Privacy Policy

1. Data Controller

The data controller is Thaumata Studio, with registered office at C.so Vittorio Emanuele, 112, 80121 Napoli (NA), Italia, reachable at info@thaumatastudio.com.

2. Data We Collect

2.1 Technical and navigation data

When you visit this website, our hosting provider (Vercel Inc., USA) may automatically collect standard server log data, including IP addresses, browser type, operating system, referring URLs, and pages visited. This data is processed solely to ensure the security and correct functioning of the website. Vercel's processing is governed by their own Privacy Policy and is compliant with GDPR through Standard Contractual Clauses.

2.2 Communication data

If you contact us via the email address provided on this website, we will process your name, email address, and any other information you voluntarily include in your message, solely to respond to your enquiry.

3. Purposes and Legal Basis

• Website security and functioning: legitimate interest of the controller (Art. 6(1)(f) GDPR).
• Responding to your enquiries: consent and/or pre-contractual measures (Art. 6(1)(a)(b) GDPR).

4. Retention

Technical log data is retained for the period strictly necessary to ensure website security, typically no longer than 30 days. Communication data is retained for the time necessary to process your request and, thereafter, for any applicable statutory retention period.

5. International Data Transfers

Website hosting is provided by Vercel Inc. (USA). The transfer of technical data to Vercel is governed by appropriate safeguards under Chapter V of the GDPR (Standard Contractual Clauses). No other personal data is transferred outside the European Economic Area.

6. Your Rights

Under the GDPR, you have the right to:

• Access: obtain confirmation of processing and a copy of your data (Art. 15).
• Rectification: correct inaccurate or incomplete data (Art. 16).
• Erasure: have your data deleted (“right to be forgotten”) (Art. 17).
• Restriction: restrict processing in certain circumstances (Art. 18).
• Portability: receive your data in a structured format (Art. 20).
• Objection: object to processing based on legitimate interest (Art. 21).

To exercise any of these rights, contact us at info@thaumatastudio.com.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — www.garanteprivacy.it) if you believe your personal data is being processed in violation of the GDPR.