Privacy Policy

Last updated: 11/09/2026

1. Data Controller

The Data Controller is:
Sebastiano Cibien Architecture Studio
VAT: 04036620278
Email:

2. Types of Data Collected

The website collects and processes the following categories of personal data:

2.1 Data provided voluntarily

• Contact form: name, surname, email address, phone number (optional), message
• IP address and device information

2.2 Data collected automatically

• Technical cookies: necessary for website functionality
• Google Analytics: only with consent, to analyze website traffic
• Google Maps: only with consent, to display maps
• Google reCAPTCHA: only with consent, for anti-spam protection

3. Purpose and Legal Basis for Processing

3.1 Handling contact requests

• Purpose: Responding to information and quote requests
• Legal basis: Performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR)
• Retention: Data is kept for 2 years from receipt of the request

3.2 Technical cookies

• Purpose: Ensure proper website functionality (theme preferences, language, session management)
• Legal basis: Legitimate interest of the Controller (Art. 6(1)(f) GDPR)
• Duration: Session cookies or up to 12 months

3.3 Analytics cookies (Google Analytics)

• Purpose: Analyze traffic and improve user experience
• Legal basis: Explicit consent (Art. 6(1)(a) GDPR)
• Method: Anonymous data with masked IP
• Duration: 26 months

4. Processing Methods

Personal data is processed using IT and/or telematic tools, with logic strictly related to the stated purposes and, in any case, in a way that ensures data security and confidentiality.

4.1 Data storage

• Contact form data is stored in an SQLite database on the server and on kDrive (secure cloud storage)
• Access limited to authorized personnel only
• Regular encrypted backups

5. Data Communication and Disclosure

Personal data is not disclosed. It may be communicated to:

• Hosting provider: Aruba S.p.A. (Italy)
• Cloud services: kDrive (Switzerland) for data backup
• Google LLC: only with consent, for Analytics, Maps and reCAPTCHA
• Competent authorities: upon legal request

6. Extra-EU Data Transfer

Data may be transferred to Google LLC (USA) only with explicit consent. Google LLC adheres to the EU-US Data Privacy Framework, ensuring an adequate level of protection.

7. Data Subject Rights

At any time, the data subject may exercise the following rights pursuant to Articles 15-22 of the GDPR:

• Right of access: obtain confirmation of the existence of personal data and access to it
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of data (right to be forgotten)
• Right to restriction: restrict processing in certain circumstances
• Right to data portability: receive data in structured format
• Right to object: object to processing for legitimate reasons
• Right to withdraw consent: withdraw consent at any time

To exercise your rights, contact:

Email:
Address: Viale IV Novembre, 17 - 30132 Venice, Italy

8. Complaints

The data subject has the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority - www.garanteprivacy.it) if they believe that the processing violates the GDPR.

9. Changes to Privacy Policy

This Privacy Policy may be updated. Users are invited to regularly consult this page. The date of the last update is indicated at the top.

10. Minors' Data

The website is not intended for minors under 16 years of age. We do not knowingly collect personal data from minors. If a parent or guardian becomes aware that their child has provided us with personal data, please contact us immediately.

11. Security

We adopt appropriate technical and organizational security measures to protect personal data from unauthorized access, destruction, loss, alteration or accidental disclosure:

• Communication encryption (HTTPS)
• Regular encrypted backups
• Restricted data access via credentials
• Regular software updates