Privacy policy
Last updated: 21 October 2026
1. Data controller
Leonardo Marchitelli — Via Italo Panattoni 55, 00189 Roma (RM) — VAT 17935231005 — info@cloudatelier.it
2. What data we collect
Through the quote request form: full name, company (optional), email address, phone number (optional) and the description of your need. Automatically, for security purposes: IP address and technical connection data, used to limit abuse of the form (maximum 2 requests per hour per email address) and kept in the hosting provider's technical logs. Name, email, request type and description are needed to reply: without them we cannot follow up on your request. Company and phone are optional.
3. Purposes and legal basis
Replying to your request and preparing the quote (pre-contractual measures taken at the data subject's request, Art. 6.1.b GDPR); sending the automatic confirmation email; preventing abuse and keeping the website secure (legitimate interest, Art. 6.1.f GDPR). We do not profile you and we do not do marketing: your data is never used for newsletters or commercial communications without a specific, separate consent.
4. Retention
Quote requests and the related email exchanges are kept for 12 months from the last contact, unless a contractual relationship is established (in which case for the duration of the relationship and the periods required by law). Anti-abuse counters are deleted automatically after 1 hour; the email address, stored only as a non-reversible hash, after 30 days.
5. Recipients and providers
Data is processed only by the controller and by technical providers appointed as data processors: Cloudflare, Inc. (website hosting, DNS and temporary anti-abuse storage), Resend, Inc. (delivery of automatic emails), Microsoft Corporation (mailbox receiving the requests). Data is never sold or shared with third parties for their own purposes.
6. Transfers outside the EU
Some providers are based in the United States. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, to which these providers adhere, and on the Standard Contractual Clauses approved by the European Commission.
7. Cookies
This website does not use profiling cookies or analytics tools. Only technical cookies strictly necessary for security may be set by the hosting provider. See the cookie policy for details.
8. Your rights
You may exercise the rights provided by Articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability) at any time by writing to info@cloudatelier.it. You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country of residence. We do not take decisions based solely on automated processing, including profiling (Art. 22 GDPR): every quote is prepared by a person.
9. Changes
This notice may be updated over time; the date of the last update is shown at the top of the page.