DNS Personal Information

DNS Personal Information Notice1. IntroductionThis DNS Personal Information Notice ("Notice") explains how Marcela Giocanti ("we," "us," or "our"), a company registered in the United Kingdom, collects, processes, and protects information collected through our DNS services. This Notice applies to all users of our services globally.2. What Information We CollectWhen you use our DNS services, we may collect:

  • DNS queries: The domain names you request to visit (e.g., example.com)
  • IP addresses: Your device's IP address when making DNS requests
  • Timestamps: When DNS queries are made
  • Device information: Basic technical information about your device
  • Geographic location: Approximate location based on IP address
  • Technical metadata: Information about DNS request types and responses

3. How We Use Your InformationWe use the information collected through our DNS services to:

  • Provide and maintain our DNS services
  • Improve the performance and reliability of our services
  • Detect and prevent security threats, fraud, and abuse
  • Generate aggregated statistical data for service improvement
  • Comply with legal obligations and enforce our terms of service

4. Legal Basis for ProcessingWe process your personal information based on the following legal grounds:

  • Legitimate interest: To provide, maintain, and improve our DNS services
  • Consent: Where you have given explicit consent for specific processing activities
  • Contractual necessity: To fulfill our contractual obligations to you
  • Legal obligation: To comply with applicable laws and regulations

5. Data RetentionWe retain DNS query data containing personal information for no longer than 90 days, after which the data is either anonymized or deleted. Anonymized and aggregated data may be retained for longer periods for analytical purposes.6. International Data TransfersAs a UK-based company serving global customers, we may transfer your data to countries outside the UK and European Economic Area (EEA). When we do, we implement appropriate safeguards in accordance with UK and EU data protection laws, including:

  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Adequacy decisions by the UK or EU Commission
  • Other legally recognized transfer mechanisms

7. Your Rights and ChoicesYour Data Protection RightsDepending on your location, you may have certain rights regarding your personal information:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a structured format
  • Right to object: Object to processing based on legitimate interests
  • Rights related to automated decision-making: Challenge decisions made solely by automated systems

Opt-Out RightsYou have several options to opt out of our DNS data processing:

  1. DNS-over-HTTPS (DoH) Opt-Out:
    • Email info@marcelagiocanti.com to opt out
    • Add the "DoNotSellMyPersonalInformation" DNS flag to your queries
  2. Browser Settings:
    • Instructions on configuring your browser's DNS settings to use alternative DNS services
  3. Global Privacy Control (GPC):
    • We honor GPC signals as valid opt-out requests where required by law
  4. Regional Opt-Out Mechanisms:
    • California residents: Use the "Do Not Sell My Personal Information" link in our footer
    • Virginia, Colorado, Connecticut, and Utah residents: Use dedicated opt-out tools available in these states
    • EU/UK residents: Object to processing through our privacy portal

To exercise any of these rights, please contact us at info@marcelagiocanti.com.8. Data SecurityWe implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and vulnerability testing
  • Staff training on data protection and security

9. Children's PrivacyOur DNS services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.10. Changes to This NoticeWe may update this Notice periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated Notice on our website with a new effective date.11. Specific Regional InformationUnited Kingdom and European Economic AreaFor users in the UK and EEA, the controller of your personal data is Marcela Giocanti. The supervisory authority for data protection matters is the Information Commissioner's Office (ICO) in the UK.United StatesFor California residents, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide specific rights regarding personal information. Similarly, residents of Virginia, Colorado, Connecticut, and Utah have specific rights under their respective state privacy laws.Other RegionsWe comply with applicable local privacy laws in all regions where we operate. Please contact us for specific information about your region.12. Contact InformationIf you have questions or concerns about this Notice or our data practices, please contact us:

  • Email: info@marcelagiocanti.com
  • Website: www.marcelagiocanti.com

Effective Date:  21 April 2025