Your data.
Your privacy.

Who controls your data

The data controller is Giraffa Consulting di Ugrcic Nicola, VAT no. 04810390239, based in Verona and operating as Giraffa Studio. For enquiries about your data: nicola@giraffastudio.it.

A data protection officer has not been appointed, as the circumstances specified in Article 37 of the Regulation do not apply.

Data submitted through forms

We collect the information you enter: name, email, phone number if provided, company or profession, city, portfolio link and message. We use it to respond to your enquiry and, if you wish, begin working together.

• Project enquiries: responding, assessing the situation and preparing a proposal. Legal basis: consent and, subsequently, pre-contractual measures (Articles 6(1)(a) and 6(1)(b)).
• Applications: assessing a professional collaboration. Legal basis: consent (Article 6(1)(a)).
• Collaboration proposals: assessing and defining an agreement. Legal basis: consent and, subsequently, pre-contractual measures.

A hidden field helps reject automated submissions. If it is filled in, the enquiry is not saved.

Browsing and external services

The public website’s code sets no profiling cookies and includes no advertising pixels. To count visits we use Google Analytics, which runs only if you accept it from the bar shown on your first visit: the legal basis is your consent, and you can withdraw it at any time from the same bar. Switching language does not save a browser preference. See the cookie notice for details.

The website is hosted by Vercel. Fonts load from Google Fonts; images and graphics are served by the website. When you submit a form, your browser contacts Supabase. These services receive the technical information needed to handle the request, including your IP address.

Instagram and the private portal are separate websites, opened only when you follow their links.

Where and how long we keep data

Enquiries are stored in the studio’s management system, hosted on Supabase servers in the European Union, and are accessible to authorised studio personnel.

• If no working relationship follows, data is deleted within 12 months through a daily automated procedure.
• Client data is kept for the duration of the relationship and for the subsequent ten-year tax retention period.
• Professional and partner data is kept for the duration of the agreement and for two years afterwards.

Vercel retains technical access logs to operate and protect its service. We do not use them for profiling or combine them with enquiries.

Who can access the data

We do not sell data or share it for marketing purposes. It may be accessed by:

• studio personnel involved in the enquiry;
• technical providers Vercel and Supabase, processing data on our behalf;
• our tax adviser, where needed to fulfil legal obligations relating to clients.

If another professional or partner needs to work on a project, we inform you in advance and share only the information they need.

Your rights

You may request access, correction, deletion, restriction of processing, objection and data portability. You may withdraw consent without affecting the lawfulness of processing carried out before withdrawal.

Email nicola@giraffastudio.it: we respond within thirty days. You may also lodge a complaint with the Italian Data Protection Authority.

Transfers and updates

Enquiry data remains on servers in the European Union. Loading fonts from Google Fonts and, if you have accepted them, Google Analytics statistics may involve contact with infrastructure outside the European Economic Area, on the basis of standard contractual clauses adopted by the European Commission.

When this notice changes, we update the date at the top. Previous versions are available on request.