1. Data controller
The data controller is PIER DAVID SPANO, operating under the trading name _davstudios, with territorial reference in Fasano (BR), Italy.
Italian tax code: SPNPDV07H06F376I.
For information, privacy requests or data protection rights: info@davstudios.it.
2. Data processed
Depending on how the website is used, identity and contact details, professional information, communication contents and technical data required for operation and security may be processed.
When the “Start a Project” form is used, data may include name, company or brand, email, telephone number, city, preferred contact method, requested service, indicative budget, timing, notes and other information voluntarily supplied.
If a user chooses to subscribe to newsletters or promotional communications, the email address, subscription status and language, and the information needed to manage confirmation, delivery and unsubscribe requests may be processed.
Technical request data such as IP address, browser information and security signals may also be processed where necessary to prevent abuse, verify requests or deliver the service securely.
3. Purposes and legal bases
- Responding to enquiries and evaluating new projects: taking steps at the request of the data subject before entering into a contract.
- Preparing quotations, proposals and managing professional engagements: pre-contractual steps or performance of a contract.
- Meeting administrative, tax or legal duties: compliance with legal obligations.
- Protecting the website and preventing abuse: the controller’s legitimate interest in security and reliable service delivery, within the limits permitted by law.
- Sending newsletters or promotional emails: specific, optional consent that can be withdrawn at any time.
- Measuring website performance and general use through privacy-first aggregate analytics that do not rely on persistent cookies or identifiers, where configured consistently with applicable law.
4. Providing data
Fields marked as required must be provided in order to handle the relevant enquiry. Failure to provide them may prevent submission or make it impossible to provide an adequate response.
Optional information may be omitted without necessarily preventing submission.
Newsletter or marketing subscription is optional and does not affect the ability to request information, quotations or professional services.
5. Project form and local draft
If the user enables the “Preferences” category in the privacy settings, the website may store a draft of the “Start a Project” form locally in the browser so that completion can be resumed later.
The draft remains only on the user’s device and browser, is not sent to _davstudios before the form is submitted, and is automatically deleted within 7 days. It can also be removed by withdrawing the preference or clearing website data in the browser.
After a successful form submission, the local draft is removed.
6. Security and anti-spam
The “Start a Project” and newsletter forms use Cloudflare Turnstile to distinguish legitimate requests from automated or abusive traffic. For this purpose, Cloudflare may process technical data and security signals linked to the verification; the server may also submit the request IP address during token validation.
_davstudios does not use the information typed into the forms as content for Turnstile anti-spam verification.
7. Providers and recipients
Technical providers may be used to operate the website and connected services. They process data according to their respective roles, agreements and applicable terms.
- Netlify: hosting, website delivery and server functions used by the project and newsletter forms.
- Resend: transactional email delivery, subscription confirmations, contact management and newsletter or promotional email delivery.
- Cloudflare: Turnstile anti-spam protection and Cloudflare Web Analytics for aggregate performance and usage metrics.
- WhatsApp Business / Meta: if a user chooses the WhatsApp link, the communication takes place on the relevant provider’s platform.
- Other external services reached through ordinary links, including social networks or Buy Me a Coffee, operate under their own policies once the user leaves davstudios.it.
8. Analytics
The website uses Cloudflare Web Analytics in production for aggregate page-view and performance information. The configured implementation does not use cookies or localStorage to identify visitors, and Cloudflare states that Web Analytics does not collect or use visitors’ personal data.
This measurement is not used by _davstudios to profile individual users or deliver behavioural advertising.
9. Newsletter and promotional communications
Newsletters and promotional emails are sent only to users who have provided specific, freely given and optional consent or in any other limited circumstances permitted by applicable law.
Subscription uses email confirmation (double opt-in): the contact is added to the Resend newsletter lists only after the confirmation link sent to the supplied address is confirmed. The confirmation link is valid for a limited period.
Consent can be withdrawn at any time through the unsubscribe mechanism provided in the communication or by emailing info@davstudios.it. Withdrawal does not affect processing carried out before consent was withdrawn. Submitting a project enquiry does not automatically subscribe the user to marketing communications.
10. International transfers
Some technology providers may process or make data accessible outside the European Economic Area. Where applicable, transfers must rely on mechanisms recognised by data protection law, such as adequacy decisions, standard contractual clauses or other appropriate safeguards.
11. Retention
- Project enquiries that do not become a professional engagement: up to 6 months after closure or the last relevant interaction, unless longer retention is required to establish or defend a legal claim or comply with law.
- Client, project, billing or administrative data: for the periods required by applicable law and as necessary to manage the professional relationship.
- Local project-form draft: no more than 7 days in the user’s browser when the relevant preference is enabled.
- Newsletter and promotional data: until consent is withdrawn or the user unsubscribes, while retaining only what is strictly necessary to document and honour the opt-out where appropriate.
- Technical and security data: for the period strictly necessary for the relevant purpose or according to the technical retention periods of the providers involved.
12. Data subject rights
- Request access to personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion where the legal requirements are met.
- Request restriction of processing where applicable.
- Object to processing based on legitimate interests where applicable.
- Request data portability where applicable.
- Withdraw newsletter or marketing consent at any time.
- Lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.
13. Automated decision-making
_davstudios does not use data collected through the website to make solely automated decisions that produce legal or similarly significant effects on users.
14. Changes and contact
This policy may be updated when the website, providers or applicable requirements change. The latest update date appears at the top of this page.
For privacy or personal-data requests: info@davstudios.it.