Privacy Policy

2. General information

This website uses no cookies, neither for tracking nor for analytics, and stores no information in your browser. The only collection of personal data happens through the contact form, described in point 3.

3. Contact form

If you use the contact form, the data you enter (name, email, company if given, message) is collected in order to reply to your request. Name, email and message are needed in order to reply to you; the company is optional.

Processing is necessary to respond to your enquiry and to take any steps you request before entering into a contract (Article 6(1)(b) of the GDPR). For messages that do not relate to a potential professional engagement, processing is based on the studio’s legitimate interest in responding to those who contact it (Article 6(1)(f) of the GDPR).

Your message is emailed to the studio’s mailbox via the mail server of Aruba S.p.A., the website’s hosting and email provider, which acts as a data processor. Messages are stored on Aruba’s servers in Italy. The website does not retain a copy.

To limit automated submissions, the server records the submission times for the preceding hour, linked to a fingerprint of the IP address that does not reveal the address itself. Records older than one hour are deleted each time the form is used.

Messages received are kept for as long as needed to handle your request and any professional relationship that follows from it, and afterwards for the time required by legal obligations.

The data is not disclosed to anyone other than the parties mentioned here, is not used for marketing purposes and is not subject to automated decision-making or profiling.

4. Automatic technical data

The web server automatically records standard log information (IP address, user agent, date and time of requests). This data is managed by Aruba and retained for as long as is necessary for the technical management and security of the service.

5. Your rights

You may request access to your personal data, its rectification or erasure, or restriction of its processing at any time. You may also object to processing and request data portability, where applicable under Articles 15–22 of the GDPR. To exercise these rights, write to the email address provided in section 1. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

6. Changes to this policy

The data controller reserves the right to update this privacy notice. Any updates will be published on this page.