Privacy Policy

Last updated: 28 September 2026

This notice explains how we handle personal data on coredatastudio.com, as required by article 13 of the EU General Data Protection Regulation (GDPR, Regulation 2016/679).

Data controller

Core Data Studio S.r.l.
Via Michelangelo Schipa 35, 73100 Lecce (LE), Italy
VAT number and tax code (P.IVA e C.F.) 05481250750 · REA LE-370212
Share capital (capitale sociale) €10,000
Email: info@coredatastudio.it · Certified email (PEC): coredatastudio@pec.it

What we collect and why

Contact form and email. Your name, email address and message, used only to reply to your request and, if you ask for it, to prepare a quote. Legal basis: steps taken at your request before entering into a contract (GDPR art. 6(1)(b)). These fields are needed to reply: without them we cannot answer you.
News from the studio. Only if you tick the optional newsletter box, we use your email address to send occasional updates. Legal basis: your consent (art. 6(1)(a)). Not ticking it has no effect on your request. You can withdraw consent at any time by writing to us or using the unsubscribe link in each email; this does not affect what was done before.
Technical data. When you visit the site, our server processes your IP address and basic request data (such as browser type and time of the request) to deliver the pages and keep them secure. We do not keep access logs. Legal basis: our legitimate interest in running a secure website (art. 6(1)(f)).

We do not use your data for automated decision-making or profiling.

Cookies and analytics

The site works without any cookie. Only if you accept in the cookie banner do we load Google Analytics 4, to count visits and understand which pages are useful. Until you choose, Google receives nothing and no cookie is set. Closing the banner counts as a refusal.

Analytics cookies, only with your consent: _ga and _ga_<ID>, set by Google Analytics to tell visits apart and keep track of a session. They last up to 13 months. Google Signals and advertising features are turned off, and Google Analytics 4 does not store IP addresses. Legal basis: your consent (GDPR art. 6(1)(a) and art. 122 of the Italian Privacy Code).
Your choice: the site saves your answer (accepted or refused) in your browser's local storage under cds-consent, so it does not ask again at every visit. This is strictly necessary and needs no consent. We ask again after about 6 months.

You can change your choice at any time with Cookie settings in the footer of the home page. If you withdraw consent, the analytics cookies are deleted. You can also block or delete cookies in your browser settings.

The site uses no advertising cookies and no social media plugins. Fonts are served from our own domain, so no font service receives your IP address.

Who receives the data

We do not sell or share your data. It is processed only by the providers we use to run the site, acting on our behalf as data processors:

Hetzner Online GmbH (Germany), which provides the server the site runs on, inside the European Union.
Formspree, Inc., which receives messages sent through the contact form and forwards them to our inbox.
Google Ireland Limited (Google Analytics), only if you accept analytics cookies.
Our email provider, which stores the messages we receive.

Formspree is based in the United States, and Google may process analytics data in the United States. These transfers of data outside the European Union rely on the safeguards required by the GDPR, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

Enquiries are kept for as long as needed to handle them and for up to 24 months afterwards. If an enquiry leads to a contract, the retention periods required by Italian law for business records apply. Newsletter data is kept until you unsubscribe. Analytics data is kept in Google Analytics for 14 months.

Your rights

You can ask to access, correct or delete your data, restrict or object to its use, or receive it in a portable format (GDPR articles 15 to 21), by writing to info@coredatastudio.it. We reply within one month. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

Changes

If we change how we handle data, we will update this page and the date at the top.