Privacy Policy

This privacy policy explains how this personal website (the “Website”) handles personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”). The Website is a personal portfolio and does not provide user accounts, user registration, contact forms, comments or personalised services.

1. Data controller

The data controller is Yintong Zhou. For privacy-related requests, you can contact the controller at contactdm.yt@gmail.com.

2. Personal data collected

The Website does not intentionally collect personal data through forms, accounts, registrations or marketing tools. You can browse the publicly available pages without providing your name, email address or other personal information.

As with any website, the hosting infrastructure may temporarily process technical information needed to deliver and secure the Website, such as IP address, request date and time, requested resource, browser information and error or security events. This information is handled by the hosting provider in its role as infrastructure provider and is not used by the controller to create user profiles.

3. Voluntary communications

If you voluntarily contact the controller by email, the controller will process the information contained in your message, including your email address and any information you choose to provide, only to respond to your request and manage the correspondence.

The legal basis is Article 6(1)(b) GDPR where the request concerns steps prior to a contract, or Article 6(1)(f) GDPR based on the legitimate interest in replying to communications and protecting the controller’s rights. Messages are kept only for as long as reasonably necessary to handle the request and any related legal obligations.

4. Cookies and similar technologies

The Website does not intentionally use analytics, advertising, profiling or social tracking cookies. It does not store preferences or identifiers in the browser. Strictly necessary technical storage may be used by the hosting infrastructure or security components where required to operate the Website; this is not used for marketing or behavioural tracking.

For more information, see the Cookie Policy.

5. Recipients and external links

Data may be accessible to hosting, security and email service providers only when necessary for the purposes above. The Website also contains links to third-party websites, such as GitHub and LinkedIn. Those services operate as independent controllers under their own privacy policies when you visit them. The controller is not responsible for their processing activities.

6. International transfers

The controller does not intentionally transfer personal data outside the European Economic Area. A provider used for hosting or email may process data in another country; where this occurs, the provider is responsible for using an appropriate GDPR transfer mechanism, such as an adequacy decision or standard contractual clauses.

7. Your GDPR rights

Subject to the conditions and limitations established by the GDPR, you may request access to, rectification or erasure of your personal data, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time.

To exercise your rights, contact contactdm.yt@gmail.com. You also have the right to lodge a complaint with the competent supervisory authority, in Italy the Garante per la protezione dei dati personali.

8. Changes to this policy

This policy may be updated when the Website or its processing activities change. The latest version will always be published on this page.