Privacy Policy

1. Data Controller

The data controller is Salise Studio, reachable at legal@salise.design. This policy explains how personal data is processed on salise.design under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the Italian Privacy Code (D.Lgs. 196/2003) and the guidance of the Italian Data Protection Authority (Garante per la protezione dei dati personali). No Data Protection Officer has been appointed, as one is not required for our activities.

2. What Data I Process and Why

Emails you send. If you write to hello@salise.design or legal@salise.design, I process your name, email address and whatever you choose to share about your project — to reply and, where we decide to work together, to prepare a proposal. Legal basis: steps taken at your request before entering into a contract and performance of the contract (Art. 6(1)(b) GDPR); for general questions, our legitimate interest in answering them (Art. 6(1)(f)).

Booking a call. The calendar on /book is provided by Cal.com and only loads after you accept cookies. When you book, Cal.com collects your name, email, time zone, the chosen slot and any notes you add, so the call can be scheduled. Legal basis: Art. 6(1)(b) GDPR.

Clients. If you become a client, contact details, project information, documents and invoices are processed to deliver the project, including through the private client portal. Legal basis: performance of the contract (Art. 6(1)(b)) and compliance with tax and accounting obligations (Art. 6(1)(c)).

Free tools. The project estimator runs entirely in your browser and stores nothing; if you choose to email your estimate, it is handled as an email (see above). When you use the website analyzer, the web address you enter is fetched by our server and sent to Microlink to take a screenshot and, when enabled, to Google PageSpeed Insights for performance scores. Reports are not stored. To prevent abuse, your IP address is kept in server memory for up to 10 minutes for rate limiting. Legal basis: legitimate interest in providing the tool and keeping it secure (Art. 6(1)(f)).

Site analytics. Vercel Web Analytics produces aggregated, cookie-less traffic statistics (page, referrer, country, device and browser type); your IP address is not stored and you are not tracked across sites. Legal basis: legitimate interest in understanding how the site is used (Art. 6(1)(f)).

Advertising measurement. Only if you accept cookies, the Meta (Facebook) Pixel collects browsing data such as pages visited, to measure and improve Salise Studio ads on Facebook and Instagram. Legal basis: your consent (Art. 6(1)(a)). For the collection and transmission of this data, Salise Studio and Meta Platforms Ireland Ltd. act as joint controllers; Meta's subsequent processing is governed by its own Privacy Policy.

Technical data. To deliver and protect the site, the hosting provider processes technical data such as IP address, browser type and request logs. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f)).

3. Who Receives the Data

We don't sell your data. It is shared only with providers that help run the site and the studio, acting as data processors under data processing agreements, or as independent controllers where stated:

• Vercel Inc. — hosting, delivery and cookie-less analytics
• Cal.com, Inc. — call booking (only after cookie consent)
• Microlink — screenshots for the website analyzer
• Google LLC — PageSpeed Insights audits for the website analyzer, when enabled
• Meta Platforms Ireland Ltd. — advertising measurement (only after cookie consent)
• Email, accounting and invoicing providers, and our accountant, where needed

4. Transfers Outside the EU

Some of these providers are based in, or access data from, the United States. In those cases transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses (Art. 45–46 GDPR). You can ask for more information at the email above.

5. How Long Data Is Kept

• Emails and enquiries that don't lead to a project: up to 24 months after our last exchange.
• Client and project data: for the duration of the project and up to 24 months after it ends.
• Contracts, invoices and accounting records: 10 years, as required by Italian law (Art. 2220 Civil Code).
• Booking data: as long as needed for the call, then deleted with the related enquiry.
• Analyzer rate-limit data: up to 10 minutes, in memory only.
• Your cookie choice: 6 months, stored in your own browser.

6. Your Rights

Under Articles 15–22 GDPR you can ask to access, correct or delete your data, restrict or object to its processing (including processing based on legitimate interest), and receive your data in a portable format. Where processing is based on consent, you can withdraw it at any time — for cookies, via Cookie settings — without affecting processing carried out before. To exercise your rights, email the address above; we'll reply within one month.

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it) or the supervisory authority of your country.

7. Other Information

Providing your data is voluntary, but without contact details we can't reply to you or schedule a call. No decisions with legal or similarly significant effects are made by automated means. This site is not directed at children under 14. This policy may be updated; the date at the top shows the latest version. More on cookies in the Cookie Policy.