Privacy Policy & Data Processing
Last updated: 6 October 2026
This notice explains how this website handles the personal data of the people who visit it, in accordance with Article 13 of EU Regulation 2016/679 (the General Data Protection Regulation, "GDPR"). In case of discrepancies, the Italian version prevails.
1. Data Controller
The controller of the personal data collected through this website is:
2. Types of Data and Purposes
a) Data sent through the contact / project brief form
Filling in the enquiry and project brief form on the "Contact" page involves the collection of the following personal data: full name and email address (required), company/brand and project area (optional), as well as the details of the photography project described in the message.
The data are processed solely to reply to the request, prepare a quote and put together a commercial or consulting proposal for the Studio's photography services.
Legal basis: steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
b) Data sent voluntarily by email or other direct channels
Sending messages to the email addresses, phone numbers or social media accounts listed on this website involves the acquisition of the sender's address or contact details, which are needed to reply, together with any other data included in the message.
Legal basis: pre-contractual or contractual measures (Art. 6(1)(b) GDPR).
c) Browsing data
The IT systems and software that run this website collect, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, request times). These data are used only to deliver the pages correctly and to keep the infrastructure secure.
3. Cookies and Visit Statistics
Cookies: this website does not use profiling or advertising cookies. It only uses a technical session cookie (PHPSESSID), needed for the contact form to work and to protect it against automated messages; the cookie is deleted when the browser is closed and, being strictly necessary, does not require consent.
Visit statistics: to know, in aggregate form, the number of visits and the most viewed pages, the website uses Umami, a statistics service that does not use cookies and does not build user profiles. The data collected are anonymous and aggregated and do not allow individual visitors to be identified.
4. How Data Are Processed and Stored
Data collected through the contact form or by email are processed with IT and electronic tools, using security measures designed to prevent loss, misuse or unauthorised access. The data are not disclosed to third parties, published or used for advertising profiling. They are kept only for as long as strictly necessary to handle and answer the request, or to meet subsequent accounting and tax obligations.
5. Your Rights
As a data subject, you may at any time exercise the rights set out in Articles 15 and following of the GDPR, including the right to:
- obtain confirmation as to whether or not personal data concerning you are being processed;
- know the source of the data and the purposes and methods of processing;
- request that your data be updated, corrected, completed or erased;
- request restriction of processing or object to it;
- lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.
To exercise your rights, send a written request to the data controller at info@lucacorsetti.com.