Privacy Policy

1. Data Controller

The Data Controller is:

Perseo
Headquarters: Florence, Italy
Website: perseodesign.com
Email: Contact form

2. Introduction

This Privacy Policy describes how Perseo collects, uses, and protects users' personal data on the perseodesign.com website, in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection laws.

3. Data Collected and Purposes of Processing

3.1 Navigation Data

During the normal operation of the site, IT systems and software procedures acquire personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified individuals but, by its nature, could allow users to be identified through processing and association with data held by third parties. This data category includes IP addresses, URI addresses of requested resources, time of request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the response, and other parameters related to the user's operating system and IT environment.

Purpose: This data is used to enable browsing, protect the website, diagnose technical issues, and verify its proper operation.

Legal basis: Legitimate interest of the Data Controller (Art. 6, par. 1, let. f) GDPR)

Retention period: Navigation data is kept for the time strictly necessary for the above purposes and in any case not beyond 7 days.

3.2 Data provided voluntarily by the user

Submitting requests through the website forms entails the acquisition of the data entered by the user, such as name, email address, request subject, and message content, as needed to reply and manage the request.

Purpose: Responding to user requests, providing information about our services, and managing quotes or pre-contractual requests.

Legal basis: Performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR) and, where applicable, the data subject's consent (Art. 6(1)(a) GDPR).

Retention period: Voluntarily provided data is kept for the time necessary to fulfill the request and, subsequently, for a period not exceeding 2 years, unless otherwise required by law.

3.3 Template downloads and newsletter

When you request a free template download, we collect your email address and the consent choice indicated in the form. The email address is sent to Mailjet to manage subscription to the Perseo newsletter and the related contact list. The download link is generated by our server using a temporary token.

Purpose: Providing the requested template and, with explicit consent, managing the newsletter subscription and related communications.

Legal basis: Performance of the user's request for the download (Art. 6(1)(b) GDPR) and consent for newsletter communications (Art. 6(1)(a) GDPR). Newsletter consent may be withdrawn at any time.

Retention period: Newsletter data is retained until consent is withdrawn or erasure is requested, subject to applicable legal obligations and the technical time required to process the request.

3.4 External resources and Google Fonts

To display typography, the website requests stylesheets and font files from Google Fonts. This technical request may transmit connection data to Google, such as the IP address and browser information. Perseo does not use Google Fonts for user profiling or analytics.

4. Cookies and Similar Technologies

The main website uses technical cookies strictly required for browsing and language management. It does not currently use Google Analytics, Meta Pixel or other profiling cookies on the root site. For more information, see our Cookie Policy.

On the main perseodesign.com website we do not use:

• Profiling cookies
• Third-party cookies for advertising purposes
• Google Analytics, Meta Pixel, or other analytics tools loaded directly by the main website
• Tracking tools for remarketing or personalized advertising

5. Processing Methods

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.

Personal data is processed at the Data Controller's operational headquarters and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.

6. Communication and Dissemination of Data

Your personal data is not disseminated and may only be communicated to:

• Providers of IT system management, hosting, maintenance, and website security services, acting as Data Processors where applicable
• Mailjet, used to manage the newsletter list and related communications, as well as other providers strictly necessary to deliver requested services
• Competent authorities where disclosure is required by law

Providers processing personal data on behalf of the Data Controller are selected and managed in accordance with applicable law and, where required, appointed as Data Processors under Art. 28 GDPR.

7. Data Transfer Abroad

Some technical providers used by the website, including services related to Google Fonts and Mailjet, may process data outside the European Economic Area. In such cases, transfers take place in compliance with the GDPR through an adequacy decision or other safeguards under Articles 44 et seq. GDPR, such as Standard Contractual Clauses where applicable.

8. Data Subject Rights

Under Articles 15-22 of the GDPR, the data subject has the right to:

• Access: obtain confirmation of the existence or otherwise of personal data concerning them
• Rectification: obtain the rectification of inaccurate data or integration of incomplete data
• Erasure: obtain the erasure of their personal data (right to be forgotten)
• Restriction: obtain the restriction of processing when one of the hypotheses provided by Art. 18 GDPR applies
• Portability: receive personal data in a structured, commonly used, and machine-readable format, and transmit it to another data controller
• Objection: object to the processing of their personal data
• Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
• Complaint: lodge a complaint with the Data Protection Authority (www.garanteprivacy.it)

To exercise your rights, you can contact us via the contact form. Contact form.

9. Changes to the Privacy Policy

This Privacy Policy may be subject to changes over time. We invite you to regularly consult this page to stay updated on our privacy practices. The date of the last update is indicated at the beginning of the page.

10. Data Security

We adopt appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure. These measures include:

• Use of encrypted HTTPS connections
• Limiting access to personal data to authorized personnel only
• Periodic data backups
• Server protection through firewalls and monitoring systems

11. Minors

The site is not intended for children under 16. We do not intentionally collect personal data from children under 16. If we become aware that we have collected personal data from a minor without the consent of parents or legal guardians, we will immediately delete such data.

12. Contacts

For any questions regarding this Privacy Policy or to exercise your rights, you can contact us through the contact form. Contact form.