Privacy Policy

Last updated: May 15, 2026

1. Data Controller

The Data Controller for personal data collected through this website is:

Davide Padeletti
Freelance professional — VAT IT01602490110
La Spezia (SP), Italy
Email: privacy@dataartisanstudio.com

The Data Controller undertakes to update this document in the event of a change in legal form.

2. Data collected and purposes

2.1 Contact form

Through the contact form on the “Contact” page, we collect the following personal data:

  • Full name — to identify you in our reply
  • Email address — to respond to your request
  • Message — the content of your enquiry

Purpose: to respond to your contact request or enquiry about our services.
Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR).

Providing the data marked as mandatory is necessary to submit the contact request. Failure to provide such data makes it impossible to respond to the request.

2.2 Navigation data

The servers hosting this website automatically collect certain technical data (IP address, browser type, pages visited, access time) solely for the purpose of operating and securing the service. These data are not associated with identified individuals and are retained only as long as strictly necessary.

3. Cookies

This website does not use profiling cookies or user behaviour analytics. Strictly necessary technical cookies required for the website to function may be present. No tracking for advertising or marketing purposes is performed.

4. Data recipients

Data submitted via the contact form is processed by the following external data processor:

Google Cloud EMEA Limited — a company that manages the cloud infrastructure on which the website is hosted and through which contact form messages are processed. Data may be transferred to countries outside the EU; in such cases, processing is carried out in compliance with Arts. 44 et seq. of the GDPR through appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission. For more information: cloud.google.com/terms/data-processing-addendum.

Data is not shared with third parties for marketing purposes, sold, or disclosed to other parties, except as required by law.

5. Retention

Data submitted via the contact form is retained for the time necessary to handle your request and, in any case, no longer than 24 months from the date of submission, unless different legal obligations or ongoing disputes apply.

6. Your rights

As a data subject, you have the right to:

  • Access (Art. 15 GDPR): obtain confirmation that your personal data is being processed and receive a copy
  • Rectification (Art. 16 GDPR): request correction of inaccurate or incomplete data
  • Erasure (Art. 17 GDPR): request deletion of your data (“right to be forgotten”)
  • Restriction of processing (Art. 18 GDPR): request restriction of processing in certain cases
  • Objection (Art. 21 GDPR): object to the processing of your personal data
  • Portability (Art. 20 GDPR): receive your data in a structured, commonly used and machine-readable format

To exercise your rights, write to: privacy@dataartisanstudio.com

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

7. Changes to this policy

The Data Controller reserves the right to update this policy in the event of regulatory, technical or organisational changes. The “Last updated” date at the top of this page indicates the version currently in force.