Privacy & cookies

Data controller

The controller of the personal data collected through this website is the site owner. For any privacy request you can write to: [email coming soon].

What data we process

The website does not ask visitors to register and does not use analytics, advertising or profiling tools. Its only form is the one to request a consultation (see Consultation requests below).

The website is a set of static pages published by Cloudflare (the Cloudflare Pages service). As with any website, the provider automatically records some technical browsing data: IP address, date and time of the request, requested page, browser and operating system. The website has no reserved area for visitors (the "Reserved area" link at the bottom of the page leads to the content editor, hosted by Sanity and used only by the people who update the website) and keeps no other data about visitors.

Consultation requests

If you request a consultation, we process what you enter in the form: your full name, email, the type of event, and, if you give them, its date, its location and your message. It is used only to answer your request and to prepare the consultation.

The request is not stored on the website. When you press Send, the website checks that it does not come from an automated program (see "The form's spam check"); then Brevo, the service that delivers the website's email, sends it to the controller's mailbox, with your address as the one to reply to. We send you no automatic email (no confirmation, no newsletter) and your address is not added to any mailing list. Once sent, the request stays only in the controller's mailbox, with the controller's email provider, and in Brevo's sending logs.

Why we process it

Requests are used only to answer them and to prepare the consultation you asked for. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) of Regulation (EU) 2016/679, the "GDPR"). We do not use them for newsletters or marketing.

Browsing data, and the spam check described below, are used only to run the website and protect it from abuse and attacks. The legal basis is the controller's legitimate interest (Article 6(1)(f) GDPR).

We make no decisions based solely on automated processing, profiling included.

The form's spam check

To protect the form from automated submissions the website uses Cloudflare Turnstile. The check loads only once you start filling in the form: just reading the page does not start it. Turnstile looks at some technical data about the connection and the browser (including the IP address) only to tell a person from an automated program, under Cloudflare's own policy (https://www.cloudflare.com/turnstile-privacy-policy/).

Links to Instagram

The first section of the page shows still pictures from videos (reels) published on Instagram. The pictures are part of this website: nothing is loaded from Instagram while you read the page. If you click one, the video opens on Instagram (www.instagram.com), and from then on Instagram's own terms and privacy policy apply (https://privacycenter.instagram.com/policy/).

How long we keep it

Requests stay in the controller's mailbox for as long as it takes to answer them and prepare the consultation, and no longer than 24 months after they are sent; if an engagement follows, for as long as the relationship lasts. Brevo keeps its sending logs for the shortest period its settings allow.

Browsing data is kept by Cloudflare for the period set by its own policies and used only to run and protect the website.

Who can see it

Browsing data and the form pass through Cloudflare, Inc., the hosting provider (https://www.cloudflare.com/privacypolicy/). Requests are delivered by email by Brevo (based in France, in the European Union; https://www.brevo.com/legal/privacypolicy/). The website's texts and photos are managed with Sanity (https://www.sanity.io/legal/privacy); requests never reach it. These providers act as data processors. The data is not sold, transferred or disclosed.

Transfers outside the European Union

Cloudflare and Sanity may also process data outside the European Union, in particular in the United States. In that case the transfer relies on the safeguards provided by the GDPR: the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, for providers that take part in it, or the standard contractual clauses approved by the Commission (Articles 45 and 46 GDPR).

Cookies

The website sets no cookies for visitors: no profiling, analytics or third-party cookies, and none of its own. Only when needed to protect the website from automated traffic, the hosting provider may use strictly necessary technical cookies, which do not require consent.

Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing or data portability, or object to processing (Articles 15–22 GDPR) by writing to [email coming soon].

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (https://www.garanteprivacy.it).

Changes

This policy may be updated. The date of the last update is shown at the top of the page.