This notice explains how Red Rise Studio processes the personal data of people who visit this website or use its contact channels, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable law.
Data controller
The data controller is Riccardo Riccio, operating under the name Red Rise Studio, based in Velletri (RM), Italy. For requests concerning personal data, you can write to redrise.studio.official@gmail.com or call +39 351 380 0967.
Data we process
Technical browsing data
To deliver the website, handle technical requests and protect it from abuse, hosting systems may process technical data associated with the connection, such as IP address, request date and time, requested page or resource, user agent, referrer and server-response data. The website does not use this data to create advertising profiles.
Data provided by the user
If you use the contact form, we process the data entered in the required fields, including your name, email address, service of interest and message, together with any information you choose to add. The form is handled through Netlify Forms. If you contact us by email, telephone, WhatsApp or a social network, we process the information you decide to share through that service. Links to these services do not transmit the content of your communication to this website before you activate them.
Consent preference
To remember the choice made in the banner, the website saves in the localStorage of your browser the key rrs-cookie-consent with the value accepted or rejected. This is technical local storage, not a cookie: the choice remains in the browser until it is changed or deleted and is not sent to Red Rise Studio.
Analytics data
Google Analytics 4 is loaded and used only after a positive consent action. In that case, browsing and interaction data, browser and device information, approximate location and pseudonymous identifiers stored in Google Analytics cookies may be processed. The website does not send names, email addresses, telephone numbers or form messages to Google Analytics. When Analytics is active, the form-submission event also contains none of the values entered in the fields.
Fonts loaded from Google Fonts
The website loads the Playfair Display font through Google Fonts. The browser therefore makes technical requests to the domains fonts.googleapis.com and fonts.gstatic.com to receive the stylesheet and font files; Google may process the IP address and technical connection data as part of the request. The website does not use this loading to measure visits; any processing carried out by Google is covered by its Google Privacy Policy.
Purposes and legal bases
- Website operation, security and maintenance: performance of the requested service and the controller’s legitimate interest in keeping the website available, secure and operational.
- Displaying pages: legitimate interest and the technical necessity of loading essential resources, including the external font used by the interface.
- Responding to requests and pre-contractual activities: performance of pre-contractual measures requested by the data subject when the request concerns a possible engagement; in other cases, legitimate interest in responding and managing the communication.
- Google Analytics 4: the user’s consent, expressed through the banner. Refusing does not prevent access to the website.
- Managing the cookie choice: the technical necessity of remembering the preference expressed in the browser.
Form data is not used for newsletters, commercial profiling or automated promotional communications. Any subsequent communications will be sent only if requested or if a separate applicable legal basis exists.
Nature of the provision
Fields marked as required in the form are necessary to understand and handle the request; if you do not complete them, the form cannot be submitted. Providing additional information is optional. Analytics consent is optional and can be refused without affecting access to the website.
Recipients and providers
Data may be processed, within the necessary limits, by providers supporting website operation and request handling: Netlify for hosting and the contact form, Google for Google Analytics 4 and Google Fonts, the email-service provider used by Red Rise Studio and, only if you choose to use those channels, WhatsApp and social-network providers. Their respective privacy roles depend on the service and applicable contractual relationship; Red Rise Studio does not disclose data for further purposes incompatible with those described in this notice.
Transfers outside the European Economic Area
Some technology providers may process data outside the European Economic Area. Where necessary, transfers must rely on an adequacy decision or other safeguards provided for by the GDPR. For up-to-date information about each provider’s processing, you can consult their notices, including Netlify’s Netlify Privacy Policy and the Google Privacy Policy.
Data retention
Request data is retained for as long as necessary to respond, assess or manage the relationship and, if a contractual relationship arises, for the periods required by law or needed to protect the controller’s rights. Technical browsing data is retained by hosting systems for as long as necessary for operational management and security, according to the provider’s settings. Data subject to Google Analytics 4 retention settings is currently configured for 14 months. Some information may be processed by Google for different periods and in different ways depending on the type of data and service used. The consent preference remains in the browser until changed or deleted.
Data-subject rights
Where provided by law, you may request access to, rectification, erasure, restriction of processing and portability of your data; you may also object to processing based on legitimate interest and withdraw Analytics consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You can exercise your rights by writing to redrise.studio.official@gmail.com. You also have the right to lodge a complaint with the competent supervisory authority.
Automated decision-making
Red Rise Studio does not use request data to make automated decisions producing legal or similarly significant effects and does not use the website for automated commercial profiling.
Updates to this notice
This notice may be updated when the website, services used or applicable obligations change. The date shown at the start of the page identifies the latest revision.