Privacy

Data controller

The data controller is Aletheia District, Milano, Italia. To contact the controller, please use the contact form.

Data we process

• Contact form: name, email address, optional phone number and company, the text of the message.
• Studio booking: name, email address, optional phone number and notes, the requested date and time.
• Technical data needed to deliver the site and protect the forms from automated abuse (IP address, browser).

Purposes and legal basis

• Answering requests and handling bookings — legal basis: steps taken at the request of the data subject prior to a contract (Art. 6(1)(b) GDPR).
• Security of the site and of the forms — legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Retention

Messages and booking requests are kept for the time needed to handle them and in any case no longer than 24 months, unless a contractual relationship follows.

Processors

The data is processed with service providers acting as data processors: Google Ireland Ltd. (Firebase hosting and database, Google Calendar for bookings), Resend (email delivery), Cloudflare (Turnstile anti-bot check). Transfers outside the EU rely on the Standard Contractual Clauses.

Your rights

You can ask for access to, rectification, erasure or restriction of your data, object to its processing and request its portability by writing to the controller through the contact form. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).