Through this notice, the Data Controller intends to explain the purposes for which your personal data is collected and processed, the categories of data subject to processing, the rights granted to you under data protection law (Regulation (EU) 2016/679 – GDPR, Italian Legislative Decree 196/2003 and subsequent amendments) and how to exercise those rights.
Data Controller
Federica D’Alessio
Contact: redazione@kritica.it
www.kritica.it
1. Data collected and purposes of processing
1.1 Contact form – Contact Form 7
All information submitted through the contact form (name, email address, message text) is handled confidentially and used solely to respond to your request or provide assistance. It is not shared with third parties without consent, nor used for unauthorized marketing purposes. Data is retained only for as long as necessary to process the request, after which it is securely deleted. Contact Form 7 is a plugin that runs server-side on our hosting and does not itself transmit data to external services. Official site: https://contactform7.com/privacy-policy/
1.2 Newsletter – Substack
For newsletter sign-ups we rely on Substack, a platform providing publishing, payment, and subscription newsletter delivery infrastructure. Data (email address and, where applicable, payment data) is processed directly by Substack Inc. under its own privacy notice. Privacy notice: https://substack.com/privacy
1.3 Statistics, analytics and Search Console – GKit / Google
We use Google tools (Analytics, Search Console) to monitor visitor behavior and site performance. Aggregated, statistical usage data is collected (pages visited, traffic source, device type, etc.). Google privacy notice: https://policies.google.com/privacy
1.4 Google Fonts
The site uses Google Fonts typefaces. Where technically possible, fonts are loaded locally from our server to reduce data transmission to Google; otherwise, Google’s terms apply. Terms of service: https://developers.google.com/fonts/faq Google privacy notice: https://policies.google.com/privacy
1.5 Hosting and platform – WordPress.com / Automattic
For information on data collected by the hosting/platform infrastructure: Privacy notice: https://automattic.com/privacy/
1.6 Content optimization (SEO) – Yoast SEO
Yoast SEO is used exclusively to optimize the site’s editorial content (meta tags, sitemap, readability). It is not used for unlawful purposes. Privacy notice: https://yoast.com/privacy-policy/
1.7 Page builder – Elementor
Elementor is used to build and lay out the site’s pages. Any information collected by Elementor may be used to provide technical support, improve the plugin, and for informational communications. Privacy notice: https://elementor.com/privacy-policy/
1.8 Tag and internal link management – TaxoPress
TaxoPress is used for the automatic management of tags, categories, and internal links between site content, for editorial organization and SEO purposes. The plugin runs server-side on our hosting and does not transmit visitors’ personal data to third parties. Official site: https://taxopress.com/
1.9 Author and co-author management – PublishPress Authors
PublishPress Authors is used to manage and display information about article authors and co-authors (name, public bio, article archive). It processes only editorial data already made public by the editorial team, without transmission to third parties. Privacy notice: https://publishpress.com/privacy-policy/
1.10 Site optimization and caching – LiteSpeed Cache
LiteSpeed Cache is used to improve site performance (page caching, WebP image optimization, file minification). The plugin operates server-side and does not share personal data with third parties. Privacy notice: https://www.litespeedtech.com/privacy-policy
1.11 Site translation – TranslatePress
TranslatePress enables the site to be displayed in multiple languages. It may store a technical cookie to remember the language selected by the user during browsing. Privacy notice: https://translatepress.com/privacy-policy/
1.12 Donations – Buy Me a Coffee
The site includes a widget linking to the Buy Me a Coffee platform for voluntary donations from readers. Data related to the donation (payment data, email) is processed directly on the external platform, under its own privacy notice. Privacy notice: https://www.buymeacoffee.com/privacy
1.13 Payments – Stripe
For the purchase of content/subscriptions via the payment button, we use Stripe as our payment processor. Stripe processes payment data (card details, billing address) under its own privacy notice, acting as an independent data controller for such data. Privacy notice: https://stripe.com/en-it/privacy
1.14 Anti-spam – Antispam Bee
Antispam Bee protects the site from unwanted comments and spam by analyzing locally the data submitted through comment forms (e.g. IP address, comment content) without sending it to external third-party services. Plugin page: https://wordpress.org/plugins/antispam-bee/
2. Social media
The site displays a social icon linking to our Facebook page. No cookie is installed by Facebook and the user’s IP address is not sent to Facebook’s servers until consent is given. Privacy notice: https://www.facebook.com/privacy/policy/
X (Twitter)
The site displays a social icon linking to our X page. The user’s IP address is not sent to an X server until consent is given. Privacy notice: https://twitter.com/en/privacy
YouTube
We use YouTube videos embedded on the site. YouTube applies its own cookie and privacy policies, over which we have no control. No cookie is installed by YouTube and the user’s IP address is not sent to YouTube’s servers until consent is given (videos are loaded in “privacy-enhanced” mode where possible). Privacy notice: https://policies.google.com/privacy
Telegram
The site displays an icon linking to our Telegram channel. Privacy notice: https://telegram.org/privacy
TikTok
The site displays a social icon linking to TikTok. No cookie is installed by TikTok and the user’s IP address is not sent to TikTok’s servers until consent is given. Privacy notice: https://www.tiktok.com/legal/privacy-policy
3. Cookie Policy
Consent management – CookieYes
Cookie banner management and consent collection are handled by CookieYes, a Google-certified Consent Management Platform (CMP), which blocks non-essential cookies until the user’s explicit consent is given and logs the preferences expressed. Privacy notice: https://www.cookieyes.com/privacy-policy/
To make our site easier and more intuitive to use, we use cookies: small pieces of data that let us distinguish new visitors from returning ones and understand how users navigate the site. Data collected through cookies is used to make browsing more enjoyable and efficient.
Except as otherwise specified for the individual third-party services listed above, technical cookies do not record identifying information about the user. You can disable the use of cookies by customizing your browser settings (automatic deletion or a warning notice when cookies are stored). By continuing to browse without changing these settings, you consent to the use of technical cookies.
To learn more: https://www.aboutcookies.org/
Types of cookies used
Essential/necessary cookies Essential for navigating the site and using its core features (e.g. filling out forms, accessing restricted areas). Without these cookies, some services cannot be provided.
Performance cookies Collect aggregated and anonymous information about how users use the site (most visited pages, any errors encountered), solely to improve its functioning.
Functionality cookies Allow the site to remember choices made by the user (e.g. the language selected via TranslatePress, text size) and to provide customized features, such as watching an embedded video.
By using the site, the user agrees that such cookies may be installed on their device, unless consent is withdrawn via the CookieYes banner.
4. Data subject rights
Under Articles 15–22 of the GDPR, you have the right to:
- obtain confirmation of the existence of processing and access your personal data (right of access);
- obtain rectification of inaccurate data or the completion of incomplete data;
- obtain erasure of your data (right to be forgotten), in the cases provided for by law;
- obtain restriction of processing;
- receive your data in a structured format and transmit it to another controller (right to data portability);
- object to processing at any time;
- withdraw consent given at any time, without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with the data protection supervisory authority (in Italy, the Garante per la protezione dei dati personali, www.garanteprivacy.it).
To exercise these rights, you can contact the Data Controller using the details provided at the top of this notice.
5. Changes to this notice
The Data Controller reserves the right to make changes to this privacy policy at any time, publishing notice of such changes on this page. You are invited to check this page regularly, referring to the last update date shown below.
Last updated: July 8, 2026