Privacy Policy

Data Controller

Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR), Studio Daleth provides the following information concerning the processing of personal data of users who access this website.

The Data Controller is Studio Daleth.

Email contact: studiodaleth@gmail.com

Data Processed

As part of the restricted-access procedure, the user is asked to provide a phone number, which is used to send and verify the temporary access code by SMS.

Through the “Contact” form, Studio Daleth may also collect data voluntarily provided by the user, such as first name, last name, phone number, email address and the content of the message.

During browsing, technical data necessary for the operation and security of the website may also be processed, including IP address, device and browser information, date and time of requests and other technical connection data.

Purposes of Processing

The phone number is used exclusively to send and verify the temporary SMS access code and to ensure the correct operation and security of the authentication procedure.

Data submitted through the “Contact” form is used exclusively to receive, review and manage the user’s request, contact the user and, where necessary, take the requested steps prior to the possible establishment of a professional relationship.

Technical data may be processed to ensure the availability, integrity and security of the website, prevent misuse and diagnose technical anomalies.

Data collected through these functions is not used by Studio Daleth to send advertising or promotional communications unless the data subject has made a separate and specific request.

Legal Basis

Processing of data necessary to manage user requests and any pre-contractual measures is carried out pursuant to Article 6(1)(b) GDPR.

Processing of technical data necessary for website security, abuse prevention and system protection is based on the legitimate interests of the Data Controller pursuant to Article 6(1)(f) GDPR.

Service Providers

For the operation of the website and related services, Studio Daleth uses technology providers that may process personal data only to the extent necessary to provide their respective services.

Studio Daleth uses the services of Twilio Inc. to send and verify SMS access codes. The phone number is therefore disclosed to Twilio to the extent necessary to provide the verification service.

Studio Daleth also uses Resend (Plus Five Five, Inc.) to send the Data Controller a technical notification relating to an access request. The notification configured by Studio Daleth does not contain the user’s phone number.

The website is hosted and technically managed using Netlify services. In providing these services, technical connection data and information necessary for the security and operation of the website may be processed.

The “Contact” form uses Formspree to technically manage the submission of requests. Data entered by the user in the form, such as first name, last name, phone number, email address and message content, may therefore be transmitted through this service exclusively to enable receipt and management of the request.

The website also uses Google Fonts to display typefaces. Connection to the relevant services may involve the transmission of technical data necessary to request and display these resources.

Studio Daleth uses Google Ads and the associated Google Tag to measure advertising campaign effectiveness and actions performed by users on the website following interaction with an advertisement. Use of these tools is managed in accordance with the user’s choices regarding consent to tracking technologies.

Data may also be disclosed to authorized parties or competent authorities where required by law or by a lawful order.

Transfers of Data Outside the European Economic Area

Use of some of the technology providers listed above may involve the processing or transfer of personal data to countries outside the European Economic Area, including the United States.

Where applicable, such transfers are carried out in accordance with Chapter V GDPR through adequacy decisions, Standard Contractual Clauses approved by the European Commission or other mechanisms and safeguards provided for under applicable law.

Data Retention

Data used for the authentication procedure and technical security data are processed only for the period strictly necessary for the relevant purposes.

Data submitted through the “Contact” form is retained for the time necessary to manage the request and any resulting relationship and, thereafter, for the period required to comply with legal obligations or protect the rights of the Data Controller.

Technical service providers may retain certain information in accordance with the retention periods of their respective services and applicable contractual terms.

Provision of Data

Providing a phone number is necessary to use the SMS access procedure. Without a phone number, it is not possible to send the verification code and complete this access method.

Providing the data requested through the “Contact” form is necessary to allow Studio Daleth to receive and manage the request. The user is free not to provide such data, but in that case it may not be possible to provide the requested response.

Cookies & Tracking Technologies

The website uses technical tools necessary for its operation, security and the provision of services expressly requested by the user.

The website also uses Google Ads and Google Tag to measure advertising campaign effectiveness and user interactions with the website. These tools may involve the use of cookies or similar technologies and the processing of technical browsing data.

For tracking technologies that are not strictly necessary, the user may express their choice through the consent panel displayed by the website. Consent may be refused without preventing use of the website’s essential functions.

The preferences expressed by the user are used to manage Google services in accordance with the applicable consent settings.

Security

Studio Daleth adopts technical and organizational measures designed to protect personal data, limit unauthorized access and restrict processing to what is necessary for the stated purposes.

However, no IT system or online service can guarantee absolute security.

Rights of the Data Subject

Where provided for by Articles 15–22 GDPR, the data subject may exercise the rights of access, rectification, erasure, restriction of processing, data portability and objection to processing, together with any additional rights provided for under applicable law.

Requests may be sent to the Data Controller at studiodaleth@gmail.com .

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.

Changes to this Policy

This Privacy Policy may be updated to reflect regulatory, organizational or technical changes relating to the services used. The updated version will be published on this page.

Last updated

16 August 2026