This notice describes how we process the personal data of anyone who visits or uses the studiojem.it website, pursuant to art. 13 of Regulation (EU) 2016/679 («GDPR») and Italian Legislative Decree 196/2003 as amended by Decree 101/2018.
Data controller
The data controller is Veve di Udila Costin Eduard, trading as studio jem — VAT IT03883630927, registered office at Via Roma 35, 09037 San Gavino Monreale (SU), Sardinia, Italy. Certified email (PEC): eduard.costin@pec.it, email: eduard@studiojem.it. For any request about your personal data, write to info@studiojem.it.
What we process and why
Contact form. When you write to us from the Contact page we process your name, surname if given, email and the content of your message, only to reply. Before sending we ask you to confirm you have read this notice. Delivery is handled by Resend, which forwards the message to our inbox, and the request is stored on our systems. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
WhatsApp. The «Message us on WhatsApp» button composes a message on your device and opens WhatsApp with that text already written. When you press send we record on our systems the answers you gave the panel, your name if given and the composed text, so that we know a request has arrived and what it is about: not the conversation. That happens on WhatsApp (Meta Platforms), under its own terms and privacy notice, and we do not read it from here. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
Quote configurator. When you complete the configurator we process your project answers and the contact details you provide (name, optional surname, optional company, email, optional phone) to prepare and send you a proposal. Data is stored on our systems and may generate a draft quote in our internal management tool; we also receive a notification via Resend. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
The journey attached to your request. When you send a request — from the form, the configurator or the WhatsApp panel — alongside the fields you filled in we also receive the path you took through the site during that visit: the pages you saw, the steps of the configurator, the page you landed on, the site that brought you here if any, and the campaign parameters in the address. It is there so we understand what you need before calling you back, and answer with a proposal instead of a form.
That path stays on your device for the whole visit and only leaves it the moment you press send: if you send no request, it leaves nothing and reaches nobody. It is not a tracking tool and it does not follow you from one visit to the next. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
Contact clicks. The same applies when you tap a phone number, an email address, the WhatsApp button or the link to the contact or quote page: at that moment we record that the click happened, from which page and with the same path of the visit, without any data that identifies you. It tells us how many people call or write and from where. Same legal basis and retention as requests.
Browsing. The site uses no advertising trackers. It uses Google Analytics 4 to measure visits, but only if you consent from the cookie banner — see the cookie policy for details on measurement cookies and how to change your choice. Legal basis: consent (art. 6.1.a GDPR). Hosting systems keep technical logs (e.g. IP address) required to run and secure the service, under our legitimate interest (art. 6.1.f GDPR).
Nature of data provision
Providing the data requested in the contact form and the quote configurator is optional but necessary to receive a reply or a proposal: without it we cannot get back to you. Consent to measurement cookies is always optional and can be withdrawn at any time, with no effect on your ability to use the site.
How we process your data
Processing takes place using IT and telematic tools, with logic strictly related to the purposes stated above and in a way that ensures the security and confidentiality of your data. We do not use automated decision-making or profiling under art. 22 GDPR.
Project questionnaires
A personal link lets you complete a project brief with answers, references and attachments. Drafts are saved automatically so you can return later. The studio uses this information to prepare and follow the project and receives an email notification on submission. Previous submissions remain available to the studio if the brief is reopened.
Anyone with the link can access the brief. Do not share it outside the project or include passwords. The studio can revoke access. Questionnaire pages use no analytics and are excluded from indexing.
Briefs, answers, submission history and attachments are retained for 24 months from creation. Access ends at expiry and a daily process deletes the data. You can request earlier deletion.
Retention
We keep messages, quote requests and the attached journey for 24 months from the request, after which they are deleted automatically. The term is set in our systems, not left to good intentions.
The exception is data we must keep longer to meet legal obligations (for example tax and accounting rules, should the relationship continue into a contract). You can request deletion at any time, even before the 24 months, subject to those obligations.
Recipients and international transfers
Your data is never sold or shared for marketing. It is processed by the technical providers that make the service possible, appointed as data processors under art. 28 GDPR where applicable. Here they are, by name and by what they do:
- Vercel Inc. — hosting for the site and for the functions that receive your requests, and private storage for questionnaire attachments.
- Neon Inc. — the database where requests and project questionnaires are kept. The instance we use is hosted on Amazon Web Services infrastructure in the United Kingdom.
- Resend — email delivery: the notification to us and the receipt to you.
- preventivi.studiojem.it — our own quote management tool, where a configurator request can become a draft quote.
- Google Ireland Limited — Google Analytics 4, and only if you consent to measurement: it processes browsing data in aggregate form, never the content of your requests.
- Tree Nation SL— the two labels at the foot of the page, showing how many trees we have planted and how much CO2 this site offsets. They are panels embedded from their site and they load only once you reach the bottom of the page: at that point your browser asks them for that panel, and the request carries your IP address and the page you came from. They set no cookies and do not profile you — which is why they sit outside the banner.
Some of these providers are established, or process data, outside the European Economic Area. Where that happens the transfer relies on the safeguards of Chapter V of the GDPR — a European Commission adequacy decision or the standard contractual clauses. For the measurement side, the details are in the cookie policy.
Your rights
Under articles 15-22 of Regulation (EU) 2016/679 you may at any time request access to your data, rectification of inaccurate data, erasure, restriction of processing, data portability, and object to processing; you may also withdraw any consent given, without affecting the lawfulness of processing carried out before the withdrawal. To exercise these rights, write to info@studiojem.it. You may also lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Minors
The site and its contact forms are not intended for anyone under 16 years of age, and we do not knowingly process children's data. If you believe a minor's personal data has reached us, write to info@studiojem.it to request its deletion.
Data security
We adopt adequate technical and organisational measures to protect the data we process — encrypted connections (HTTPS), system access limited to those who need it, backups of critical data — to reduce the risk of destruction, loss, alteration or unauthorised access.
Incoming requests are read from a private area of the site: password-protected, excluded from search engines, and open only to whoever in the studio has to answer you. It is not a page you reach by browsing — without credentials it does not exist.
Changes to this notice
If we change our measurement tools or introduce new processing in the future, this notice and the cookie policy will be updated before activation, with the last-updated date shown at the top of the page.