Privacy Policy

Francesca Cantale, VAT no. 01578870527

Via del Cerreto 7, 50031 Barberino di Mugello (FI), Italy

Email: info@thallion-dev.it

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the applicable Italian data protection rules, including Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.

The main GDPR references are the principles of processing, legal bases, consent, transparency, data subject rights, privacy by design and by default, security of processing and the right to lodge a complaint with a supervisory authority.

This website may process browsing data, technical identifiers, consent preferences, name, email address, messages, project goals, budget range and any information voluntarily sent through forms, email or project requests.

Newsletter data is processed only if a dedicated subscription is activated by the user. No newsletter is activated by simply sending a project request.

• Website operation, security and fraud prevention: legitimate interest and technical necessity.
• Responding to contact, project and quote requests: pre-contractual or contractual measures.
• Analytics, review widgets and embedded third-party services: consent.
• Newsletter or optional communications, where present: consent.
• Legal, accounting or tax obligations: legal obligation.

The website may link to or integrate external services including Vercel, IONOS, Google Analytics, Google Tag Manager, Elfsight, Tree-Nation, Calendly, Stripe, Typeform, WordPress content APIs, Google Fonts and social networks. Each provider may process data according to its own privacy documentation.

The Tree-Nation climate label is used to show the website offset badge. According to Tree-Nation, this label does not use cookies, IP tracking, user identifiers or behavioural analytics, and only transmits the referring URL for contextual functionality.

Hosting, deployment, domains, email and infrastructure services may be provided through Vercel and IONOS. These providers may process technical connection data, security logs and information needed to deliver the website and related services.

Data may be processed by hosting providers, email providers, analytics platforms, scheduling tools, payment providers, newsletter platforms where active, technical collaborators and suppliers involved in website maintenance or project delivery.

Some providers may process data outside the European Economic Area. In that case, the transfer is managed through the safeguards made available by the provider, such as adequacy decisions, standard contractual clauses or equivalent mechanisms.

Contact and project request data is kept for the time necessary to reply, manage the commercial relationship and protect rights. Accounting or contractual data may be kept for the periods required by law. Consent preferences are stored in the browser localStorage until changed or deleted by the user.

Users may request access, rectification, erasure, restriction, portability and objection where applicable. Users may withdraw consent at any time through the cookie preferences button.

Requests can be sent to info@thallion-dev.it. Users may lodge a complaint with the competent Data Protection Authority.