Privacy policy
Last updated: August 2026
This notice explains how personal data is processed when you visit the Studio Liberty website or send an enquiry through the contact form, under Article 13 of Regulation (EU) 2016/679 (GDPR). The Italian version of this notice is the authoritative one.
Data controller
Raffaele De Luca — Studio Liberty
Via del Monte della Farina 51, 00186 Roma
Email: studioliberty@studioliberty.art
Telephone: +39 340 868 73 57
What data we collect
The site requires no registration and builds no user profiles. We collect personal data only when you give it to us:
| Data | When |
|---|---|
| Full name, company or organisation, email, telephone, type of event, preferred date, number of guests, time slot, free-text message | When you fill in and send the “Tell us about your event” form |
| The content of your message | When you write to us by email or on WhatsApp, or call us |
| Technical connection data (IP address, browser type, page requested, date and time) | Automatically, in the hosting provider's logs, for the security and operation of the site |
Please do not include special category data in the free-text message (health, religious beliefs, political opinions and the like): we do not need any of it to answer an availability enquiry.
Why we process it, and on what legal basis
- To answer your enquiry and prepare a quotation: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- To manage the relationship if you book the space: performance of a contract (Art. 6(1)(b) GDPR).
- Security of the site and prevention of form abuse: the legitimate interests of the controller (Art. 6(1)(f) GDPR).
- Tax, accounting and statutory obligations: legal obligation (Art. 6(1)(c) GDPR).
We send no automated marketing and we do not use your data for profiling or advertising.
How long we keep it
- Enquiries that do not lead to a booking: 24 months from the last contact.
- Data relating to events actually held: 10 years, for civil law and tax obligations.
- Server logs: for as long as the hosting provider keeps them, usually a few days or weeks.
Who it may be shared with
Your data is never published or sold. It may be processed on our behalf and on our instructions by suppliers of technical services, appointed as processors under Art. 28 GDPR:
- the site's hosting provider ;
- the service that handles the submission of the contact form and delivers it to our mailbox;
- the provider of our email service;
- accountants and tax advisers, for administrative purposes.
Data may also be disclosed to public authorities where the law requires it.
If you prefer to write to us on WhatsApp, the message travels through the systems of WhatsApp Ireland Ltd. (Meta group), under that service's own terms and privacy notice, over which we have no control. The link on this site is only a link: it sets no cookie and sends no data until you choose to send a message. If you would rather avoid it, the form, email and telephone remain.
Transfers outside the European Union
Some of the technical suppliers listed above may have servers or affiliated companies outside the European Economic Area. Where that happens, the transfer takes place on the basis of an adequacy decision of the European Commission or of the Standard Contractual Clauses approved by the Commission, with the safeguards required by Articles 44 and following of the GDPR.
Your rights
At any time you may ask us to:
- tell you what data about you we process and give you a copy (access, Art. 15);
- correct it if it is wrong or incomplete (rectification, Art. 16);
- erase it when it is no longer needed (Art. 17);
- restrict its processing (Art. 18);
- give it to you in a machine-readable format or transfer it to someone else (portability, Art. 20);
- object to processing based on legitimate interests (Art. 21).
To exercise these rights, write to studioliberty@studioliberty.art. We reply within one month.
If you believe the processing breaches the Regulation, you may lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or bring proceedings before the courts.
Automated decision-making
We take no decisions based solely on automated processing, including profiling, that produce legal effects concerning you.
Cookie
The site uses no profiling cookies and loads nothing from external servers: fonts and images are hosted on the site itself. For details see the cookie policy.
Changes
This notice may be updated: the date at the top shows the last revision.