VISTELIA / PRIVACY

Privacy notice

This page describes what data the vistelia-studio.com website processes and why. It is a translation: the versione italiana prevails. Data controller: Andrea Viola, [email protected].

Visitors to the public pages

The public pages use no advertising or traffic analytics and set no cookies.

Contact form

If you write from the Contact page, the site stores the data you enter: name, email, optional phone and location, type of enquiry, message, the page you came from and the date sent. They are used only to answer your enquiry and to manage any proposal that follows; the legal basis is your request to be contacted (Art. 6(1)(b) GDPR). The enquiry is forwarded by email to the studio through the Resend service and can only be viewed by the administrator in the client area.

Your IP address is not stored with the enquiry: to limit repeated submissions only an encrypted fingerprint is kept, overwritten after about an hour. Enquiries are deleted when no longer needed, and in any case on your request.

Client area and private tours

Access is reserved for people for whom the studio has created an account. For each account the site stores: email address, name, password in non-reversible encrypted form, authorised projects and date of last access. A technical session cookie keeps you signed in, valid for up to 30 days or until you sign out; only an encrypted fingerprint of it is stored. Failed sign-in attempts are counted for a short time to block abuse.

Comments and attachments left in the tours are visible only to the studio and to the clients of the project, and are used to discuss the project.

Sign in with Google

If you choose “Sign in with Google”, you authorise the site to receive from Google only your verified email address, used to recognise an account already created by the studio. The site does not receive your Google password, does not access other Google account data and does not store Google tokens. Use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Providers and retention

The site and data are hosted by Cloudflare, which may process technical connection data to provide and protect the service (Cloudflare Privacy Policy). Notification emails are sent through Resend (Resend Privacy Policy). Data are not sold or passed on to third parties. Your account and related data are kept for as long as you work with the studio and are deleted on request.

Your rights

You can ask at any time for access to, correction or deletion of your data by writing to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Last updated: 19 October 2026.