Privacy Policy

1. Data Controller

The Data Controller is:

SPa — Architecture & Design Practice
VAT No.: 14434421005
Italy
Email: info@sp-a.xyz

​

2. Types of Personal Data Collected

SPa may collect the following categories of personal data:

• Identification and contact data, such as name and email address, provided voluntarily by users via contact forms or direct communications

• Technical and usage data, such as IP address, browser type, device information and anonymized navigation data, collected automatically during website browsing

SPa does not process special categories of personal data.

​

3. Purposes of Processing

Personal data are processed exclusively for the following purposes:

• Responding to inquiries and requests submitted through the website

• Managing professional communications and pre-contractual relationships

• Ensuring the proper functioning, security and performance of the website

• Producing anonymous statistical analyses on website usage

Personal data are not used for profiling or marketing purposes.

​

4. Legal Basis for Processing

The processing of personal data is based on:

• The consent of the data subject

• The execution of pre-contractual measures requested by the data subject

• The legitimate interest of the Data Controller in ensuring website functionality and security

​​

5. Processing Methods and Security

Personal data are processed using electronic and organizational measures designed to ensure an appropriate level of security, confidentiality and integrity, and to prevent unauthorized access, disclosure or alteration.

​

6. Data Retention

Personal data are retained only for the time strictly necessary to fulfill the purposes for which they were collected, and in any case in compliance with applicable legal and regulatory obligations.

​

7. Data Communication and Disclosure

Personal data will not be sold or disclosed to third parties.

Data may be shared only with service providers strictly necessary for technical and operational purposes related to website hosting and maintenance, acting as data processors in accordance with GDPR.

​

8. Cookies

This website uses:

• Essential technical cookies, necessary for the correct functioning of the website

• Anonymous analytical cookies, used to collect aggregated information on website usage

Further details are provided in the Cookie Policy and through the cookie consent banner.

​

9. Data Subject Rights

In accordance with Articles 15–22 of the GDPR, data subjects have the right to:

• Access their personal data

• Request rectification or erasure

• Request restriction of processing

• Object to processing

• Request data portability

• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

​​

10. Exercising Your Rights

Requests relating to the exercise of data subject rights may be submitted by contacting the Data Controller at the email address indicated above.

​

11. Updates to This Policy

SPa reserves the right to update this Privacy Policy at any time. Users are encouraged to review this page periodically to remain informed about how their data are protected.