Privacy

Who handles the data

The data controller is Æ Studio. For any question about your data, or to exercise your rights, write to ciao@aestudio.tech.

When you write to us through the contact form

Through the contact form we receive what you write: your business, where you want to start, what you would like to improve and a contact (email or phone).

• Why: to reply to you and, if you wish, to prepare a proposal. The legal basis is your request for information before a possible contract (Art. 6(1)(b) GDPR).
• What happens: the message reaches our mailbox. If you left an email address, we send you an automatic confirmation with a copy of what you wrote. We do not sign you up for any newsletter.
• For how long: as long as needed to reply to you and to follow any resulting project. If no work comes of it, we delete the message within 24 months.
• If you don’t fill it in: it is not mandatory, but without a contact we cannot reply to you.

While you fill it in, your browser keeps a draft of the form only for as long as the tab is open (sessionStorage), so you don’t lose the text if you change page. It stays on your device and is deleted when the message is sent successfully or when you close the tab.

When you visit the site

We use Vercel Web Analytics to know how many people visit the site, which pages they read, where they come from (the referring site, the country) and what kind of device they use. It uses no cookies and stores nothing on your device: a visitor is recognized by a code calculated from the request, which Vercel deletes after 24 hours. We only see aggregate numbers, never who you are.

We also count, anonymously and in aggregate, some steps of the path through the site: for example how many times a service or a demo is opened, the contact form is started or sent, our email address or a link to another site is clicked, and how far down a page people scroll (a quarter, half, three quarters, all of it). For each step we receive only its name, the page and a few labels we wrote ourselves (the area, the demo): never what you write in the form. On the server this data becomes nothing more than daily counters, such as “today the form was opened 12 times”: we use no cookies, we do not store your IP address or any code that identifies you, and the counters delete themselves after 45 days (only the daily totals remain in our archive). They help us understand which pages are useful and where the site can be improved. If your browser sends the “Do Not Track” or “Global Privacy Control” signal, these steps are not counted.

Like any web server, the one hosting the site records, for security and operational reasons, technical data such as the IP address and the browser, for the limited time set by the provider. The legal basis is our legitimate interest in keeping the site secure and understanding whether it is useful (Art. 6(1)(f) GDPR).

The site uses no profiling cookies and no advertising tools.

Who we entrust the data to

We use these providers, which process data on our behalf:

• Vercel Inc. (United States): hosts the site and provides the visit statistics.
• Upstash Inc. (United States), with the database in the European Union region (Frankfurt): stores the anonymous counters of the path through the site.
• Brevo (Sendinblue SAS, France): sends the emails generated by the contact form.
• Google (Gmail): the mailbox where we read the messages.
• ImprovMX: forwards to our mailbox the mail written to @aestudio.tech addresses.

Some of these providers may process data outside the European Union. In that case the transfer takes place with the safeguards provided by the GDPR, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework. We do not sell or pass on your data to anyone.

Your rights

You can ask us at any time to see the data we hold about you, to correct it, to delete it, to restrict its use, to receive it in a readable format, or to object to its processing (Arts. 15–22 GDPR). Just write to ciao@aestudio.tech.

If you believe your data is being processed incorrectly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.