Your privacy matters. Here is how we handle your personal data, with transparency and in compliance with the GDPR.
The controller of the personal data collected through this site is Piana Gianluca, with operational headquarters in Cuneo (CN), Italy. For any request regarding the processing of your data you can contact us by email at e-mail or by phone at +39 tel. .
This site only collects the personal data that the user voluntarily provides by filling in the contact form found in the "Contact" section. Specifically, we ask for: name, email address, phone number and a free-form description of the user's project or request.
No profiling or third-party marketing cookies are used, and no user-tracking systems are in place.
When the contact form is submitted, the edge infrastructure (Cloudflare Workers) automatically records in its technical logs the visitor's IP address and the user agent of the browser used, for the sole purpose of ensuring service security (rate limiting, anti-abuse) and diagnosing errors. These technical data are not used for profiling or marketing.
Data provided through the contact form is processed solely to respond to user requests, provide quotes, organise site visits and manage the resulting commercial relationship.
Such data will not, under any circumstances, be used for direct marketing, newsletters, profiling, nor transferred to third parties for their own purposes.
The processing of personal data is based on the explicit consent given by the user when submitting the contact form (Art. 6(1)(a) of EU Regulation 2016/679 - GDPR) and, where applicable, on the execution of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
Providing the data is optional; however, without the data marked as mandatory it will not be possible to follow up on the contact request.
The recording of the IP address and user agent in technical logs is instead based on the legitimate interest of the controller (Art. 6(1)(f) GDPR) in protecting the infrastructure and diagnosing technical issues.
Data is processed using IT and manual tools, with logic strictly tied to the purposes indicated and adopting security measures suitable to ensure its confidentiality and integrity.
Data collected through the contact form is kept only for as long as is strictly necessary to manage the user's request and related contractual or tax obligations. After this period, unless legal obligations require otherwise, data will be deleted or anonymised.
Technical logs generated by the Cloudflare infrastructure (Workers + edge), containing the IP address and user agent, are kept according to the provider's retention policy (typically up to 7-30 days depending on the log type), after which they are automatically deleted. Any logs generated by Google Cloud Run, used solely to send the confirmation email to the customer, have a maximum retention of 7 days.
Personal data is not communicated to third parties for commercial purposes. It may be processed by the controller's collaborators, who are duly instructed and bound to confidentiality, and by technical service providers appointed as data processors pursuant to Art. 28 GDPR.
In particular, for the operation of this site and the contact form the following sub-processors are used:
• Cloudflare, Inc. (USA) — provides the distribution and protection infrastructure of the site (Cloudflare Workers + Static Assets), the Cloudflare Turnstile anti-bot service used on the contact form, and the Email Routing / Email Workers service used to forward to the controller the emails generated by the contact form.
• Resend, Inc. (registered office in the United States, processing infrastructure configured in EU region — AWS datacenter in Ireland) — used exclusively to send the automatic confirmation ("noreply") email to the user who filled in the contact form. Only the user's name and email address pass through Resend, for the sole purpose of delivering the confirmation message. Email content and transmission metadata remain within the European Economic Area.
• Google Cloud (EU / USA) — provides the server infrastructure (Cloud Run) used exclusively as a relay for sending the confirmation email above. Cloud Run only receives the user's name and email; it does not receive or store the message content. Where possible, a European region is selected.
Some of the above providers are based in the United States or operate as global entities. Data transfers outside the European Economic Area take place on the basis of the appropriate safeguards provided by Articles 44 et seq. of the GDPR, in particular through Standard Contractual Clauses (SCCs) approved by the European Commission.
At any time the user can exercise the rights provided by Articles 15-22 of the GDPR, including: right of access, right of rectification, right to erasure ("right to be forgotten"), right to restriction of processing, right to object and right to data portability.
To exercise these rights, or to withdraw the consent given, simply send a request to e-mail . The controller will reply within the deadlines set by the regulations.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe that the processing of their data is in breach of applicable law.
This site does not use profiling cookies or third-party advertising tracking tools. The only cookies present are technical cookies set by the Cloudflare infrastructure for operational and security purposes (e.g. distinguishing human from automated traffic) and, as such, do not require the user's prior consent under Art. 122 of the Italian Privacy Code.
The site also uses the browser's session storage (sessionStorage) to keep just two technical interface states: the theme preference (light/dark) and a flag that avoids replaying the logo animation on every page. These are not cookies, they remain on the user's device, are not sent to any server and are cleared automatically by the browser when the tab is closed.
A complete list of cookies used, with the purpose and duration of each, is provided in the Cookie Policy reachable from the site footer.
To protect the contact form from automated submissions (bots, spam) we use Cloudflare Turnstile, a verification service provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA).
When you submit the form, Turnstile automatically collects some technical information from your browser (IP address, user agent, hardware and software characteristics, interaction timing) for the sole purpose of distinguishing human users from automated software. Cloudflare states that this data is not used for advertising or profiling and is not sold to third parties.
The legal basis for processing is the legitimate interest of the controller in protecting the site and its users from abuse and fraud (Art. 6(1)(f) GDPR). Data may be transferred outside the European Economic Area (United States); the transfer takes place with the appropriate safeguards provided by Articles 44 et seq. of the GDPR (Standard Contractual Clauses).
For more information you can consult the Cloudflare privacy policy at www.cloudflare.com/privacypolicy and the Turnstile documentation at developers.cloudflare.com/turnstile.
A direct link to the WhatsApp messaging service is present on the site, reachable through the wa.me domain, allowing the user to start a conversation with the controller using their own WhatsApp app.
It is a simple outbound hyperlink: until the user clicks, no cookie is set, no third-party code is executed and no data is sent to WhatsApp or to Meta Platforms, Inc. The mere presence of the link therefore involves no form of tracking or profiling.
From the moment of the click onwards the user leaves this site and accesses a service operated by WhatsApp LLC / Meta Platforms, Inc., to which the provider's terms of use and privacy policy apply (see www.whatsapp.com/legal). The controller has no control over the data collected by WhatsApp in that context.
The phone numbers made available through these links are the same ones used for ordinary business communications; messages received via WhatsApp are processed by the controller for the same purposes described in section 3 (replying to requests, quotes, managing the commercial relationship).
The controller reserves the right to update, integrate or modify this policy at any time, providing notice of changes within this page. Users are invited to consult it periodically.
Last updated: May 2026.