Privacy Policy

Studio Gavari respects your privacy and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Italian data protection law and other applicable European privacy and electronic communications rules.

This Privacy Policy explains what personal data we collect when you visit studiogavari.com, contact us, submit a project enquiry, book a call, create an account or otherwise interact with our website and services; why we process that data; which service providers may receive it; how long it may be retained; and what rights you have.

1. Data Controller

The controller responsible for the processing of personal data through this website is:

Studio Gavari
Legal address: Via Giovanni Sercambi 37, 50133 Florence, Italy
Studio: Via Ponte alle Riffe 10R, 50133 Florence, Italy
Email: hello@studiogavari.com
Telephone: +39 349 3466714
Website: studiogavari.com

For questions concerning this Privacy Policy or the processing of your personal data, please contact us at hello@studiogavari.com.

2. Personal Data We Process

Depending on how you interact with the website, we may process the following categories of personal data:

Contact and enquiry data
Such as your name, email address, company or brand, website, project information, budget, timing, preferred contact details and any information you voluntarily provide through a form or email.

Booking data
If you book or request a call, we may process your name, email address, company, preferred language, time zone, availability and information you provide about your project.

Account and membership data
Where parts of the website require an account or membership, we may process information necessary to create, authenticate and manage your account.

Technical and usage data
This may include IP address, browser and device information, operating system, referring URL, pages visited, timestamps and technical information necessary to deliver, secure and maintain the website.

Analytics and interaction data
Where you have given the required consent, we may collect information about how you interact with the website, including page views, navigation patterns, clicks and other usage information through analytics and website experience tools.

Newsletter and marketing data
If you subscribe to marketing communications, we process your email address and, where applicable, information about your interaction with our emails.

3. Purposes and Legal Bases

We process personal data only where we have a valid legal basis under the GDPR.

Responding to enquiries and project requests

We process information submitted through project enquiry forms, booking requests or direct communications in order to respond to you, assess a potential project and take steps requested by you before entering into a contract.

Legal basis: Article 6(1)(b) GDPR — steps prior to entering into a contract; and, where applicable, Article 6(1)(f) GDPR — our legitimate interest in managing business communications.

Providing contracted services

Where you become a client, we process personal data necessary to manage the project, communicate with you, deliver our services, invoice you and administer the contractual relationship.

Legal basis: Article 6(1)(b) GDPR and Article 6(1)(c) GDPR where processing is required to meet legal or accounting obligations.

Operating and securing the website

Certain technical data may be processed to deliver the website, maintain its functionality, detect misuse and ensure system security.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in operating a functional and secure website.

Analytics and website optimisation

Where consent is required, analytics and behavioural measurement technologies are activated only after you have made the relevant choice through our consent mechanism.

We use this information to understand how visitors use the website, identify usability issues and improve its structure, content and performance.

Legal basis: Article 6(1)(a) GDPR — consent.

Marketing communications

We send newsletters or other promotional communications where you have requested or consented to receive them, or where another lawful basis applies under applicable law.

You can withdraw your consent or unsubscribe at any time.

Legal basis: Article 6(1)(a) GDPR where based on consent.

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some technologies are strictly necessary for the website to function, maintain security, remember privacy choices or provide services explicitly requested by you.

Other technologies, including analytics or behavioural measurement technologies, are optional and are used only in accordance with your consent preferences where consent is required by applicable law.

You can accept, reject or manage optional technologies through the cookie or privacy settings available on our website. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

For detailed information about the individual cookies and technologies used, their providers, purposes and duration, please refer to our Cookie Policy / Cookie Settings.

5. Webflow

Our website is created and delivered using services provided by Webflow, Inc.

When you access the website, Webflow and its infrastructure providers may process technical information necessary to deliver the website, including IP addresses, request information, browser/device information and server logs.

Where forms or other Webflow functionality are used, information submitted through those services may also be processed by Webflow on our behalf.

Webflow may use subprocessors and infrastructure located outside the European Economic Area. Where required, international transfers are protected through recognised transfer mechanisms and contractual safeguards.

For further information, please refer to Webflow's privacy and data protection documentation.

6. Memberstack

We use Memberstack to provide account, membership, authentication and access-management functionality where applicable.

When you create or use an account, Memberstack may process information such as your email address, account identifiers, authentication information and other data necessary to provide membership functionality.

Memberstack acts as a service provider in connection with these functions. Processing may involve transfers of personal data outside the European Economic Area. Appropriate transfer safeguards are used where required under applicable data protection law.

7. Google Analytics

Subject to your consent, we use Google Analytics to understand how visitors interact with our website.

Google Analytics may process information such as:

• pages visited;
• interactions and events;
• approximate geographic information;
• device and browser information;
• referring sources;
• timestamps and session information; and
• technical identifiers.

For users in the EU, Google states that individual IP addresses are not logged or stored by Google Analytics and that IP data is handled before being recorded on EU-based servers.

Google Analytics is activated and used in accordance with the consent choices available through our website.

Where personal data is transferred outside the EEA, applicable transfer safeguards are used.

You may withdraw your analytics consent at any time through our privacy or cookie settings.

8. Microsoft Clarity

Subject to your consent, we use Microsoft Clarity to better understand how visitors interact with our website and to identify usability and performance issues.

