Privacy Policy
Ultimo aggiornamento: 19 June 2026
Data Controller
Digitalis, a brand of Chiara Orlando, with registered office at Via Luchino Luchini 35, 33095 San Giorgio della Richinvelda (PN), Italy, VAT no. 01803750932, is the Data Controller for the personal data collected through the website www.digitalis.studio (the "Site").
For any request or information regarding the processing of personal data and the exercise of the rights granted by data protection law, you may contact:
Chiara Orlando · Email: info@digitalis.studio
Types of Data Collected
Browsing data
While browsing the Site, the IT systems and software procedures responsible for its operation acquire certain data whose transmission is implicit in the use of Internet communication protocols. This includes IP addresses, domain names of the devices used, URI addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server response status, and other parameters relating to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of the Site and to check its correct operation.
Data voluntarily provided by the user
The optional, explicit and voluntary sending of email to the contact addresses indicated, the use of the contact form and the newsletter subscription entail the subsequent acquisition of the personal data needed to respond to or deliver the requested service. In particular, the following may be collected: first name, last name, email address, phone number and any further information voluntarily included in the message.
Data collected through cookies and similar technologies
For a description of the cookies and similar technologies used by the Site, please refer to the Cookie Policy.
Purposes of Processing
The personal data collected is processed for the following purposes:
- Responding to requests: to follow up on requests for information or contact submitted through the Site or via email.
- Service delivery: to manage quote requests and the provision of Digitalis services.
- Marketing and newsletter: subject to explicit and specific consent, to send informational, promotional and advertising communications about Digitalis services and events.
- Site management and security: to ensure the correct operation of the Site, prevent abuse, counter fraudulent activity and improve the user experience.
- Legal obligations: to comply with obligations set out by applicable, tax and accounting regulations.
Legal Basis for Processing
Personal data is processed on the basis of the following lawful conditions (Art. 6 of EU Regulation 2016/679, "GDPR"):
- Consent of the data subject (Art. 6(1)(a)): for marketing and newsletter purposes.
- Performance of a contract or pre-contractual measures (Art. 6(1)(b)): for managing requests and delivering services.
- Legal obligations (Art. 6(1)(c)): for tax, accounting and other obligations imposed by law.
- Legitimate interest (Art. 6(1)(f)): for technical site management, fraud prevention and IT security.
Provision of Data
Providing data for responding to requests and for delivering services is optional, but failure to provide data marked as mandatory makes it impossible to follow up on such requests. Providing data for marketing purposes is always optional and does not in any way affect the use of the Site’s services.
Methods of Processing
Personal data is processed using IT tools and, to a residual extent, paper tools, adopting technical and organisational measures adequate to ensure the security, confidentiality, integrity and availability of the data. Processing is carried out by authorised and duly instructed personnel.
Retention Period
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, and in any case according to the following criteria:
- Contact requests: up to 24 months from the last interaction, unless the request leads to a contractual relationship.
- Contracts and services: for the time necessary to deliver the service and subsequently for the period required by law (in particular tax and accounting, up to 10 years).
- Newsletter and marketing: until consent is withdrawn by the data subject, which can be done at any time.
- Browsing data: for the time strictly necessary to allow browsing and anonymous statistical analysis.
Once these terms have elapsed, data is irreversibly deleted or anonymised.
Data Recipients
Personal data may be communicated or made accessible to parties acting as:
- External data processors pursuant to Art. 28 GDPR, such as technical service providers (hosting, Site maintenance, email services, form and newsletter management platform, analytics services such as Google Analytics 4), duly appointed and bound by a specific agreement;
- Authorised persons appointed by the Controller to process data within their duties and duly instructed;
- Public authorities and other parties, solely in the cases provided for by law.
Personal data is in no way disseminated.
Transfer of Data Outside the European Union
Some service providers (in particular Google Analytics) may process data outside the European Economic Area. In such cases the transfer takes place only towards countries recognised by the European Commission as ensuring an adequate level of protection, or on the basis of appropriate safeguards pursuant to Arts. 45 and 46 GDPR (adequacy decisions, standard contractual clauses). A copy of these safeguards may be requested from the Controller at the contact details indicated above.
Your Rights
At any time the data subject may exercise the rights provided by Arts. 15-22 of EU Regulation 2016/679, and in particular:
- Right of access to their personal data (Art. 15);
- Right to rectification of inaccurate or incomplete data (Art. 16);
- Right to erasure (right to be forgotten) (Art. 17);
- Right to restriction of processing (Art. 18);
- Right to data portability (Art. 20);
- Right to object to processing (Art. 21);
- Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal (Art. 7).
The data subject also has the right not to be subject to decisions based solely on automated processing that produce significant legal effects (Art. 22). The Site carries out no automated decision-making or profiling.
How to Exercise Your Rights
To exercise the rights listed above, simply send a written request to the Data Controller at the email address info@digitalis.studio. The Controller undertakes to respond within one month of receiving the request, except in cases of particular complexity, where this term may be extended by a further two months, with timely notice to the data subject.
Changes to this Policy
The Controller reserves the right to amend this notice at any time to reflect regulatory, organisational or technical changes, giving notice to users through the Site. The date of the last update is indicated at the top of the document. Users are invited to consult this page periodically.