Studio Faraj
ITEN

Updated on

Privacy policy

How Studio Faraj handles the personal data of people who visit the site, write to us or use the client area, under Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003).

In short

  • Only for what you ask. We use your data to reply to you, provide our services and run the client area.
  • No advertising. We don’t sell your data or pass it on to others for advertising.
  • Statistics only with your yes. Google Analytics and the Google map load only if you accept them.
  • One address. To see, correct or delete your data, write to info@studiofaraj.it.

01Data controller

Studio Faraj, VAT no. 05783550287
Via Ludovico Ariosto 42, 35128 Padova (PD), Italy
Email info@studiofaraj.it · Phone +39 320 222 3322

For any question about your data, write to this address.

02What data we process and why

We only process the data you give us and the data the site needs to work. For each activity: what we collect, why, on what legal basis and for how long.

Contact and quote requests
Data
Name, email, phone if you add it, service, budget, message
Why
Reply to you and prepare a quote
Legal basis
Steps you ask for before a contract, art. 6(1)(b)
How long
2 years from the last contact
Booking a call
Data
Name, email, phone, chosen day and time, optional message
Why
Arrange and confirm the call
Legal basis
Steps you ask for before a contract, art. 6(1)(b)
How long
2 years from the last contact
Messages on WhatsApp
Data
Number, profile name, messages
Why
Reply to you
Legal basis
Steps you ask for before a contract, art. 6(1)(b)
How long
2 years from the last contact
Newsletter
Data
Email
Why
Send you articles and news
Legal basis
Consent, art. 6(1)(a)
How long
Until you unsubscribe
Client area
Data
Account (name, email, Google sign-in if you use it), requests, messages, files, quotes and invoices
Why
Provide the services you buy and manage the relationship
Legal basis
Contract, art. 6(1)(b); tax obligations, art. 6(1)(c)
How long
For the relationship; invoices and accounting records 10 years
Business pages
Data
The company details you choose to publish (name, services, contacts, VAT no. if added) and billing details
Why
Publish the page and manage the subscription
Legal basis
Contract, art. 6(1)(b); tax obligations, art. 6(1)(c)
How long
While the subscription is active; invoices 10 years
Browsing and security
Data
IP address, browser, requested pages, date and time, in the server logs
Why
Run the site and protect it from abuse
Legal basis
Legitimate interest, art. 6(1)(f)
How long
Up to 6 months
Visit statistics (only with consent)
Data
Pages viewed, device, referrer, a pseudonymous identifier
Why
Understand how the site is used
Legal basis
Consent, art. 6(1)(a)
How long
Up to 14 months

Giving us your data is up to you, but without the required fields we can’t reply to a request or provide a service. We don’t use your data for automated decisions or profiling. The data a company publishes on its business page is public by its own choice: see the terms.

03Who we entrust it to

We don’t sell your data or disclose it. It is processed on our behalf, as data processors, by:

  • Google (Firebase and Google Cloud): hosting of the site, database, client-area sign-in and file storage; Google Analytics, only with your consent; reCAPTCHA, which protects the client-area and admin sign-ins from bots.
  • Brevo (Sendinblue SAS, France): sending confirmation and notification emails.
  • Stripe (Stripe Payments Europe Ltd, Ireland): subscription payments. We never see or store your card details.

When you choose to use them, Google Maps (the map on the Contact page) and WhatsApp (Meta) process your data as independent controllers, under their own policies. We also disclose data to public authorities when the law requires it.

04Transfers outside the EU

Google and Stripe may process data in the United States. These transfers rely on the EU adequacy decision for the EU-U.S. Data Privacy Framework, in which Google LLC and Stripe, Inc. participate, and on the European Commission’s standard contractual clauses. Brevo processes data in the European Union.

05How long we keep it

Each activity’s period is in the table above. When it ends, we delete the data or make it anonymous, unless we need it to establish, exercise or defend a legal claim. Cookie durations are in the cookie policy.

06Your rights

Under articles 15–22 of the GDPR you can at any time:

  • know whether we process your data and get a copy;
  • have it corrected or completed;
  • have it deleted, or its processing restricted;
  • receive it in a structured, machine-readable format;
  • object to processing based on legitimate interest;
  • withdraw your consent, without affecting what happened before.

Write to info@studiofaraj.it. We reply within one month; for complex requests this can be extended by two more months, and we’ll tell you. You can change your cookie choices at any time from Cookie preferences at the bottom of every page.

If you think we are processing your data unlawfully, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.

07Security

The site only uses encrypted connections (HTTPS). The data is stored on Google Cloud infrastructure, which also encrypts it at rest. The client area and the admin area require signing in.

08Changes to this policy

When we change this policy we update the date at the top of the page.

This is a translation: if it differs from the Italian version, the Italian version prevails.