Skip to the questionnaire
Back to the page

Privacy policy

This is an English translation provided for convenience. If there is any difference between this version and the Italian original, the Italian version prevails. This notice explains what personal data Prima Vista processes when you visit the website or fill in the questionnaire or the contact form, why it processes that data, how long it keeps it and what rights you have. It is provided under Article 13 of Regulation (EU) 2016/679 (the "GDPR").

Last updated: 25 October 2026

Data controller

The data controller is Antonio Di Lorenzo, a self-employed professional trading as "Prima Vista", VAT no. 04917940613.

For any question about your data, and to exercise your rights, write to info@primavistaweb.it. The controller has not appointed a data protection officer (DPO), as this is not mandatory for its activity.

What data we process

  • Contact data: your name, the WhatsApp number to send the draft to and, if you like, your email address (the contact form too: the number, WhatsApp or phone, is required, the email optional).
  • Data about your business: its name, what you do, where you work, the main things you sell or do, what makes you different, what you need and what visitors to the website should do, your style and how you prefer to give us photos. If you answer the extra questions: logo and colours, customers, services or products with any prices, what you want to show on the website, opening hours and address, websites you like, languages and how you work today. If you work with us as a freelancer or agency: how many projects you expect to bring.
  • Links to your profiles (Instagram, Facebook, Google Maps, the website you already have) and, only if you give permission by ticking the box, the photos and text you have published there: we use them solely to prepare your draft.
  • Technical browsing data: IP address, browser and device type, pages requested, date and time. These are recorded automatically by the servers that host the website.
  • Data collected by the Meta pixel, only if you give your consent: see the Cookie policy page.

We do not ask for special categories of data (health, opinions, origin and the like): please do not enter them in the free-text fields.

Purposes and legal basis

For each purpose, this is the legal basis that makes the processing lawful:

  • Replying to your request and preparing the draft website or the proposal for the management tool. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
  • If you buy: building, publishing and maintaining the website and providing support. Legal basis: performance of the contract (Article 6(1)(b)).
  • Invoicing and tax and accounting obligations. Legal basis: legal obligation (Article 6(1)(c)).
  • Running the website and protecting it from misuse and attacks, using technical browsing data. Legal basis: legitimate interest in the security of the website (Article 6(1)(f)).
  • Measuring visits that come from our ads with the Meta pixel. Legal basis: your consent (Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code), which you can withdraw at any time.

Providing the data in the questionnaire or the form is not mandatory, but without a name and a phone number we cannot reply or prepare your draft.

We use the photos and text from your profiles only with your permission and only to prepare the draft: we do not publish them anywhere else. You can ask us to stop using them at any time.

We do not take decisions based solely on automated processing and we do not sell your data.

How long we keep the data

  • Requests from the questionnaire and the contact form that do not lead to a contract: 24 months from the last contact, after which we delete them.
  • Contracts, invoices and related documents: 10 years from the end of the relationship, as required by law (Article 2220 of the Italian Civil Code).
  • Your cookie choice: 12 months, after which we ask you again.
  • Technical browsing data: for as long as strictly necessary for security purposes, according to the hosting provider’s settings.

Who we share the data with

The data is processed by the controller and by the providers needed to deliver the service, appointed as data processors under Article 28 GDPR:

  • website hosting: Cloudflare, Inc. (United States);
  • service that receives the answers to the questionnaire and the contact form: Formspree, Inc. (United States);
  • business email, to receive your messages and reply to you: Google Ireland Ltd. (Google Workspace);
  • Meta Platforms Ireland Ltd., only if you have consented to marketing cookies (for this data Meta also acts as an independent controller);
  • our accountant, for tax obligations, if you become a client.

We do not disclose your data to the public. It may be shared with the authorities only where the law requires it.

Transfers outside the European Union

Some providers may also process data outside the European Economic Area, for example in the United States. In these cases the transfer takes place only with the safeguards provided for by Articles 44 to 49 GDPR: an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, for participating companies) or the standard contractual clauses approved by the Commission. You can ask us for a copy of these safeguards by writing to the address given above.

Your rights

At any time you can ask the controller (Articles 15 to 22 GDPR):

  • to access your data and obtain a copy (Article 15);
  • to rectify inaccurate or incomplete data (Article 16);
  • to erase your data (Article 17);
  • to restrict processing (Article 18);
  • for portability, that is, to receive the data in a structured, machine-readable format (Article 20);
  • to stop processing based on legitimate interest, by objecting to it (Article 21);
  • not to be subject to decisions based solely on automated processing (Article 22).

If you have given your consent (Meta pixel), you can withdraw it whenever you like from "Cookie settings", at the bottom of every page. Withdrawal does not affect the lawfulness of processing carried out before it.

How to exercise your rights

Write to info@primavistaweb.it. We will reply without undue delay and in any case within one month; if the request is complex this period may be extended to three months, in which case we will let you know within the first month. It is free of charge.

If you believe that the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), or with the supervisory authority of the country where you live or work.

Changes to this notice

If we change this notice we will update the date above. If the changes concern new purposes, we will tell you beforehand.