This notice describes how we process the personal data of anyone who visits or uses the studiojem.it website, pursuant to art. 13 of Regulation (EU) 2016/679 («GDPR») and Italian Legislative Decree 196/2003 as amended by Decree 101/2018.
Data controller
The data controller is Veve di Udila Costin Eduard, trading as studio jem — VAT IT03883630927, registered office at Via Roma 35, 09037 San Gavino Monreale (SU), Sardinia, Italy. Certified email (PEC): eduard.costin@pec.it, email: eduard@studiojem.it. For any request about your personal data, write to info@studiojem.it.
What we process and why
Contact form. When you write to us from the Contact page we process your name, surname if given, email and the content of your message, only to reply. Before sending we ask you to confirm you have read this notice. Delivery is handled by Resend, which forwards the message to our inbox, and the request is stored on our systems. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
WhatsApp.The «Message us on WhatsApp» button composes a message on your device and opens WhatsApp with that text already written. When you press send we record on our systems the answers you gave the panel, your name if given and the composed text, so that we know a request has arrived and what it is about: not the conversation. That happens on WhatsApp (Meta Platforms), under its own terms and privacy notice, and we do not read it from here. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
Quote configurator. When you complete the configurator we process your project answers and the contact details you provide (name, optional surname, optional company, email, optional phone) to prepare and send you a proposal. Data is stored on our systems and may generate a draft quote in our internal management tool; we also receive a notification via Resend. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
The journey attached to your request. When you send a request — from the form, the configurator or the WhatsApp panel — alongside the fields you filled in we also receive the path you took through the site during that visit: the pages you saw, the steps of the configurator, the page you landed on, the site that brought you here if any, and the campaign parameters in the address. It is there so we understand what you need before calling you back, and answer with a proposal instead of a form.
That path stays on your device for the whole visit and only leaves it the moment you press send: if you send no request, it leaves nothing and reaches nobody. It is not a tracking tool and it does not follow you from one visit to the next. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
Contact clicks. The same applies when you tap a phone number, an email address, the WhatsApp button or the link to the contact or quote page: at that moment we record that the click happened, from which page and with the same path of the visit, without any data that identifies you. It tells us how many people call or write and from where. Same legal basis and retention as requests.
Browsing. The site uses no advertising trackers. It uses Google Analytics 4 to measure visits, but only if you consent from the cookie banner — see the cookie policy for details on measurement cookies and how to change your choice. Legal basis: consent (art. 6.1.a GDPR). Hosting systems keep technical logs (e.g. IP address) required to run and secure the service, under our legitimate interest (art. 6.1.f GDPR).
Nature of data provision
Providing the data requested in the contact form and the quote configurator is optional but necessary to receive a reply or a proposal: without it we cannot get back to you. Consent to measurement cookies is always optional and can be withdrawn at any time, with no effect on your ability to use the site.
How we process your data
Processing takes place using IT and telematic tools, with logic strictly related to the purposes stated above and in a way that ensures the security and confidentiality of your data. We do not use automated decision-making or profiling under art. 22 GDPR.
Retention
We keep messages, quote requests and the attached journey for 24 months from the request, after which they are deleted automatically. The term is set in our systems, not left to good intentions.
The exception is data we must keep longer to meet legal obligations (for example tax and accounting rules, should the relationship continue into a contract). You can request deletion at any time, even before the 24 months, subject to those obligations.
Recipients and international transfers
Your data is never sold or shared for marketing. It is processed by the technical providers that make the service possible, appointed as data processors under art. 28 GDPR where applicable. Here they are, by name and by what they do:
- Vercel Inc. — hosting for the site and for the functions that receive your requests.
- Neon Inc. — the database where requests are kept. The instance we use is hosted on Amazon Web Services infrastructure in the United Kingdom.
- Resend — email delivery: the notification to us and the receipt to you.
- preventivi.studiojem.it — our own quote management tool, where a configurator request can become a draft quote.
- Google Ireland Limited — Google Analytics 4, and only if you consent to measurement: it processes browsing data in aggregate form, never the content of your requests.
Some of these providers are established, or process data, outside the European Economic Area. Where that happens the transfer relies on the safeguards of Chapter V of the GDPR — a European Commission adequacy decision or the standard contractual clauses. For the measurement side, the details are in the cookie policy.
Your rights
Under articles 15-22 of Regulation (EU) 2016/679 you may at any time request access to your data, rectification of inaccurate data, erasure, restriction of processing, data portability, and object to processing; you may also withdraw any consent given, without affecting the lawfulness of processing carried out before the withdrawal. To exercise these rights, write to info@studiojem.it. You may also lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Minors
The site and its contact forms are not intended for anyone under 16 years of age, and we do not knowingly process children's data. If you believe a minor's personal data has reached us, write to info@studiojem.it to request its deletion.
Data security
We adopt adequate technical and organisational measures to protect the data we process — encrypted connections (HTTPS), system access limited to those who need it, backups of critical data — to reduce the risk of destruction, loss, alteration or unauthorised access.
Incoming requests are read from a private area of the site: password-protected, excluded from search engines, and open only to whoever in the studio has to answer you. It is not a page you reach by browsing — without credentials it does not exist.
Changes to this notice
If we change our measurement tools or introduce new processing in the future, this notice and the cookie policy will be updated before activation, with the last-updated date shown at the top of the page.