Rank&Roll

Privacy Policy

Last updated: 9 July 2026

This privacy notice describes how the personal data of users visiting the website www.rank-roll.com (hereinafter, the “Site”) is processed, pursuant to Regulation (EU) 2016/679 (“GDPR”) and to Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (the “Italian Privacy Code”).

Rank&Roll is an independent editorial blog dedicated to rankings, data and stories on economics, sport, society, music, travel, films and books. The Site does not sell products or services, does not require registration and does not send newsletters.

1. Data Controller

The Data Controller is: Stefano Laurenzio

Contact email: privacy@rank-roll.com

No Data Protection Officer (DPO) has been appointed, as the legal requirements for doing so do not apply.

2. Categories of data processed and purposes

2.1 Browsing data (server logs)

The IT systems responsible for the operation of the Site acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols: IP addresses, access times, pages visited, browser type and operating system.

  • Purpose: to ensure the proper functioning and security of the Site, to compile anonymous statistics, and to establish liability in the event of computer crimes.
  • Legal basis: legitimate interest of the Controller (art. 6.1.f GDPR).
  • Retention: logs are retained by the hosting provider for the technical time strictly necessary, as a rule no longer than 90 days.

The Site does not use any web analytics tool or visitor profiling technology.

2.2 Comments

If a user leaves a comment on the Site, the data shown in the comment form is collected (name, email address, comment content), together with the IP address and the user agent string, in order to help detect spam.

  • Purpose: to allow the comment to be published and to prevent abuse and spam.
  • Legal basis: performance of a service requested by the data subject (art. 6.1.b GDPR); legitimate interest in spam prevention.
  • Retention: comments and their metadata are retained indefinitely, so that follow-up comments can be recognised and approved automatically.

2.3 Email communications

If a user contacts the Controller at the email address indicated, the data provided (email address, message content) is processed for the sole purpose of responding to the request.

  • Legal basis: performance of pre-contractual measures or response to requests from the data subject (art. 6.1.b GDPR).
  • Retention: for the time necessary to handle the request and in any case no longer than 24 months from the last contact.

3. Cookies

The Site uses exclusively technical cookies necessary for the operation of the platform and for consent management. For the full list of cookies used, their purposes and duration, please refer to the Cookie Policy.

The Site does not use profiling cookies, statistical cookies or advertising tools.

4. Data recipients

Personal data may be processed by the following party, acting as data processor pursuant to art. 28 GDPR:

  • Aruba S.p.A. (Italy) — hosting and infrastructure services for the Site.

Data is not sold, transferred or disclosed to third parties for marketing purposes.

5. EU-only processing

All personal data collected through the Site is processed within the European Union. No transfers to third countries are carried out.

6. Rights of the data subject

Pursuant to artt. 15-22 GDPR, the data subject has the right to:

  • obtain access to their personal data and to information relating to the processing;
  • request its rectification or erasure;
  • obtain restriction of processing or object to it;
  • receive the data in a structured format (portability);
  • withdraw consent at any time, without affecting the lawfulness of processing carried out prior to the withdrawal.

Requests may be sent to the Controller’s email address indicated in section 1. Users who have left comments may also request to receive an export file of the personal data held by the Site, or request its erasure, save for data that the Controller is required to retain for legal obligations or security reasons.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe that the processing infringes applicable law.

7. Nature of the provision of data

The provision of browsing data is implicit in the use of the Site. The provision of data for comments and email communications is optional: failure to provide it means only that the comment cannot be published or that no reply can be received.

8. Minors

The Site contains general editorial content and is not directed at children under the age of 14. The Controller does not knowingly collect personal data from minors.

9. Changes to this privacy notice

This privacy notice may be updated in the event of changes to the processing operations or to applicable law. The version in force is always published on this page, together with the date of the last update.