Personal Data Processing Notice
Pursuant to Regulation (EU) 2016/679 (“GDPR”), this notice describes how the personal data of users who visit the Studiosavia website and interact with the services and features available online is processed.
This notice applies exclusively to the Studiosavia website and not to any other external websites that may be reached via links contained on the site’s pages.
1. Data Controller
The Data Controller is:
Studiosavia
Enrico Savia
Via Pinerolo 52 – 10045 Piossasco (TO), Italy
Email: info@studiosavia.com
Phone: +39 011 3490809
VAT No.: 04181000011
2. Types of data processed
The website may process the following categories of personal data:
a) Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.
These may include, by way of example:
- IP addresses or domain names of the devices used;
- URI addresses of the requested resources;
- time of the request;
- method used to submit the request to the server;
- parameters relating to the user’s operating system and computing environment.
b) Data voluntarily provided by the user
The optional, explicit and voluntary sending of messages via the contact form or the email addresses shown on the site results in the acquisition of the sender’s contact details and of all personal data included in the communication.
These may include:
- first and last name;
- email address;
- phone number;
- company or organisation;
- content of the message and information voluntarily provided.
The Italian Data Protection Authority (Garante) notes that browsing websites may involve the processing of data relating to identified or identifiable individuals, and its public model notices typically indicate the controller, the legal basis, the purposes and other essential elements of the notice.
3. Purposes of processing
Personal data is processed for the following purposes:
- to enable browsing and the correct functioning of the website;
- to respond to requests sent via the contact form or by email;
- to manage pre-contractual or informational communications requested by the user;
- to comply with legal, regulatory or tax obligations, where applicable;
- to protect the Data Controller’s rights, including in judicial or extrajudicial proceedings.
Should newsletters, marketing or profiling activities be introduced in the future, this notice will be supplemented with a dedicated section and specific legal bases. The Garante’s guidelines on cookies and tracking tools require a clear distinction between technical tools and processing activities that require consent.
4. Legal basis for processing
The processing of personal data is based, depending on the circumstances, on one or more of the following legal bases:
- performance of pre-contractual measures taken at the data subject’s request;
- compliance with legal obligations to which the Data Controller is subject;
- the Data Controller’s legitimate interest in the proper functioning of the website, the security of its systems and the handling of requests received;
- the data subject’s consent, where required by applicable law.
5. Processing methods
Data processing is carried out using IT, electronic and, where necessary, paper-based tools, in accordance with the principles of lawfulness, fairness, transparency, data minimisation, integrity and confidentiality.
Appropriate technical and organisational measures are adopted to protect personal data against unauthorised access, loss, disclosure, alteration or destruction.
6. Nature of data provision
The provision of browsing data is necessary for the technical use of the website.
The provision of data requested in the contact forms is optional, but failure to provide it may prevent the Data Controller from responding to the request or providing the requested service.
7. Data recipients
Personal data may be processed by parties authorised by the Data Controller and, where necessary, disclosed to third parties acting on behalf of the Data Controller, such as:
- IT and hosting service providers;
- technical and administrative consultants;
- professionals or collaborators involved in handling the request;
- public authorities or competent bodies, in the cases provided for by law.
Such parties process the data as data processors or as independent data controllers, depending on the case.
8. Transfer of data to third countries
Personal data is processed mainly within the European Economic Area.
Should any services used by the website require, for technical or organisational reasons, a transfer to third countries, such transfer will take place in compliance with applicable law and by means of adequate safeguards.
9. Data retention period
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected and, thereafter, within the limits permitted or required by applicable law.
In particular:
- data collected through contact requests will be retained for the time necessary to handle the request and any related developments;
- data processed to comply with legal obligations will be retained for the periods established by applicable law;
- browsing data will be retained for the time strictly necessary for technical and security purposes.
10. Data subject rights
The data subject may at any time exercise the rights set out in Articles 15 et seq. of the GDPR, including the right to:
- obtain confirmation as to whether personal data concerning them exists;
- request access to personal data;
- request rectification or updating of the data;
- request erasure of the data, in the cases provided for;
- request restriction of processing;
- object to the processing, in the cases provided for;
- receive the data in a structured, commonly used and machine-readable format, where applicable;
- withdraw consent, where processing is based on consent, without prejudice to the lawfulness of processing carried out prior to withdrawal;
- lodge a complaint with the Data Protection Supervisory Authority.
The Italian Data Protection Authority (Garante Privacy) provides general information on the GDPR, on data subjects’ rights and on how to lodge complaints with the Authority.
11. Exercising your rights
To exercise their rights, data subjects may contact the Data Controller at the contact details indicated in this notice.
Privacy contact email: info@studiosavia.com
12. Cookies and tracking tools
The website may use technical cookies and, where present, further tracking tools as indicated in the relevant Cookie Policy.
The Garante’s guidelines of 10 June 2021 distinguish between technical cookies and cookies or tracking tools that require valid, informed and demonstrable consent.
For further information, please refer to the website’s Cookie Policy.
13. Updates to this notice
This Privacy Policy may be updated over time, including in light of regulatory, technical or organisational changes. Users are therefore invited to review it periodically.
Last updated: 10 May 2026