Legal

Privacy policy

Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

Dedicato Design
Piazzale Crivellone 13, 20149 Milano (MI), Italy
Email: dedicatodesign@gmail.com
Phone: +39 366 301 8764

2. Types of data collected

The website collects the following categories of personal data:

  • Navigation data: IP address, browser type, operating system, pages visited, access times. This data is collected anonymously and in aggregate form through Cloudflare Web Analytics (a cookieless service).
  • Voluntarily provided data: first name, last name, email address, and message entered in the contact and product inquiry forms on this website.
  • Consent data: cookie preferences, stored in the technical cookie dd_consent.
  • Security data: the user's IP address is temporarily stored in pseudonymised form for anti-abuse protection (rate limiting) on the website's forms. Automatically deleted within 1 hour.
  • Session navigation data: the website records locally in the browser (sessionStorage) the pages visited during the session. This data is transmitted to the Data Controller only upon form submission, to provide context to the request, and is deleted when the browser is closed.

3. Purposes and legal basis

PurposeLegal basis
Responding to product information requestsConsent (Art. 6(1)(a) GDPR)
Anonymous traffic analysisLegitimate interest (Art. 6(1)(f) GDPR)
Cookie preference managementLegal obligation (Art. 6(1)(c) GDPR)
Anti-abuse protection (rate limiting)Legitimate interest (Art. 6(1)(f) GDPR)
Statistical traffic analysis (Matomo, with consent)Consent (Art. 6(1)(a) GDPR)

4. Processing methods

Data entered in the contact and inquiry forms is transmitted via an encrypted server connection, processed by Cloudflare Workers, and forwarded to the Data Controller's mailbox via the Resend email service. Data is not permanently stored on the website's servers.

The website uses Cloudflare Turnstile, an anti-spam verification service, in the contact and product inquiry forms. Turnstile analyses browser information and the user's IP address to distinguish legitimate requests from automated ones, without requiring the resolution of visual CAPTCHA challenges. The technical cookie cf_clearance may be set as a result of this verification.

With the user's explicit consent (via the cookie banner), the website may use Matomo, a self-hosted statistical analysis service. Matomo collects navigation data through the cookies _pk_id.* and _pk_ses.*, as described in the cookie policy. Without consent, Matomo is not activated and no analytics cookies are set.

The website detects the browser language (navigator.language) for a one-time automatic redirect to the corresponding language version. This information is not stored or transmitted to third parties.

5. Data recipients

  • Cloudflare, Inc. — website hosting, form processing (Workers), aggregate analytics (cookieless), and anti-spam verification (Turnstile). Navigation data is processed anonymously. Cloudflare privacy policy.
  • Resend, Inc. — email delivery service used to forward messages from the contact and inquiry forms. Resend privacy policy.
  • Matomo (self-hosted) — statistical analysis on the Data Controller's servers, activated only with consent. Data is not shared with third parties. Matomo privacy policy.

Personal data is not shared with third parties for their own purposes. The processors listed above act as sub-processors pursuant to Art. 28 GDPR.

6. Retention period

  • Consent cookie (dd_consent): 182 days (6 months), in accordance with the Italian Data Protection Authority (Garante) guidelines.
  • Navigation data: processed anonymously in aggregate form, not traceable to individual users.
  • Form data: processed in real time and forwarded via email; not permanently stored on the website's servers.
  • Anti-abuse data: pseudonymised IP address, retained for a maximum of 1 hour, then automatically deleted.
  • Matomo cookies (if consent is given): _pk_id.* 13 months, _pk_ses.* 30 minutes.
  • Session navigation data: stored in the browser (sessionStorage) for the duration of the session, automatically deleted when the browser is closed. Transmitted to the Data Controller only upon form submission.

7. Data subject rights

In accordance with Articles 15-22 of the GDPR, you have the right to:

  • access your personal data;
  • obtain rectification or erasure of your data;
  • restrict processing;
  • object to processing;
  • request data portability;
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given prior to withdrawal.

To exercise your rights, write to dedicatodesign@gmail.com.

8. Right to lodge a complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe that the processing of your data violates the GDPR.

9. Changes to this policy

The Data Controller reserves the right to amend this policy at any time. The date of the last update is indicated below.

Last updated: March 2026