Privacy Notice

1. Data controller

PIANETA.STUDIO S.R.L. S.B. (single-shareholder Benefit Corporation) — Via IV Novembre 18, 95037 San Giovanni La Punta (CT), Italy — VAT/Tax ID 06037730873 — REA CT-459996.
PEC: pianeta.studiosrlsb@legalmail.it — email: info@pianeta.studio.

2. Data collected and purposes

• Contact via form / email (name, email, company, message) — replying to requests. Legal basis: Art. 6(1)(b) pre-contractual measures; retention 24 months from last contact.
• Commercial requests via /hire (intake fields plus any conversation with the Alba assistant) — lead qualification, proposal, contracting. Legal basis: Art. 6(1)(b); retention 24 months or duration of the contract.
• Newsletter signup (Bulletin, announcements) — sending editorial content and studio updates. Legal basis: Art. 6(1)(a) consent; retention until consent is withdrawn.
• Technical and analytics cookies — site operation and anonymous traffic measurement. Legal basis: Art. 6(1)(f) legitimate interest for technical cookies; Art. 6(1)(a) consent for analytics and marketing. Details in Cookie Policy.
• Accounting and tax obligations (invoicing, contracts) — statutory duties. Legal basis: Art. 6(1)(c); retention 10 years.

3. Recipients and processors

Data is processed with third-party tools appointed as Processors under Art. 28 GDPR:

• Vercel Inc. — website hosting (USA)
• Supabase Inc. — application database (EU/USA)
• Resend — transactional and newsletter email (USA)
• Stripe Payments Europe — /hire payments (Ireland / USA)
• Google LLC — Google Analytics 4, Google Ads (USA)
• Anthropic PBC — LLM powering the Alba assistant (USA)
• Etastudio — tax/accounting advisor (Italy)

4. International transfers

Transfers to US providers (Vercel, Stripe, Resend, Google, Anthropic) rely on Standard Contractual Clauses approved by the European Commission (Decision 2021/914) and, where applicable, participation in the EU-US Data Privacy Framework.

5. Data subject rights

Under Articles 15-22 GDPR you may exercise access, rectification, erasure, restriction, portability, objection and consent-withdrawal rights at any time by writing to info@pianeta.studio. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

6. Processing and security

Processing is carried out electronically with TLS in-transit encryption, access controls and regular backups. No automated decision-making producing legal effects on the data subject under Art. 22 GDPR is performed.

7. Updates

This notice may be updated to reflect regulatory or operational changes. The current version is always published at this URL. Last-updated date shown at the top of this page.