Extended Privacy Policy
Data Controller:
- Colla Studio S.r.l.
- Registered Office: Via Giuseppe Meda 28, 20141 Milano
- DPO/Privacy Contact: hello@collastudio.com
1. What Data We Process
1A. Navigation Data (System)
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data (e.g., IP addresses, system logs, user agents) the transmission of which is implicit in Internet protocols. These data are not collected to be associated with the user, but to technically manage the site and protect it from abuse.
1B. Voluntarily Provided Data (Contacts)
The optional sending of messages to contact addresses, filling out forms, or using messaging buttons on the site involves the subsequent acquisition of data necessary to respond to requests.
- Email and Forms: Sender's address and other data entered in the message.
- WhatsApp / Phone: By using the "Call" or "WhatsApp Chat" buttons, the Controller will acquire your phone number exclusively to handle the requested communication. By clicking the WhatsApp button, data will also be processed by the WhatsApp Ireland Limited platform according to their privacy policy.
1C. Cookies and Tracking
For details on tracking (Google, Meta, LinkedIn) and to manage or revoke consents, please consult our Cookie Policy.
2. Why We Process Your Data (Purpose and Legal Basis)
| Purpose | Legal Basis | Provision |
|---|---|---|
| 1. Response to requests Management of quotes, pre-contractual information or customer assistance via email/form/chat. |
Execution of pre-contractual or contractual measures (Art. 6.1.b GDPR). | Mandatory. Without data (e.g., email), we cannot respond |
| 2. Site Security Prevention of cyber attacks and log management. |
Legitimate Interest of the Controller (Art. 6.1.f GDPR). | Automatic (Navigation). |
| 3. Analysis and Marketing Only if activated via banner. |
Consent (Art. 6.1.a GDPR). | Optional. |
3. Who We Share Data With
Your data will not be disseminated. They may be known by:
- Technical service providers: Hosting providers, email managers, web maintainers (appointed as Data Processors where necessary).
- External Platforms: Meta Platforms (in case of use of the WhatsApp button) and Google/LinkedIn (only subject to cookie consent).
- Consultants: Accountants or legal firms only in case of administrative requirements or defense in court.
4. Extra-EU Data Transfer
Navigation and contact data reside on servers within the European Union. However, the use of third-party services (Google, WhatsApp, Meta) involves a potential transfer of data to the USA, legitimized by the Data Privacy Framework (DPF) or Standard Contractual Clauses (SCC).
5. How Long We Keep Data
- Generic contacts / Quotes not followed by an order: Kept for the time necessary to handle the request and subsequently deleted (max 12-24 months for legitimate interest of contact history).
- Administrative data (Customers): 10 years (legal obligation Art. 2220 Italian Civil Code).
- Navigation data and Cookies: As indicated in the Cookie Policy.
6. Your Rights
At any time you can exercise the rights ex Arts. 15-22 GDPR (access, rectification, erasure, limitation, portability, objection) by contacting: hello@collastudio.com.
You have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).
Last updated: 03.02.2026