PRIVACY
Blearred is a creative light studio in Milano. This page says what this website does with data, in the order you are likely to care about it: who is responsible, what is handled, who else sees it, and what you can demand from us.
Last updated
Controller
Blearred Milano SRL, Via Monte Bianco 2/A, 20149 Milano, Italy.
VAT and tax code 11199370963. Companies register REA MI-2586637.
privacy@blearred.com
We have not appointed a data protection officer. Article 37 asks for one where visitors are monitored on a large scale or where sensitive data is handled as a core activity, and neither describes this site. Write to the address above and someone at the studio reads it.
What we process
Four things happen on this site. Each one is listed with what it handles, why, on what legal basis, and for how long.
- Your brief
The e-mail address, subject, and message you type into the form.
To read what you are proposing and write back to you about it. Your address becomes the reply-to of the mail that reaches the studio, so answering you is one click.
- Keeping the form usable
The IP address our host reports for your request.
To count five submissions per ten minutes and refuse the flood. The count is held in memory and lost when the server instance goes; it is never written to a file or a database.
- Server logs
Request metadata kept by our host: address, time, page, user agent.
To keep the site up and to see what broke when something breaks.
- Project and team pages
Names, roles, photographs, and work e-mail addresses of the people who make the work.
To credit the people behind each project. These pages are about the studio, not about you: nothing you do here is recorded in them.
Restricted access
While the site is in preview it sits behind one shared password, handed out by the studio. It is a single credential for everyone we invite, not an account each: we cannot tell which visitor typed it, and nothing is kept about who came in. The password goes away when the site opens to the public.
Recipients and transfers
Two companies handle data on our behalf, as processors under Article 28. They act on our instructions and cannot use what they see for their own ends.
- Resend
Delivers the mail your brief becomes.
- Vercel
Hosts the site and serves every page you load.
Our own CMS fills the project and studio pages. Your browser never talks to it: the server reads it and sends you finished pages, so the CMS learns nothing about you.
Your rights
Articles 15 to 22 of the GDPR give you the right to ask for a copy of the personal data we hold about you, to correct it, to have it deleted, to restrict what we do with it, to receive it in a portable form, and to object to processing we base on our legitimate interest.
Write to privacy@blearred.com. We answer within one month, which is the deadline Article 12 sets. Ask us to delete a brief and it goes, unless a law obliges us to keep the paperwork.
If we are late, or the answer does not satisfy you, you can lodge a complaint with the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, at garanteprivacy.it, or take the matter to court.
What we do not do
- We do not sell personal data, and we do not share it for ads.
- We do not profile visitors, and no decision about you here is made automatically.
- We carry no advertising or social network tags.
- You never have to accept anything to read the site or send us a brief.
When this notice changes we move the date at the top. A change worth noticing is called out in the first paragraph for as long as it is news.