Privacy Policy
This policy explains, in plain words, how personal data is handled on this website, in accordance with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).
Who is responsible The data controller is EMSI Studio ("EMSI", "we"). For any question or request about your personal data, write to studio@emsistudio.com.
What we collect We only collect what you choose to send us through the Enquire form: your name, your email address, your role (for example collector or gallery) and your message.
We do not ask for any other personal data. We do not create profiles, we do not sell or share your data for marketing, and we do not use profiling or advertising cookies.
Why we use it Only to read and answer your enquiry, and to follow up on it if you ask us to. The legal basis is your request (art. 6(1)(b) GDPR) and our legitimate interest in replying to messages sent to us (art. 6(1)(f) GDPR).
How long we keep it We keep your data only for as long as it is needed to answer you. In any case, all personal data received through this website is permanently deleted no later than 12 months after we receive it, unless the law requires us to keep it longer (for example if a sale follows, for tax purposes).
Who else handles it Your data is never sold. It is handled only by the technical providers that make this website work, and only for that purpose:
- Cloudflare – hosting of the website and anonymous visit statistics, without cookies.
- Formspree – delivery of the Enquire form to our mailbox.
Some of these providers may process data outside the European Union. In that case the transfer is protected by the safeguards required by the GDPR (EU Standard Contractual Clauses or the EU–US Data Privacy Framework).
Your rights At any time you can ask to see the data we hold about you, to correct it, to delete it, to limit or object to its use, or to receive a copy (articles 15–22 GDPR). Just write to studio@emsistudio.com: we will reply within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).