Privacy Policy

This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended, and describes how personal data of users browsing the website www.hydroxstudio.com is processed.

1. Data Controller

The Data Controller is Hydrox Studio S.r.l.s.
Registered office: Via Maggiolini 36, 20851 Lissone (MB), Italy
Operating office: Via Giulio Cesare Cortese 5/7, 80133 Naples (NA), Italy
VAT/Tax ID: 13887270968
Email: info@hydroxstudio.com
PEC (certified email): legal@pec.hydroxstudio.com

2. Types of data processed

• Browsing data: IP addresses, browser type, operating system, pages visited, automatically collected by IT systems for statistical and security purposes.
• Data voluntarily provided: first name, last name, email, phone number and any other information sent via the contact form or by email.
• Cookies: see the Cookie Policy for details.

3. Purposes and legal basis of processing

• Responding to information and booking requests (legal basis: performance of pre-contractual measures, Art. 6(1)(b) GDPR).
• Complying with legal, accounting and tax obligations (Art. 6(1)(c) GDPR).
• Ensuring website security and preventing abuse (legitimate interest, Art. 6(1)(f) GDPR).

Any processing of health-related data takes place exclusively in person during services provided at our locations, based on the data subject's explicit consent (Art. 9(2)(a) GDPR) and in compliance with professional secrecy.

4. Processing methods

Data is processed using electronic and paper-based tools, with technical and organisational measures adequate to ensure confidentiality, integrity and availability. Access is granted only to authorised staff.

5. Data retention

Data collected through contact forms is retained for the time strictly necessary to handle the request and in any case no longer than 24 months. Data related to tax obligations is retained for 10 years as required by law.

6. Disclosure and recipients

Data may be processed by parties acting as data processors (e.g. hosting providers, email services, management software). It is not disclosed or sold to third parties for marketing purposes.

7. Transfer outside the EU

Some technology providers (e.g. hosting) may process data outside the European Economic Area. In such cases the transfer is based on adequate safeguards (standard contractual clauses approved by the European Commission).

8. Data subject rights

The data subject may exercise at any time the rights set out in Articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability, withdrawal of consent) by writing to info@hydroxstudio.com. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).

9. Changes

This notice may be updated. Changes will be published on this page indicating the date of the last update.