Privacy Policy

The data controller — the party that decides how and why your data is processed — is:

Mattia Zanin, trading as “Ciao Stranger”, VAT no. IT04562920241, based at Via Campestrini 38, 36075 Montecchio Maggiore (VI), Italy. You can reach the controller about anything in this notice at info@ciaostranger.com.

No Data Protection Officer (DPO) has been appointed, as appointment is not mandatory for an operator of this size and activity. If that changes, this section will name the DPO and their contact details.

We only process the data you choose to give us. When you submit the request form, we collect:

• Your name— so we know who we’re talking to.
• Your email address — so we can reply.
• Your company — optional, for context.
• Your message / brief— what you’d like us to build, plus any plan you selected.

The form posts to a server-side action that sends us your submission by email; we don’t run a database of enquiries. We do not collect special-category data, and you should not include any in your message. We also do not use tracking, profiling, or advertising cookies — see our Cookie Policy.

If you email us directly at info@ciaostranger.com, we process the contact details and content of that email for the same purpose.

• To answer your request and discuss working together — legal basis: steps taken at your request prior to entering a contract, and our legitimate interest in responding to enquiries (GDPR Art. 6(1)(b) and 6(1)(f)).
• To send the cookie/consent and security functions the site needs to work — legal basis: legitimate interest in operating a secure website, and, where consent is required for non-technical cookies, your consent (GDPR Art. 6(1)(a)).
• To meet legal obligations (e.g. tax or accounting, if we go on to work together) — legal basis: legal obligation (GDPR Art. 6(1)(c)).

Providing your data is voluntary, but without the name, email and message we cannot reply to your request.

We keep the data you send through the request form for up to 12 monthsfrom your request, after which it is deleted — unless a working relationship begins. In that case, the related data is kept for the duration of that relationship and for any period afterwards required to meet our legal and tax obligations, then deleted or anonymised.

We don’t sell or rent your data. We share it only with the service providers that help us run the studio, each acting as a data processor under appropriate agreements:

• Resend — delivers the contact/request emails to us.
• Vercel — hosts and serves this website.
• We’ll list any additional providers here if we engage them.

Some of these providers may process data outside the European Economic Area (for example in the United States). Where that happens, the transfer is protected by appropriate safeguards under the GDPR — such as the European Commission’s Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework. You can ask us for a copy of the relevant safeguards using the contact details below.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased (“right to be forgotten”);
• restrict or object to how we process your data;
• receive your data in a portable format (data portability), where applicable;
• withdraw any consent you’ve given, at any time, without affecting processing already carried out.

To exercise any of these, email info@ciaostranger.com. We’ll respond within the timeframe the law allows (normally one month).

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority in your country of residence.

For any question about this notice or your data, contact the data controller at info@ciaostranger.com.

We may update this policy from time to time; the “last updated” date above always reflects the current version.