Data controller
mescio, VAT no. 04959740756 (IT04959740756), Italy. For any request: ciao@mescio.it.
What data is collected
The site has no sign-up forms, and no data is ever sold or passed on. Personal data only reaches the studio if you write or book a call.
- Emails and messages sent to ciao@mescio.it: name, address, content and any attachments. Used to reply to you and, if work begins, to manage it.
- Bookings via Cal.com (free call): name, email, time zone and any notes. The calendar is run by Cal.com (cal.eu).
- Billing details, only if you become a client: what is needed to issue invoices and meet legal obligations.
- Server logs (Vercel): IP address and user agent, to run the site and keep it secure.
- Vercel Analytics and Speed Insights: traffic and performance statistics, with no profiling cookies.
Legal bases
- Performance of a contract or pre-contractual steps (GDPR art. 6.1.b): introductory calls and project work.
- Legal obligation (art. 6.1.c): invoicing and tax compliance.
- Legitimate interest (art. 6.1.f): running the site and keeping it secure.
Third-party services
- Vercel: hosting, analytics and performance monitoring.
- Cal.com: booking the first call. Their own privacy notice also applies.
- Google Fonts: typefaces are loaded from Google’s servers; the request may include your IP address.
Data is never sold or shared with third parties for marketing purposes.
How long data is kept
- Messages: for the duration of the professional relationship.
- Tax records: for the period required by law, usually ten years.
- Technical logs: for a short period, for security and diagnostics.
Cookies
The site uses no profiling cookies and no advertising. The only stored preference is the light or dark theme, saved locally on your device. Vercel’s anonymous traffic measurement remains active.
Your rights
You can ask at any time to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format, by writing to ciao@mescio.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante).