscribe link in every message.

    11. Complaint to a supervisory authority

    You have the right to lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of your country of residence.

    12. Cookies

    Details of the cookies used and their duration are set out in the Cookie Policy, where consent can also be changed or withdrawn.