Controller
The controller is mescio, VAT 04959740756 (IT04959740756), Italy. For any request: ciao@mescio.it.
What is collected
The studio has no signup form and does not sell lists. Data arrives only if someone writes or books.
- Email and messages sent to ciao@mescio.it: name, address, content, any attachments. Used to reply and, if work starts, to run the engagement.
- Cal.com bookings (free call): name, email, timezone, notes. The calendar is run by Cal.com / cal.eu.
- Billing data, only for clients: what is needed to issue invoices and meet accounting duties.
- Hosting logs (Vercel): access logs, IP address, user agent, to run and protect the site.
- Vercel Analytics and Speed Insights: traffic and performance measures, without profiling cookies.
Why
Legal basis: pre-contractual steps and contract (GDPR art. 6.1.b) when a call is booked or work starts; legal obligation (art. 6.1.c) for invoicing; legitimate interest (art. 6.1.f) to keep the site running and see whether pages hold up.
Third parties
- Vercel — hosting, analytics, performance.
- Cal.com — first-call booking. Their notice applies too.
- Google Fonts — typefaces load from Google. The request may include an IP address.
No data is sold or handed over for third-party marketing.
How long
Contact messages stay as long as needed to handle the request and the professional relationship. Tax records stay for the statutory term (usually ten years). Technical logs stay for a short period, enough for security and diagnosis.
Cookies
The site does not use profiling cookies or ad banners. What remains is what the site needs to work (including light/dark theme, stored locally on the device) and Vercel’s traffic measures.
Rights
Access, rectification, erasure, restriction, objection and portability can be requested at ciao@mescio.it. A complaint can also be filed with the Italian Data Protection Authority.