Privacy policy
Information on the processing of personal data of VizArt website visitors, contacts and prospective clients
This privacy policy describes how personal data is processed when using the VizArt website, submitting a contact request or requesting a quotation. It is published pursuant to the applicable data protection framework, including Regulation (EU) 2016/679 (GDPR)
Controller information
Identity and contact details of the controller responsible for the processing activities described in this policy
- The data controller is Silvia Spacca, operating as VizArt di Silvia Spacca, with the business address published on this website
- For privacy-related requests, data subjects may contact the controller at privacy@vizart.io
- This policy concerns data processed through the public website, contact requests, quotation inquiries and related technical services
Categories of data collected
Overview of the personal and technical data that may be processed when the website is used
- When a user submits a contact form, VizArt processes the data entered by the user, including name, email address and message content
- Technical information such as IP address, browser type and operating system is processed to ensure service delivery and security
- Navigation data, including pages visited, time spent and referral sources, may be processed to analyze site usage
- Infrastructure and server logs process technical metadata necessary for maintaining the availability and integrity of the site
- Analytics data may be processed through self-hosted Umami and, subject to prior consent where required, Google Analytics 4
Purposes and legal bases
The reasons why data is processed and the legal bases relied on for those processing activities
- Contact form data is processed to respond to general inquiries and quotation requests and to take steps requested by the user before any possible contract is concluded
- Technical and infrastructure-related processing is carried out on the basis of the controller's legitimate interest in maintaining the availability, security and correct operation of the website
- Google Analytics 4 is used only after the user has given consent where required by EU rules, while self-hosted Umami is configured as a cookieless analytics tool
Recipients and service providers
Information on third-party service providers involved in the processing of your data
- Website infrastructure and hosting services are provided through Vercel Inc., located in the United States
- Email transmission for contact form submissions is managed through Resend Inc., located in the United States
- Analytics services, where consent is provided, are provided by Google LLC through Google Analytics 4
- At the date of this policy, inquiries are managed through the controller's mailbox and are not stored in a separate CRM system
International data transfers
Information on the transfer of data to countries outside the European Economic Area (EEA)
- Data processed through Vercel, Resend and Google is transferred to the United States for processing and storage
- These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection
- You can request further information on these safeguards by contacting the controller at the provided privacy email address
Data retention and security
How long we keep your data and the measures we take to protect it
- Quotation and contact inquiries are retained for up to 24 months from receipt, unless a longer period is required for contract management or legal compliance
- We implement appropriate technical and organizational measures, including HTTPS encryption, to protect data during transmission and storage
- Access to personal data is restricted to the controller and strictly necessary for the purposes described in this policy
Data subject rights
Summary of the rights available to individuals under the GDPR
- You have the right to request access to your data, its rectification or erasure ('right to be forgotten')
- You may request the restriction of processing, object to processing or request data portability where applicable
- Where processing is based on consent, you may withdraw your consent at any time without affecting prior lawfulness
- You have the right to lodge a complaint with a supervisory authority (such as the Garante Privacy in Italy)
- To exercise your rights, please send a written request to privacy@vizart.io