Privacy

Personal data processing notice

Provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).

⚠ Draft to be checked with the professional before publication: confirm the retention periods, the list of external processors actually used (e.g. the hosting provider) and any use of Google Fonts from a CDN. Add the last-updated date.

1. Data controller

Controller: Dr. Agr. Fabio Inverardi — Studio Invé
Registered office: Via Giuseppe Mazzini 36, 25020 Dello (BS), Italy
VAT no.: 03840830982
Contacts: info@studioinve.com · PEC fabioinverardi@pec.it · +39 334 866 3199

2. Data processed

Through the website contact form, the data that the user voluntarily provides are processed: first and last name, contact details (email or phone) and the content of the message. The hosting provider may also record, for technical and security purposes, navigation logs (including the IP address).

3. Purposes and legal basis

Responding to requests and providing the information or quote requested — legal basis: pre-contractual measures at the data subject's request (Art. 6(1)(b)) and consent given through the form (Art. 6(1)(a)).
Complying with legal, accounting and tax obligations in the event that an engagement is conferred — legal basis: legal obligation (Art. 6(1)(c)).

4. Methods and tools

Data are processed with IT tools, with measures adequate to ensure their security and confidentiality. Form submission is handled through the FormSubmit service, which forwards the message to the Controller's mailbox. The website loads its typefaces from Google Fonts: this may involve a transfer of technical data (including the IP address) to third-party providers, including outside the European Union, on the basis of adequate safeguards. To measure visits in aggregate form the website uses Cloudflare Web Analytics, which does not use cookies and does not collect identifying personal data.

5. Retention

Data are kept for the time strictly necessary to handle the request. Where a professional engagement is conferred, they are kept for the duration of the relationship and, thereafter, for the time required by legal, accounting and tax obligations (as a rule, 10 years).

6. Communication of data

Data are not disseminated. They may be processed, on the Controller's behalf, by parties appointed as data processors (hosting provider and form-forwarding service) and communicated to authorities or professionals where required by law.

7. Data subject's rights

At any time the data subject may exercise the rights provided by Articles 15-22 of the GDPR — access, rectification, erasure, restriction, objection and data portability — and withdraw the consent given, by writing to info@studioinve.com. It is also possible to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

8. Nature of the provision of data

Providing data is optional, but necessary in order to respond to the request: without it, it will not be possible to follow up on the contact.