Privacy
policy.

1. Data controller

The data controller is the Studio Tregnaghi entity or professional who receives and manages the request. Identification and contact details are listed on the Legal information page.

Communications are managed through studiotregnaghi@gmail.com, which may also be used for privacy requests and the exercise of data-protection rights.

2. Types of data processed

The following data may be processed:

• data voluntarily provided through the contact form, email or telephone, including name, contact details, calling code and the content of the request;
• documents or attachments voluntarily sent by the data subject;
• technical data required for website operation and security, such as IP address, technical logs and device or browser information.

When you press “Send request”, form data is transmitted to the website server and forwarded through Cloudflare Email Service to studiotregnaghi@gmail.com, hosted on Gmail. The form does not create a separate request archive on the website; messages are retained in the firm’s correspondence. Cloudflare Turnstile processes technical browser and connection data to verify visitors and prevent spam.

3. Purposes and legal bases

• Managing enquiries, information requests and quotations. Legal basis: pre-contractual measures requested by the data subject and/or legitimate interest in managing communications.
• Compliance with legal obligations, where applicable, including tax, accounting and professional obligations.
• Protection of the controller's rights, management of disputes, prevention of abuse and legal defence.

The firm does not use the data received for automated marketing or promotional communications without separate consent where required.

4. Processing methods and security

Processing is carried out through digital and/or paper tools in accordance with lawfulness, fairness, transparency and data minimisation. Appropriate measures protect data from unauthorised access, loss, disclosure or alteration.

5. Provision of data

Providing data is optional, but essential contact information is required to respond. Without it, the firm may be unable to manage the request.

6. Data recipients

Where necessary, data may be disclosed to:

• providers of the platform, hosting and related technical services;
• IT, maintenance and security providers;
• email and communication service providers;
• professionals and advisers involved in the request or in protecting rights;
• competent authorities where required by law.

Where required, providers processing data on behalf of the controller act as processors under Article 28 GDPR.

7. Transfers outside the EU

Technical and email services may involve transfers to countries outside the EU. Such transfers are carried out under the GDPR using appropriate safeguards, including Standard Contractual Clauses or other lawful instruments.

8. Retention periods

• Enquiries and contacts: for as long as needed to manage the request and generally up to 24 months after closure, unless legitimate needs require longer retention.
• Professional relationships: for the periods required by applicable law.
• Disputes or legal protection: for as long as necessary to defend rights.

9. Data-subject rights

Data subjects may exercise the rights under Articles 15–22 GDPR, including access, rectification, erasure, restriction, objection and portability where applicable.

Requests may be sent to studiotregnaghi@gmail.com or to the certified email addresses on the Legal information page. Data subjects may also lodge a complaint with the Italian Data Protection Authority.

10. Children

The website and services are not intended for children. Anyone who believes a child has submitted personal data may contact the firm to request its removal.

11. Changes to this policy

This policy may be updated at any time. The current version will be published on this page with its latest update date.

12. Technical services and analytics

The website is hosted on OpenAI Sites. Cloudflare provides domain management, DNS, delivery and security services. These services may process IP addresses and technical logs and use security cookies such as __cf_bm to prevent automated traffic and abuse.

We use Cloudflare Web Analytics for aggregate statistics on page views, traffic sources, country, browser, device and performance, including EU visitors. The beacon does not use advertising cookies, collect contact-form content or record sessions. Separately, the contact form uses Cloudflare Turnstile for spam protection and Cloudflare Email Service to forward request details to the firm’s Gmail inbox.

Provider information: OpenAI · Cloudflare · Cloudflare Web Analytics.