Privacy Policy
Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data controller is Varenne Digital [company name], registered office at [registered address], VAT no. [VAT number]. For any request about your data, write to info@varenneagency.com.
2. What data we collect
When you fill in the form on the Contact page, we collect:
- data you provide: full name, email address, company, project type, goals and the content of your message;
- technical data: IP address, browser type (user agent), date and time of submission and of your acknowledgement of this policy.
Please do not include special categories of data in your message (for example health data, political or religious opinions): they are not needed to answer your request.
3. Purposes and legal basis
- Answering your request and, if you wish, assessing a project together. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- Website security and prevention of abuse and spam (technical data). Legal basis: our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).
We do not use your data for marketing, newsletters or profiling, and we do not share it with third parties for those purposes.
4. Whether providing data is required
Your name, email and message are required for us to reply: without them we cannot follow up on your request. All other fields are optional.
5. How and how long we keep your data
Data is processed electronically and stored in a protected database that only authorised staff can access. Requests received through the form are kept for 24 months from receipt and then deleted automatically, unless they lead to a contract: in that case they are kept for the duration of the relationship and for the periods required by law.
6. Who receives your data
Your data may be processed by authorised Varenne Digital staff and by our hosting provider [provider name], appointed as data processor under Art. 28 GDPR. Your data is never made public.
7. Transfers outside the EU
Data submitted through the form is stored on servers located in the European Union. To display typefaces, the site uses Google’s Google Fonts service: your browser sends your IP address to Google, and it may be transferred to the United States. Such transfers rely on the EU-US Data Privacy Framework adequacy decision.
8. Cookies
This website does not use profiling, analytics or third-party cookies and does not set any cookies on your device.
9. Your rights
At any time you can exercise your rights under Articles 15–22 GDPR:
- access your data and obtain a copy;
- have it corrected or erased;
- restrict its processing;
- receive it in a structured format (portability);
- object to processing based on legitimate interest.
To exercise them, write to info@varenneagency.com: we will reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
10. Changes to this policy
We may update this policy. The current version is always published on this page, together with the date of the last update.