Transparency
Privacy & analytics.
How enquiries submitted through the website are handled and which aggregate data is used to understand visits and performance.
Controller and contact details
The data controller is Giosella D’Amato – GDA Event Studio.
For requests concerning personal data, please use the contact details below.
Contact form
When you use the contact form, we process your first name, surname, email address, telephone number and message. We use this information solely to respond to your enquiry, manage any subsequent communications and take pre-contractual steps at your request. The legal basis is Article 6(1)(b) GDPR.
First name, surname, email and message are required; phone is optional. The submitting page and form language accompany the enquiry. Where available, a general source such as Google or ChatGPT is included, derived from the referring domain or the utm_source parameter. This feature does not store browsing journeys, visitor identifiers or complete URL parameters. The information helps provide context for the enquiry and is not used for promotional contact.
The form sends the enquiry to FormSubmit, which forwards it to the stated Gmail address. The website does not retain a copy of the message in its own database. FormSubmit and Google process the information as technical providers under their respective terms and privacy notices.
Retention depends on the outcome of the enquiry. Messages remain in the email account while they are useful for managing the contact and any related obligations or legal rights. The website does not apply automatic deletion to messages.
The information is not used for newsletters or promotional communications without a separate request. Please do not submit health information, identity documents, payment details or other particularly sensitive information through the form.
Technical and security data
The hosting and security infrastructure receives the technical information needed to display and protect the website, such as the IP address, request date and time, requested page and browser information.
This processing is necessary to operate and protect the website and is based on the legitimate interest in maintaining its availability, integrity and security under Article 6(1)(f) GDPR. GDA Event Studio does not maintain its own log archive; any infrastructure logs are retained by the providers for the technical periods defined by their services.
Cloudflare may set the strictly necessary __cf_bm cookie to distinguish legitimate traffic from automated systems and protect the website. It generally expires after approximately 30 minutes of inactivity and is not used for advertising. Cloudflare may use additional temporary technical cookies when a security check is required.
Cloudflare Web Analytics
We use Cloudflare Web Analytics to understand, in aggregate:
- visits and page views
- pages viewed and referring domain
- visitor country, without precise location
- device type, browser and operating system
- loading performance and Core Web Vitals
Cloudflare states that Web Analytics does not use cookies, localStorage or fingerprinting and does not follow visitors across different websites. It does not allow GDA Event Studio to see an individual visitor’s name, email address or IP address.
No analytics identifier is stored on the visitor’s device. Aggregate dashboard data is available for the previous six months.
After the forwarding service accepts the enquiry, a confirmation page without personal data is displayed and measured by Web Analytics as a normal page view. Visits to that page are an indication of submissions, not confirmation of email delivery or an exact count: direct visits and reloads can affect it.
Providers and international processing
Information may be processed, where necessary, by the hosting and security infrastructure providers, Cloudflare, FormSubmit and Google for Gmail. Some providers operate internationally. The links below lead to the public notices made available by each provider; FormSubmit’s public policy does not specify every detail concerning infrastructure, retention and international transfers.
Personal data is not sold or publicly disclosed.
Your rights
You may request access, correction, deletion, restriction, objection and, where applicable, data portability by emailing the address shown on this page.
We do not carry out profiling or automated decision-making that produces legal or similarly significant effects.
You may also lodge a complaint with the competent supervisory authority: Italian Data Protection Authority