How I handle your data.
Last updated 4 September 2026. Provided under Articles 13–14 of Regulation (EU) 2016/679 (GDPR) and the UK GDPR.
Who is responsible
The data controller is Stefano Andrea Schiavon, sole trader, VAT no. IT 14753030965, Milan, Italy, trading as Skiavon Studio. There is no appointed Data Protection Officer, as none is required at this scale.
What is collected, and why
This site has no tracking cookies, no advertising, and no profiling. Data reaches me in only two ways:
- The contact form. Your name, email address, company where given, and the content of your message. It is used for one purpose: to read and answer your enquiry, and to carry on the conversation if it leads somewhere. The legal basis is the steps taken at your request before entering into a contract, and my legitimate interest in responding to professional enquiries.
- Aggregate site statistics. Page views, referring site and country, measured without cookies and without any identifier that could single you out. I cannot recognise a returning visitor. The legal basis is my legitimate interest in knowing whether the site is read.
Who processes it besides me
- Netlify — hosting of this site and delivery of contact form submissions.
- Microsoft — the mailbox where your message lands, and the booking service behind the call link.
- Cloudflare — the cookie-free site statistics.
Each acts as a processor on my instructions. Some are established outside the EU and the UK; transfers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
How long it is kept
Enquiries that do not lead to work are deleted within twenty-four months. Where an enquiry becomes an engagement, correspondence is kept for the period required by Italian tax and professional record-keeping obligations. Aggregate statistics carry no personal data and are retained by the analytics provider on a rolling basis.
Your rights
You may ask for access to your data, its correction or erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. You may also lodge a complaint with the Italian Garante per la protezione dei dati personali, or with the UK Information Commissioner’s Office if you are in the United Kingdom.
To exercise any of these, use the contact form and say what you are asking for — requests are answered within one month.