MentorAgent
Menu
Italiano

Privacy notice

Last updated:

This page explains what personal data is processed when you visit mentoragent.net or its documentation at docs.mentoragent.net, or write to us, and why. It is the information required by Article 13 of the EU General Data Protection Regulation (GDPR).

Who is responsible

The site and its documentation are run by Emanuele Longo and Antonio Macrì, two private individuals who act as joint controllers under Article 26 GDPR.

For anything about your data, write to privacy@mentoragent.net. It is the single contact point for both of us.

We have agreed between us how we share our obligations under the GDPR, as Article 26 requires. In short: we decide together why and how data is processed, we handle requests from data subjects together through the address above, and each of us is answerable to you. The essence of the arrangement is available on request: write to privacy@mentoragent.net. Whatever the arrangement says, you can exercise your rights with each of us (Article 26(3)).

What data we process

When you visit the site or the documentation. As with any website, the server receives some technical data with every request: your IP address, the date and time, the page or file requested and your browser's user agent. We use it to deliver the pages and to keep the sites secure.

Visit statistics, on mentoragent.net only. For each request, the server records the page, the date and time, how long the answer took, the result code, the site you came from (only its domain, never the full address) and your browser's user agent, as well as any server errors. Your IP address is removed before these data are recorded: it isn't stored, and no location is worked out from it. We use these data in aggregate, to see which pages are read and which sites visitors come from, and to find errors. They are collected on the server: there is no script in the pages and no cookie, and we don't use them to recognize you or to build a profile.

When you write to us. If you email privacy@mentoragent.net or security@mentoragent.net, we receive your email address, your message and anything you attach.

That's all. No cookies, no tracking scripts, no profiling, no forms, no advertising. Fonts, scripts and stylesheets come from the sites themselves: opening a page doesn't load anything from other websites, except the authors' photos on the About page, which come from Gravatar (see below). The display preferences you choose, such as the theme, stay in your browser, as described under Cookies.

Who processes the data for us, and where

We use two providers, appointed as processors under Article 28 GDPR:

  • Microsoft (Microsoft Ireland Operations Limited, Dublin, Ireland) hosts the site and the documentation on Azure App Service, in the Italy North region in Milan; it collects the visit statistics of mentoragent.net with Azure Monitor Application Insights, in the same region; and it runs the DNS of mentoragent.net (Azure DNS).
  • Aruba S.p.A. (Ponte San Pietro, Bergamo, Italy) runs the DNS of mentoragent.it and mentoragent.tech and their redirects to this site, and hosts our mailboxes. By contract, Aruba keeps the data in data centers in the European Union.

Only the two of us have access to the emails and to the visit statistics. We don't share your data with anyone else, unless the law requires it.

For some of its own business operations, such as billing or aggregated statistics on how its service runs, Microsoft acts as an independent controller under its own terms.

The About page loads the authors' photos from Gravatar, a service of Automattic Inc. (San Francisco, United States). When you open that page, your browser asks gravatar.com for the images, so Gravatar receives your IP address and your browser's details, as an independent controller under its own privacy policy. The page sends no referrer, and if an image doesn't load it shows the authors' initials. The links to the authors' profiles are read from Gravatar by our server, without any data about you.

Transfers outside the EEA

The sites and the visit statistics are hosted in the Azure Italy North region, in Milan, and Microsoft has committed to store and process the data of these services within the EU and the EFTA countries (the EU Data Boundary); Switzerland, the only EFTA country outside the European Economic Area, is covered by an adequacy decision of the European Commission. In the limited cases that Microsoft documents, such as security operations, technical support and the routing of network traffic, personal data may be transferred outside these countries, including to the United States.

In those cases Microsoft applies the European Commission's standard contractual clauses (Decision (EU) 2021/914) and is certified under the EU-U.S. Data Privacy Framework (adequacy decision (EU) 2023/1795). The details are in Microsoft's Data Protection Addendum, and we can send you a copy of the safeguards on request.

How long we keep data

  • Site logs. The application logs of the site and the documentation don't record IP addresses, and we haven't turned on access logs on the hosting platform. Microsoft keeps its own system logs in pseudonymized form, for the minimum time set for each type of log, and uses them only to run and secure the service. We have no access to them.
  • Visit statistics. 30 days; then they are deleted automatically.
  • Emails. For as long as we need to handle your request, and no longer than 24 months after our last exchange, unless we need them to establish, exercise or defend a legal claim.

Your rights

You can ask us for access to your data, rectification, erasure, restriction of processing and, where it applies, data portability (Articles 15 to 20 GDPR). Write to privacy@mentoragent.net. We reply within one month; for complex requests this can be extended by two months (Article 12(3)). We may ask for some information to confirm who you are.

Right to object. You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Article 21 GDPR). We'll stop unless there are compelling legitimate grounds, such as protecting the site from an ongoing attack. Keep in mind that the site can't deliver a page to you without processing your IP address.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the supervisory authority of the EU country where you live or work, or where the alleged infringement took place.

Cookies

Neither site uses cookies or any tracking or profiling technologies, such as pixels or fingerprinting. That's why there is no cookie banner.

In your browser's local storage, the sites keep only the preferences you choose yourself, and only after you make the choice:

  • theme, on mentoragent.net and on docs.mentoragent.net: the light or dark theme, if you change it with the button at the top. Each site keeps its own: a choice made on one doesn't apply to the other;
  • mentoragent-docs:tab:{group name} (today only mentoragent-docs:tab:framework), on the documentation: the tab you picked in a group of tabs that is kept in step (for example the front-end framework: React, Angular, Vue or JavaScript), so that the same tab is shown in the other groups and on your next visit;
  • mentoragent-docs.search-slash, on the documentation: set to off only if you turn off the "/" shortcut that opens the search; otherwise it doesn't exist.

They aren't sent to us, and you can delete them from your browser settings by clearing the site data for mentoragent.net or docs.mentoragent.net.

Like any browser, yours may keep a copy of the pages in its cache and remember that the sites must be opened over HTTPS. This only serves to show you the sites, and we don't use it to recognize you.

Changes

If the way we process data changes, we'll update this page and the date at the top.