Privacy Policy
Last updated:
This policy describes how the personal data of users visiting the website () is processed, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the applicable Italian legislation on the protection of personal data and cookies (Legislative Decree 196/2003, as amended, and the ePrivacy Directive).
1. Data Controller
The Data Controller is .
Address:
VAT number:
For any privacy-related request, you can contact the Data Controller at .
2. Types of data processed
While browsing the website, the following data may be processed:
- Browsing data — IP address, date and time of access, requested URLs, browser type and operating system, collected in aggregate form or in the hosting provider’s server logs for security purposes and to ensure the service works properly.
- Data provided voluntarily — for example, if you contact the Data Controller by e-mail (your e-mail address and the content of your message).
- Cookies and similar technologies — as described in the dedicated section.
The website does not require visitors to register a user account and does not currently use third-party analytics or marketing tools (e.g. Google Analytics, Meta Pixel).
3. Purposes and legal bases
- Providing the website and its content (displaying projects, images, menus and public pages) — legal basis: pre-contractual measures / legitimate interest in presenting the Controller’s professional work (Art. 6(1)(b) and (f) GDPR).
- Security, abuse prevention and technical maintenance (server logs, protection of the administration area) — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Protection of the administration area (reserved exclusively to the Data Controller and not accessible to visitors), including blocking repeated failed login attempts — legal basis: the Controller’s legitimate interest in securing their own website (Art. 6(1)(f) GDPR).
- Embedding of third-party multimedia content (Vimeo) — legal basis: legitimate interest in delivering the website’s content (Art. 6(1)(f) GDPR).
- Replying to contact requests sent spontaneously — legal basis: pre-contractual measures or legitimate interest (Art. 6(1)(b) and (f) GDPR).
- Legal obligations, where applicable — legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
4. Cookies and technical storage
Details on the types of cookies, their purposes and how consent is managed are available in the Cookie Policy. In summary, the website may use:
- A technical session cookie (the PHP session cookie), used exclusively by the Data Controller to access the administration area, which is not accessible to visitors. It is never set for visitors browsing the website.
- Third-party content: the Vimeo video player, embedded with Vimeo’s “Do Not Track” option enabled, which prevents it from tracking session data, including cookies.
The Data Controller does not use profiling or behavioural advertising cookies.
You can also manage or block cookies through your browser settings. Blocking third-party content may prevent videos from playing correctly.
5. Recipients and third parties
Within the limits of the purposes described above, data may be disclosed to:
- Hosting provider — (), which provides the website infrastructure (web space, database, technical logs).
- Vimeo (Vimeo.com, Inc. and its group companies) — when the embedded video player is loaded (homepage, Commercial page and project pages with videos). Vimeo receives the technical connection data needed to deliver the video (such as your IP address). The player is embedded with the “Do Not Track” option enabled, so it does not track session data, including cookies. Vimeo privacy policy: vimeo.com/privacy.
- Any technical suppliers that are strictly necessary (e.g. IT maintenance), bound by confidentiality obligations.
If data is transferred to countries outside the EU (for example in connection with US-based services), the Data Controller will rely on the safeguards provided by the GDPR (adequacy decisions, standard contractual clauses or other appropriate measures), where applicable, and on the privacy policies of the individual providers.
6. Data retention
- Server browsing logs: kept by the hosting provider () on its own infrastructure, for the period set by its security policies and by applicable law. The Data Controller does not download or keep copies of these logs.
- Contact e-mails: for as long as necessary to handle the request and to comply with any legal obligations.
- Failed login attempts to the administration area: the IP address is stored only in pseudonymised form (as a hash) and used for 15 minutes to block repeated attempts; expired entries are deleted automatically at the next login attempt.
- Content published on the website (images, texts): until it is modified or removed by the Data Controller.
7. Provision of data
Browsing the website is free. Without the technical browsing data, the service may not be delivered correctly. Sending contact e-mails is optional.
8. Your rights
Within the limits set by the GDPR, you have the right to:
- access your data (Art. 15);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20), where applicable;
- object to processing (Art. 21);
- withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.
Requests should be sent to . You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it) or with the supervisory authority of your country of residence.
9. Minors
The website is not intended for children under 14 and does not knowingly collect personal data from minors. If such data comes to the Data Controller’s attention, it will be deleted.
10. Changes
The Data Controller may update this policy. The updated version will be published on this page, together with the date of the latest update.