Last updated: 30 September 2026

Privacy & cookies

This page explains how personal data is handled when you visit this website or write to the studio. The site sets no cookies and uses no advertising or tracking tools.

Who is responsible

The data controller is Deniz Önel, sole trader, Via Tiziano 23, 59100 Prato (PO), Italy. VAT (P. IVA) IT06498210480.
Email: [email protected] · Telephone: +39 392 393 3475

What data is processed, and why

When you browse the site. Like every website, this one receives technical data when your browser requests a page: your IP address, browser type, the address requested, and the date and time. It is used only to deliver the pages, keep the site secure and prevent abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in running a secure website.

Visitor statistics. The site uses Cloudflare Web Analytics to count visits in aggregate: pages viewed, the countries visitors come from, and load times. It uses no cookies or local storage and does not identify, fingerprint or follow individual visitors. Legal basis: legitimate interest in understanding how the site is used.

When you write through the contact form. You send your name, email address, where your project is (optional) and your message. These are used only to reply and, if you wish, to discuss your project. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR). The form includes a hidden anti-spam check, which records nothing about you.

When you write by email or call. The same applies to anything you send directly by email or telephone.

Giving your details is voluntary, but without a name and an email address the studio cannot reply. No decisions are made about you by automated means.

Who handles the data on the studio’s behalf

Data is never sold or used for marketing. It is shared only with the service providers that make the site and email work, acting as processors under contracts that bind them to GDPR (Art. 28):

• Cloudflare, Inc. (USA): hosting, content delivery, security and visitor statistics.
• Sanity (content stored in the EU, Belgium): the system that stores the site’s texts and images. Images and videos reach your browser from its global delivery network, which sees your IP address.
• Resend (Plus Five Five, Inc., USA): delivers contact-form messages to the studio’s mailbox and keeps a copy of each for 30 days.
• Aruba S.p.A. (Italy): the studio’s email.
• Bespoke216 (Italy): technical management of the website.

Transfers outside the European Union

Cloudflare and Resend are based in the United States. Both are certified under the EU-U.S. Data Privacy Framework and also apply the European Commission’s Standard Contractual Clauses, so your data keeps the same level of protection (Arts. 45 and 46 GDPR).

How long data is kept

• Technical and security data: kept by Cloudflare for the short periods its service needs.
• Statistics: aggregated, with nothing that identifies you.
• Contact-form copies at Resend: deleted after 30 days.
• Enquiries and correspondence: up to 24 months after the last exchange. If they lead to a project, for as long as the law requires for contracts and accounting records (up to 10 years).

Your rights

You can ask at any time to see, correct or delete your data, to restrict or object to its use, and to receive it in a portable format (Arts. 15–22 GDPR). Write to [email protected]; you will receive an answer within one month.

You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it (opens in a new tab)).

Cookies

This site sets no cookies and stores nothing in your browser, so it asks for no consent.

• If Cloudflare’s security system needs to check that a visitor is not an automated program, it may set a strictly necessary security cookie (such as __cf_bm), which lasts at most 30 minutes and is used for nothing else.
• Visitor statistics use no cookies at all.
• There are no embedded videos, maps or social media widgets.
• Links to other websites (Instagram, publishers, the makers credited on the site) open in a new tab; those sites have their own privacy and cookie policies.

Changes

If this policy changes, the new version will be published on this page with a new date.