Privacy notice

Draft updated on 12 October 2026

Draft to be reviewed by a professional before publication. The highlighted parts in square brackets need to be completed or confirmed. This text is not legal advice. The Italian version (privacy.html) is the reference text.

This page explains which personal data I collect when you write to me or request a meeting, why I use it, how long I keep it and how you can exercise your rights under Regulation (EU) 2016/679 (GDPR).

1. Who processes your data

The data controller is Matia Zoffoli, Viale dei Mille 140R, 47042 Cesenatico (FC), Italy [VAT number to be added once issued]. For any privacy request you can write to info@studiomatiz.it.

2. What data I collect and when

• When you write to me by email or on WhatsApp: your email address, or your phone number and profile name, and the content of the message. I use WhatsApp Business, a Meta service that processes data under its own notice.
• When you request the first meeting: name, email address, optional phone number, the format you choose (in person or by video) and the days and times you prefer, through the form on the site. I confirm date and time myself, by email or on WhatsApp, and note them in my calendar (Google Calendar).
• When you ask for a starting price with the estimator: name, email, optional phone, your answers about your project (type of business, what you need, what your online presence looks like today, size of the job), the starting price shown to you and the confirmation that you have read this notice. I do not record your IP address in the contacts archive.
• Technical browsing data: IP address and technical information recorded by the hosting provider (Vercel) to run and protect the site.

I do not collect special categories of data (such as health data) and I do not ask you to provide them.

3. Why I use it and on what basis

• To reply to you and organise the meeting. Legal basis: your request and pre-contractual measures (Art. 6(1)(b) GDPR).
• To send you the price and the information you asked for. Same legal basis: pre-contractual measures at your request (Art. 6(1)(b)). Other communications, for example updates or follow-ups, are not sent without separate, specific consent (Art. 6(1)(a)), which is not requested at present.
• For legal obligations (accounting and tax), if you become a client. Legal basis: Art. 6(1)(c).

I do not sell your data and I do not use it for automated decisions that produce effects on you.

4. Who I share it with

With providers who process it on my behalf and only for these purposes: website hosting (Vercel), automatic emails (Resend), appointments calendar (Google Calendar, which I use to record meetings and to send you the invitation), messaging (WhatsApp Business, Meta) and contacts archive (Supabase, with data hosted in Frankfurt, Germany, European Union). The up-to-date list of providers is available on request.

If a provider is based or has servers outside the European Union, the transfer takes place with the safeguards required by the GDPR (adequacy decision or standard contractual clauses) [to be verified for each provider].

5. How long I keep it

[Proposed periods, to be confirmed]

• Requests with no follow-up: up to 12 months.
• Any contacts with separate consent for other communications (not planned at present): until withdrawal and in any case no longer than 24 months after the last interaction.
• Clients: for the duration of the relationship and for the time required by tax obligations.

6. Cookies and third-party tools

This site does not use profiling or statistics cookies. [Internal technical note: in this preview version the fonts and some libraries are loaded from third-party servers. Before publication they must be hosted on the site, so that visitors do not send their IP address to third parties. If embedded calendars, statistics or other external services are added, this section and the cookie banner must be updated.]

7. Your rights

You can ask me at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to the processing. You can also withdraw any consent you have given. Write to info@studiomatiz.it: I reply within one month.

If you believe the processing violates the rules, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali): garanteprivacy.it.

8. Updates

If I change the way I process data, I update this page and state the date.