Privacy Policy
1. Introduction
Pursuant to Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree no. 196/2003 as amended by Legislative Decree no. 101/2018, this privacy notice describes how personal data of users visiting the website of CODE – colucci design+engineering (hereinafter also “Studio” or “Data Controller”) accessible at [www.c-o-d-e.eu] is processed.
This notice applies exclusively to the Studio’s website and not to other websites that the user may access via links.
2. Data Controller
The Data Controller is CODE – colucci design+engineering, VAT number [08623850727], represented by its pro tempore legal representative.
The Data Controller can be contacted for any information regarding the processing of personal data at the email address: [info@c-o-d-e.eu].
3. Types of Data Processed
During the navigation of the website, personal data such as identification and contact information (first name, last name, email address, phone number), data related to the organization or company the user belongs to, as well as information included in messages voluntarily sent by the user through contact forms or email, may be processed.
Browsing data may also be processed, including IP addresses, domain names of the computers used by users, request times, URIs of requested resources, and other parameters relating to the user’s operating system and IT environment.
4. Purpose of Processing
Personal data are processed to allow website navigation, respond to users’ information requests, provide requested services, manage professional contacts, and comply with legal obligations.
With the user’s consent, data may also be used to send informational communications regarding the Studio’s activities, services, and projects.
5. Legal Basis of Processing
The processing of data is based on the execution of pre-contractual or contractual measures requested by the user, compliance with legal obligations applicable to the Data Controller, the legitimate interest of the Studio in ensuring the proper functioning of the website and managing contacts, and, where applicable, the user’s explicit consent.
6. Processing Methods
Personal data are processed using IT and telematic tools, in compliance with the principles of lawfulness, fairness, transparency, and data minimization, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of data.
7. Provision of Data
Providing data is optional; however, failure to provide data necessary for the purposes indicated may prevent the Data Controller from responding to the user’s requests or providing the requested services.
8. Data Retention Period
Personal data will be retained only for as long as necessary to achieve the purposes for which they were collected and, subsequently, for the period required by applicable law or for the protection of the Data Controller’s rights.
Data collected for contact or informational purposes will be retained until the data subject requests their deletion.
9. Recipients of Data
Personal data may be shared with external parties acting on behalf of the Data Controller as data processors, such as IT service providers, hosting providers, technical and professional consultants, as well as with parties to whom disclosure is required by law.
Data will never be disseminated.
10. Transfer of Data Outside the EU
Personal data are not transferred outside the European Union. Should such transfer become necessary, it will occur in compliance with the safeguards provided by the GDPR.
11. Rights of the Data Subject
As a data subject, the user has the right to access their personal data, rectify or delete it, restrict processing, object to processing, and exercise the right to data portability where applicable.
The user also has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Requests can be sent to the contact details provided in this notice.
12. Right to Lodge a Complaint
If the user believes that the processing of their personal data violates applicable law, they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), located at Piazza Venezia 11, 00187 Rome, or to seek judicial remedies.
13. Cookies and Tracking Systems
The website uses technical cookies and, with the user’s consent, possible profiling or third-party cookies. For more information, please refer to the specific Cookie Policy available on the website.
14. Browsing Data and System Logs
Browsing data are automatically collected and used solely to obtain anonymous statistical information about website usage and to ensure its proper functioning.
These data may also be used to ascertain liability in case of cybercrimes against the website.
15. Minors
The website and services offered by the Data Controller are not intended for children under 16 years of age. The Data Controller does not knowingly collect personal data from minors without parental or guardian consent.
16. Security Measures
The Data Controller adopts appropriate technical and organizational measures to ensure a level of security for personal data proportionate to the risks, to prevent loss, unlawful or improper use, and unauthorized access.
17. Changes to This Privacy Policy
The Data Controller reserves the right to modify or update this Privacy Policy at any time. Changes will be published on this page and will take effect from the date of publication. Users are therefore advised to periodically review this section.
18. Update
Last update: [02.01.2026]