Information reflecting the configuration on 18 October 2026. Details and references identified as missing are being completed; this page is not a compliance certification.
Controller and contact details
The proposed controller is SNIPER S.R.L., VAT number 12253320019, subject to confirmation of the actual processing activities. The internal company profile lists Via Valeggio, 10128 Torino (TO), Italy; the street number and completeness of these details require verification. A public privacy contact address remains to be confirmed.
Browsing and security
The server receives IP addresses, timestamps, requested URLs, browser information, any referring page and request outcomes. Current Nginx logs may include internal search terms. These data support delivery, fault diagnosis and service security. The proposed legal basis is legitimate interest in functionality and security, which the controller must assess and document.
Editorial access and content
Only authorised editorial users hold administrative accounts. The service processes identifiers, optional email addresses, protected credentials, permissions, sessions and change records. The legal grounds and authorisations for access protection and editorial work require review. Journalistic pages process information about subjects and sources: relevance, accuracy, rights and the rules applicable to journalism require separate editorial and legal assessment.
Cookies and external services
No advertising, analytics, newsletter, contact form, social tracker, remote font or third-party embed is configured. The administrative area uses technical session and CSRF protection cookies described in the Cookie Policy. Source links lead to external websites only when opened by the visitor.
Recipients and transfers
The service uses a VPS and encrypted backups on Google Drive through gdrive-crypt. The owner must verify the hosting provider’s identity, contractual roles, subprocessors, locations and safeguards for any international transfers. Encryption does not replace that assessment. Operational access must be restricted to authorised personnel.
Retention
Nginx rotates logs daily with two archives and a two-day maxage setting; active files and rotation times can extend actual retention. Docker logs are limited to 10 MiB per file and three files per container, without a guaranteed time-based expiry. Backups follow the existing five-day retention policy. Accounts, revisions and content remain in the database until removed under criteria still awaiting approval. The owner must validate actual retention periods, deletion procedures and legal retention duties.
Rights and complaints
Subject to applicable conditions and limits, individuals may request access, rectification, erasure, restriction, objection and portability where applicable. Requests should be directed to the controller’s contact address, which is currently being finalised. Complaints may be lodged with the Italian data protection authority, the Garante. Any limits connected with legal duties or journalism require case-specific assessment.