01Data controller
The data controller is Creative Studio Lab, based in Segrate (Milan), Italy.
For any privacy question or to exercise your rights, write to info@creativestudiolab.it or call +39 340 2904119.
02What data we collect
Browsing data
The systems that run the site automatically record some technical data, such as IP address, browser and device type, pages requested, and date and time of access. We use it only to run the site, keep it secure and detect errors or misuse.
Data you give us
- Direct contact: if you email, message us on WhatsApp or call, we process the data you share (name, contact details, message content).
- Quote generator: full name, age, email, phone, company or organisation, your project description and the answers you select (project type, budget, timeline, technologies, features).
Please do not enter special categories of data (for example health data) or third parties’ data without their consent in the free-text fields.
Cookies and local storage
The site uses only technical tools, described in the cookie policy below.
03Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your requests and preparing quotes and proposals | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) |
| Managing relationships with clients and suppliers, invoicing and tax obligations | Contract and legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR) |
| Running the site, keeping it secure and preventing misuse | Our legitimate interest (Art. 6(1)(f) GDPR) |
| Usage analytics and marketing, if enabled in the future | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
We never use your data to send newsletters or promotional messages without your explicit consent.
04Quote generator and artificial intelligence
The answers you enter in the generator are processed with artificial intelligence tools to produce an indicative, non-binding estimate of your project, which we email to you.
The estimate is not a decision based solely on automated processing that produces legal effects concerning you (Art. 22 GDPR): every final proposal is always reviewed and confirmed by a member of our team. If you prefer, you can ask us for a quote without using the generator by contacting us directly.
05Who we share data with
Your data is never published or sold. Only the following may access it:
- our team, who are authorised and bound by confidentiality;
- suppliers who help us provide the service and act as data processors: hosting and cloud infrastructure, email services, artificial intelligence providers, management software;
- professional advisers such as our accountant, for tax compliance;
- public authorities, where required by law.
If you choose to contact us via WhatsApp, the service is provided by WhatsApp Ireland Ltd (Meta group) under its own privacy policy.
06Transfers outside the European Union
Some suppliers (for example cloud or AI providers) may process data in the United States or other non-EU countries. In these cases transfers take place only with appropriate safeguards under the GDPR, such as a European Commission adequacy decision (including the EU-U.S. Data Privacy Framework) or standard contractual clauses.
07How long we keep data
- Requests and quotes that do not turn into a project: up to 24 months from the last contact.
- Contractual, administrative and billing data: 10 years, as required by Italian civil and tax law.
- Technical browsing data: only as long as strictly necessary, normally no more than 12 months, unless needed to investigate unlawful activity.
- Cookie preferences: 12 months, after which we ask for your consent again.
08Your rights
At any time you can ask us to:
- access your data and receive a copy;
- correct or update it;
- erase it, when we are no longer required to keep it;
- restrict or object to its processing, where applicable;
- receive it in a structured format to transfer to another controller (portability);
- withdraw your consent, without affecting processing carried out before.
Just write to info@creativestudiolab.it — we reply within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, or with the authority of your country.
09Minors
Our services are aimed at professionals, companies and organisations. If you are under 18, please do not send us data through the quote generator without the involvement of a parent or guardian.
10Security
We take appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including encrypted connections (HTTPS), access limited to authorised staff, and carefully selected suppliers.
11Cookie policy
Cookies are small text files that a website saves on your device. Similar technologies, such as the browser’s local storage, work the same way. This is what this site uses:
Technical tools (always on)
| Name | Type | Purpose | Duration |
|---|---|---|---|
csl-consent | Local storage, first party | Remembers your cookie choices so we don’t show the banner on every visit | 12 months |
Technical tools do not require consent because the site needs them to work.
Analytics and marketing (consent only)
The site currently does not use analytics, profiling or marketing cookies. If we introduce them in the future, they will only be activated after your consent and this table will be updated.
Third-party services
- Google Fonts (Google Ireland Ltd): to display typefaces your browser downloads them from Google’s servers, which therefore receive your IP address. Google Fonts does not set cookies.
- External links (WhatsApp, LinkedIn, GitHub, the GestIO client area and our product websites): they only activate if you click them and are governed by their own policies.
Managing your preferences
You can change your mind at any time via , also available at the bottom of every page. You can also delete cookies and local data in your browser settings.
12Changes to this policy
We may update this policy, for example if our services or the law change. The date of the last update is always shown at the top of the page.