Privacy notice

The data controller is Mirko Tritella, a natural person, with address for the project at Università degli Studi di Milano-Bicocca, Laboratorio DataAI, Edificio U14, Viale Sarca 336, 20126 Milano, Italy. Email: privacy@parliamentrag.it

The University is only the project's address. It is not the data controller and does not decide how we use the data.

www.parliamentrag.it is the website of ParliamentRAG, a non-commercial research project. For questions not about privacy, write to contatti@parliamentrag.it.

You do not need an account to use ParliamentRAG. We process this data:

Technical browsing data: IP address, date and time, requested page and browser type. The hosting provider records it to run the site and for security.

Answers to optional surveys, such as the demo survey: the scores, the role you state and the comment, if you write one.

Email address, if you subscribe to the newsletter. Brevo manages it (see “Newsletter”).

The text you paste on the Verification page, with the question if you write one. We use it only to check the three guarantees: we do not store it and do not log it.

API token requests, if you send us one: name, email and the token we assign you. Questions you send to the API are covered by the Fascicoli privacy notice (www.fascicoli.it/privacy).

We run the service and protect it from abuse and attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

If you leave us questions, ratings or survey answers, we use them to evaluate the system, improve it and publish scientific research. The legal basis is legitimate interest, with the research safeguards of Art. 89 GDPR.

We send you the newsletter only with your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time.

When you write a question or a comment, leave out personal data about you or other people, and do not state your political opinions. We do not need them to answer, and we would store them with the text.

We rely on these providers. They process the data on our behalf, as processors (Art. 28 GDPR).

Railway Corp. (United States): hosts the site and the service that runs the Verification. On servers in the European Union it also holds the database with the survey answers.

Hetzner Online GmbH (Germany): on a server in Finland it hosts the database of parliamentary records, where the Verification looks up the quotes, and keeps the survey answers received until 5 October 2026.

OpenAI Ireland Ltd. (Ireland): for the Verification page it turns the question into numbers (embeddings), or the first lines of the answer if there is no question, to compute authority on the topic. OpenAI may also process this data in the United States and keep it for up to 30 days to monitor abuse. It does not use it to train its models.

Plausible Insights OÜ (Estonia): counts visits to the site on servers in the European Union, without cookies (see “Visit statistics”).

Sendinblue SAS, Brevo brand (France): manages the newsletter.

We do not sell the data or hand it to third parties for advertising. We disclose it to authorities only when the law requires it.

Railway is based in the United States and OpenAI may process data there too. For these transfers we rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

Survey answers: until 31 December 2027.

Token requests: while the token is active, until 31 December 2027 at the latest.

Technical browsing data: for the log retention period of the hosting provider, 30 days at most.

Text of the Verification page: we do not keep it. It stays in memory only while the check runs.

After these periods we delete the data.

ParliamentRAG uses only first-party technical tools: they make the site work and remember your choices. We use no advertising or profiling tools. We count visits with Plausible, which uses no cookies (see “Visit statistics”).

These tools do not need your consent, so you will not see a banner (Italian Data Protection Authority guidelines of 10 June 2021).

Local storage stays in your browser until you clear it. In your browser we store one item only:

famiglia-tema (local storage): the light or dark theme you choose.

You can clear this data in your browser settings. The site keeps working.

To count visits we use Plausible Analytics, by Plausible Insights OÜ (Estonia), with servers in the European Union. Plausible uses no cookies and does not store the IP address: none of the data collected identifies who visits the site.

We collect, in aggregate form, the page visited, the referring site, the country, the device type and the browser.

The legal basis is our legitimate interest in knowing how much and how the sites are used (Art. 6(1)(f) GDPR).

You can subscribe to the ParliamentRAG newsletter from the project's sites. Brevo (Sendinblue SAS, France) manages the list. We do not store your email address in our systems and we do not link it to the questions you ask.

Subscribing requires an email confirmation (double opt-in). Brevo records the date and IP address of the confirmation as proof of consent.

Every email contains an unsubscribe link. You can also withdraw consent by writing to privacy@parliamentrag.it. We keep the address while you stay subscribed.

You can ask for access to your data, rectification, erasure, restriction of processing and portability (Arts. 15-22 GDPR).

You can object at any time to processing based on legitimate interest (Art. 21 GDPR).

Write to privacy@parliamentrag.it. Without accounts we cannot tell who wrote what: to find your data, tell us the text of the question, the date or the link. We reply within one month.

If you think we process your data unlawfully, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Giving us data is optional. Without technical browsing data, though, the site cannot work.

We make no automated decisions that produce legal effects on you (Art. 22 GDPR).

ParliamentRAG is meant for people aged 14 and over.

ParliamentRAG shows data about deputies, senators and members of the Government: names, speeches, votes and roles. We take it from the official open data of the Chamber and the Senate (dati.camera.it, dati.senato.it) and process it because of these people's public role.

If you find an error about you, write to privacy@parliamentrag.it: we will check it and correct it.

If we change this notice, we update the date at the top of the page.