Clarity may provide behavioural metrics, heatmaps and session-replay functionality. Depending on your consent and the configuration of the service, data processed may include information about website navigation, clicks, scrolling, device and browser information and technical identifiers.

We configure Clarity to respect applicable consent requirements. Optional cookies and full tracking functionality are not intended to be activated before the required consent has been provided.

Microsoft may process data outside the European Economic Area. Where applicable, international transfers are subject to recognised legal safeguards.

You can withdraw your consent at any time through our privacy or cookie settings.

9. Contact Forms and Project Enquiries

When you submit a contact form, project enquiry, request for an alternative meeting time or similar form, we process the information you provide in order to respond to your request.

The information requested may include your:

• name;
• email address;
• company or brand;
• website;
• project type;
• project description;
• budget;
• preferred timing or time zone; and
• any additional information you choose to provide.

Please do not include sensitive personal information unless it is genuinely necessary for your request.

Data submitted for the purpose of a project enquiry is not automatically used for newsletter marketing unless you separately choose to receive marketing communications or another lawful basis applies.

10. Newsletter and Email Marketing

If you subscribe to the Studio Gavari newsletter or another email list, we process the information necessary to manage your subscription and send the requested communications.

Where required, we use a consent-based subscription process. Marketing consent is voluntary and is not a condition of submitting a project enquiry or contacting Studio Gavari.

Our email service provider may process technical information relating to delivery and, where enabled and legally permitted, interactions with emails such as opens or link clicks.

You can unsubscribe at any time using the unsubscribe link contained in our emails or by contacting us at hello@studiogavari.com.

11. Social Media and External Links

Our website may contain links to Studio Gavari profiles or content on external platforms such as Instagram and LinkedIn.

A simple external link does not by itself mean that Studio Gavari transfers your personal data to that platform before you click it. Once you visit an external platform, the privacy practices and terms of that provider apply.

Where embedded third-party content is used, additional processing may occur. Where required, such content will be subject to your consent preferences.

12. Payments and Purchases

Where Studio Gavari offers packages, digital products or other services for direct purchase, payment information is processed through the relevant payment or commerce provider.

Studio Gavari does not generally receive or store complete payment card details where those details are processed directly by the payment provider.

Depending on the purchase method offered at the time, payment and transaction providers may process your name, contact details, billing information, transaction information and payment details as necessary to complete the transaction, prevent fraud and comply with legal requirements.

The specific providers used for a purchase may be identified during the checkout process and in the relevant provider's privacy information.

13. Recipients and Service Providers

We may disclose personal data to carefully selected service providers where necessary to operate our website and business.

These may include providers for:

• website hosting and infrastructure;
• membership and authentication;
• analytics and website optimisation;
• email and newsletter delivery;
• scheduling and communication;
• payment processing;
• accounting and administration;
• IT and security services; and
• professional advisers where necessary.

Service providers processing personal data on our behalf are required to process it in accordance with applicable data protection requirements and contractual obligations.

We do not sell personal data.

14. International Data Transfers

Some of our technology providers are established or use infrastructure outside the European Economic Area.

Where personal data is transferred to a country outside the EEA and no applicable adequacy decision covers the transfer, we rely on appropriate safeguards where required, which may include the European Commission's Standard Contractual Clauses and supplementary safeguards.

Where applicable, providers may also participate in recognised adequacy frameworks such as the EU–U.S. Data Privacy Framework.

Further information about applicable safeguards can be requested from us at hello@studiogavari.com.

15. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to satisfy applicable legal, accounting and contractual obligations.

Retention periods therefore depend on the nature of the information and the processing activity.

In particular:

• project enquiries are retained for as long as reasonably necessary to respond to and follow up on the enquiry;
• client and transaction records may be retained for the periods required by applicable tax, accounting and commercial law;
• membership data is generally retained while an account remains active and for an appropriate period thereafter where necessary;
• marketing data is retained until consent is withdrawn, the subscription is terminated or continued retention is no longer justified;
• analytics information is retained according to the settings and retention periods configured in the relevant analytics service.

Data may be retained for longer where necessary to establish, exercise or defend legal claims.

16. Your Rights

Subject to the conditions provided by the GDPR, you may have the right to:

• obtain confirmation as to whether we process personal data concerning you;
• access your personal data;
• request correction of inaccurate or incomplete data;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain personal data in a structured, commonly used and machine-readable format and request data portability;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact hello@studiogavari.com.

As Studio Gavari is established in Italy, you also have the right to lodge a complaint with the competent Italian data protection supervisory authority, the Garante per la protezione dei dati personali, or, where applicable, another competent supervisory authority.

17. Automated Decision-Making

Studio Gavari does not currently use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you within the meaning of Article 22 GDPR.

If this changes, this Privacy Policy will be updated accordingly.

18. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

No internet transmission or storage system can, however, be guaranteed to be completely secure.

19. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, providers or legal obligations change.

The current version will be published on this page together with the date of the latest update.

For questions about this Privacy Policy or our processing of personal data, contact:

Studio Gavari
Via Giovanni Sercambi 37
50133 Florence, Italy
hello@studiogavari.com
+39 349 3466714

‍