Privacy Policy

Who is responsible for your data

The data controller for this portfolio and enquiries to the studio is Leonardo Canton, operating as Leonardo Canton Design. For privacy questions or to exercise your rights, contact leonardo.canton.design@gmail.com.

Data processed when you visit

This is a portfolio website. It has no account registration, contact form, newsletter, online checkout or purchases. Images and fonts are served with the website.

Delivering and protecting the website involves processing technical information such as your IP address, requested URL, time of the request, browser information and security events. The site is hosted and delivered by Cloudflare.

We have not added advertising pixels, behavioural profiling or audience analytics to this website. See our Cookie Policy for information about browser storage and security features.

When you email the studio

If you choose an email link, your email application opens. Sending a message shares your email address, its contents and any attachments with the studio and its email provider, Google Gmail. Only send information relevant to your enquiry; please do not send sensitive information unless it is necessary and specifically requested.

The Instagram link opens an external service. Instagram handles visits and interactions under its own privacy policy; an Instagram feed or tracking widget is not embedded here.

Purposes and legal bases

We process technical data to provide a working, secure website and to prevent abuse, on the basis of legitimate interests under Article 6(1)(f) GDPR.

We use correspondence to answer enquiries, discuss collaborations and take steps you request before a possible contract, under Article 6(1)(b) GDPR. Other ordinary enquiries are handled on the basis of our legitimate interest in responding to people who contact the studio. Where applicable, information may also be kept to comply with legal obligations under Article 6(1)(c) GDPR.

There is no automated decision-making or profiling by the studio through this website. Sending an enquiry is voluntary; without the relevant contact details we may be unable to respond.

Service providers and international processing

Data may be processed by hosting, delivery, security and email providers to the extent necessary to operate the site and handle correspondence. We do not sell visitor data.

Cloudflare and Google operate internationally, so processing may take place outside the European Economic Area. The safeguards applicable to their services, including adequacy decisions and standard contractual clauses where applicable, are described in their service documentation:

• Cloudflare Privacy Policy and Customer Data Processing Addendum.
• Google Privacy Policy.

How long data is kept

Technical data is processed for the time needed to deliver and protect the service; the retention of provider logs depends on the service and security settings in use. We do not operate a separate visitor analytics database.

Correspondence is kept for the time needed to answer the request and manage any resulting collaboration, taking account of applicable legal obligations and the need to establish, exercise or defend legal claims. You can contact the studio to ask about retention in relation to your specific enquiry.

Your rights

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests. If processing is based on consent, you may withdraw it without affecting earlier lawful processing.

Send requests to leonardo.canton.design@gmail.com. You may also lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or the supervisory authority competent for your situation.

Updates and contact

This notice describes the static portfolio release. It will need to be updated before adding services such as a shop, newsletter or optional tracking. For further information, write to leonardo.canton.design@gmail.com.