| Processing activity | Data categories | Legal basis | Retention |
|---|---|---|---|
| Contact form handling | First name, last name, email address, optional telephone number, and the subject and message of your enquiry. | Steps taken at your request before a possible working relationship; legitimate interest in managing genuine enquiries. | Your enquiry is delivered to us by email and is not stored in a website database. We keep the email we receive only for as long as needed to reply and manage the request. |
| Private-preview access | Password-gate status stored in the first-party technical cookie `wv_gate`. | Necessary to provide the private-preview access requested by the visitor; legitimate interest in access control. | 30 days. |
| Website security and operation | Limited technical request data, server logs and Cloudflare Turnstile anti-bot verification signals. | Legitimate interest in website security, abuse prevention and reliable operation. | Server and provider logs are limited to what is necessary for security and operation, according to hosting and infrastructure settings. |
| Transactional email delivery | Email address, name, enquiry content and email delivery metadata processed through Resend to deliver your message to the studio. | Steps taken at your request before a possible working relationship; legitimate interest in reliable message delivery. | Provider-side records follow the relevant Resend service settings and terms. |
| Legal compliance and claims | Data necessary to comply with applicable law or to establish, exercise or defend legal claims. | Compliance with legal obligations; legitimate interest in legal protection. | For the period required by law or by the relevant limitation period. |
Controller
The White Veil Studio (Milan, Italy) operates this website and is the controller for the processing described in this notice.
Privacy requests may be addressed to alisia@thewhiteveilstudio.com.
Data we process
When you use the contact form, we ask only for the information needed to understand your enquiry and to reply to you.
- First name, last name and email address.
- Optional telephone number.
- The subject and message of your enquiry.
- Technical data required to operate and protect the website, including limited server logs, the private-preview password-gate cookie and Cloudflare Turnstile anti-bot verification.
Purposes and legal bases
We process your contact details only to read and reply to your enquiry. The legal basis is taking steps at your request before a possible working relationship, together with our legitimate interest in handling genuine enquiries.
We process limited technical data and Cloudflare Turnstile signals to operate and secure the website. The legal basis is our legitimate interest in website security and reliability.
The password-gate cookie is necessary to provide access to the private-preview website and is not used for marketing or profiling.
We do not use your data for advertising, newsletters, analytics or profiling.
Recipients
Personal data may be accessible to categories of recipients that support the website and the studio's operations, such as hosting and infrastructure providers, security providers, email delivery providers, professional advisers and public authorities where required by law.
The current active providers are Vercel for hosting and infrastructure, Resend for transactional email delivery and Cloudflare Turnstile for anti-bot verification. No advertising, analytics, newsletter or CRM provider is active on the website.
Transfers outside the EEA
Some active providers may operate globally or use sub-processors outside the European Economic Area. Where a transfer outside the EEA occurs, it relies on an appropriate transfer mechanism such as an adequacy decision, the European Commission's standard contractual clauses or another GDPR-compliant safeguard.
Retention
Your enquiry is not stored in a website database. We keep the email we receive only for the time needed to evaluate and reply to the request.
The password-gate cookie expires after 30 days. Technical logs and provider-side records are kept according to the relevant service settings and are limited to what is necessary for security, operation and request handling.
Your rights
Where the GDPR conditions are met, you may request access, rectification, erasure, restriction, portability and objection. To exercise these rights, email alisia@thewhiteveilstudio.com.
You also have the right to lodge a complaint with a competent supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Automated decision-making
The website does not make automated decisions with legal or similarly significant effects and does not carry out profiling for marketing purposes.