Davide Giorgetta Studio

Graphic Design + Digital Technology

Instagram

Privacy Policy

Last Updated: August 26, 2026

Davide Giorgetta Studio ("we", "us", or "our") is committed to protecting the privacy and personal data of visitors to our website (https://davidegiorgetta.com). This Privacy Policy explains how personal data is collected, used, stored, and protected in compliance with the EU General Data Protection Regulation (GDPR - Regulation EU 2016/679) and applicable national data protection laws.

1. Data Controller

Davide Giorgetta Studio
Tuscany, Italy
Website: https://davidegiorgetta.com
Contact Email: info@davidegiorgetta.com

2. Categories of Data Collected & Purposes of Processing

A. Contact Forms (General Inquiry & Start a Project)

When you submit a contact or quote request through our website, we collect personal data provided directly by you:

  • General Inquiry Form: Name, Email Address, and Message.
  • Start a Project Form: Name, Email Address, Company/Studio Name, Estimated Budget, Current Website URL, Desired Deadline, and Project Description.

Purposes & Legal Basis:

  • Responding to Requests: Processing is necessary to respond to your inquiries and take pre-contractual steps at your request (Art. 6(1)(b) GDPR).
  • Consent: Consent given via explicit acceptance checkboxes on our forms (Art. 6(1)(a) GDPR).

B. Analytics & Technical Telemetry

When you consent to analytics cookies, we collect pseudonymized usage telemetry:

  • Google Analytics 4 (GA4): Anonymized IP address, device type, browser information, pages visited, and interaction events.
  • Contentsquare: Mouse movements, clicks, scrolling activity, and page performance metrics. Text inputs in forms are automatically masked.

Purposes & Legal Basis:

  • Audience Measurement & UX Optimization: Processing is based strictly on your prior explicit consent (Art. 6(1)(a) GDPR) granted via our Cookie Consent banner.

3. Data Recipients & Third-Party Processors

We do not sell or trade your personal data. Data is processed exclusively by authorized personnel and trusted technical sub-processors:

  • Hosting & Infrastructure: Netlify Inc. (Cloud hosting and serverless functions).
  • Database & Storage: Supabase Inc. (PostgreSQL database storage for inquiry records).
  • Email Dispatch: Resend Inc. (Transactional email notifications).
  • Analytics Services:
    • Google Ireland Limited (Google Analytics 4 / Google Tag Manager).
    • ContentSquare SAS (User experience analytics).

All sub-processors are bound by Data Processing Agreements (DPAs) guaranteeing adequate data protection standards.

4. Data Retention Periods

  • Contact & Quote Inquiries: Retained for up to 2 years from the date of submission or for the duration of the commercial relationship.
  • Google Analytics Telemetry: Retained for 14 months in aggregated/anonymized form.
  • Contentsquare Data: Retained for 13 months in pseudonymized form.

5. Your Rights Under the GDPR

Under Articles 15–22 of the GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure ("Right to be Forgotten"): Request deletion of your personal data.
  • Restriction of Processing: Request temporary suspension of data processing.
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please email us at info@davidegiorgetta.com. You also have the right to lodge a complaint with a supervisory authority (in Italy: Garante per la protezione dei dati personali - www.garanteprivacy.it).