Privacy notice

PRIVACY NOTICE - ARCHDESIGN S.R.L. Updated 23 October 2026 · www.archdesignsrl.it 1. CONTROLLER AND CONTACT The controller is ARCHDESIGN S.R.L., Italian tax and VAT number 13288660015, registered office at Corso Galileo Ferraris 16, 10121 Turin (TO), Italy, REA TO - 1352592. For questions about your data: archdesignsrl@gmail.com. Certified email (PEC): archdesigns@legalmail.it. This notice covers the website and information and quotation enquiries. Professional appointments require information relevant to the particular engagement. 2. INFORMATION PROCESSED The enquiry form collects your full name, email, telephone number, project municipality, requested service, message and chosen language. It also records the date, enquiry reference, acknowledgement of this notice, handling status and any email notification status. If you contact us directly, we process your contact details and correspondence. Please do not send health information, identity documents or other personal information unnecessary for an initial enquiry. The website and infrastructure may process IP addresses, connection and browser information and security event data. To limit spam, the application hashes the network address together with an hourly window. This is a pseudonymisation measure and does not guarantee anonymity. 3. PURPOSES AND LEGAL BASES We use information to respond, assess the proposed work and prepare the quotation you request, on the basis of steps taken at your request before a contract, GDPR Article 6(1)(b). General correspondence unrelated to a prospective contract is handled on the basis of our legitimate interest in responding to relevant communications, Article 6(1)(f). Website protection, abuse prevention and the defence of rights rely on legitimate interests in security and protecting the business, Article 6(1)(f). Legally required processing relies on Article 6(1)(c). The map is an external link and is not embedded in the website. Submitting the form does not subscribe you to a newsletter or authorise advertising. The privacy checkbox records that you have read the notice: it is neither marketing consent nor the legal basis for your quotation. 4. PROVIDING INFORMATION AND HOW THE FORM WORKS Sending an enquiry is optional. Fields marked with an asterisk are needed to use the form; you can also contact us by email. Without necessary information we may be unable to assess or handle your enquiry. The form stores your enquiry in the restricted management area before attempting any notification. Automatic notifications send a copy of the enquiry to archdesignsrl@gmail.com through Resend. If delivery fails, the enquiry remains available in management. The application does not profile visitors or make solely automated decisions producing legal or similarly significant effects. 5. ACCESS AND SERVICE PROVIDERS Information may be accessed by people authorised by ArchDesign to handle enquiries and systems and by technical providers involved in website and email delivery. The website uses OpenAI Sites and Cloudflare infrastructure; the published contact email is a Gmail mailbox. Providers' privacy roles depend on the actual services and contracts. Form submissions are not published in the portfolio or shown to other visitors. For hosting, OpenAI Ireland Ltd. processes information on our behalf under the applicable Sites DPA. Cloudflare provides infrastructure through OpenAI. DPA and providers: https://openai.com/policies/chatgpt-sites-data-processing-addendum/ and https://openai.com/policies/sub-processor-list/. Google Ireland Limited provides Gmail; Google’s own processing follows https://policies.google.com/privacy. Resend (Plus Five Five, Inc.) delivers notifications and processes names, contact details, municipality, requested service, message and enquiry reference on our behalf under its DPA: https://resend.com/legal/dpa. Notifications are delivered to the company Gmail mailbox. 6. INTERNATIONAL TRANSFERS Providers may process information outside the European Economic Area, including in the United States. OpenAI’s DPA provides standard contractual clauses or adequacy decisions for relevant transfers. Contact us for information and a copy of safeguards. Google describes its safeguards in its privacy policy. Resend’s DPA provides standard contractual clauses for relevant transfers. We do not claim exclusively Italian or EU storage. 7. RETENTION Enquiries that do not become engagements are retained for up to 12 months after the last relevant exchange, then deleted from company systems and any email copies unless a documented reason requires retention. This company-approved policy requires authorised personnel to manage deletion; the current website does not perform it automatically. If an enquiry becomes an engagement, necessary documents follow the periods and obligations relevant to that relationship. For disputes, only relevant information is kept for as long as needed to handle or defend rights. Application anti-spam counters expire after one hour; expired counters are removed on the next submission. Providers manage technical logs and backups for service delivery, security and recovery under applicable terms; deletion cycles may differ from records visible in management. We coordinate with providers for deletion requests affecting these copies. Company correspondence follows the 12-month criterion above where no engagement results, subject to legal obligations or documented needs. 8. YOUR RIGHTS Where applicable, you can request access, correction, erasure, restriction and portability and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting prior processing. Contact archdesignsrl@gmail.com or the certified email above. Where necessary, only proportionate information will be requested to verify your identity. You can complain to the Italian data protection authority: https://www.garanteprivacy.it/. 9. MAPS, SOCIAL LINKS AND CHANGES Google Maps and links to WhatsApp and Instagram may involve processing by their respective operators. Please also read the cookie notice and the notices of services you choose. Social links are not active embeds on the website. Changes to this notice will be published on this page with a new date.