Privacy Policy.

1. Data Controller

The data controller for personal data is Anathema Studio, located at Via A. De Gasperi, 43 - 07041 Alghero (SS), Italy. For any information regarding the processing of personal data, you can contact us at: info@anathema-studio.com

2. Types of Data Collected

The personal data collected by this website includes:

• Contact data: name, surname, email address
• Navigation data: IP address, browser used, pages visited
• Technical and analytical cookies

2.1 Analytics Data

For analytics and improvement purposes, we collect the following navigation data in aggregated and anonymous form:

• Page visited: URL of the visited page (e.g., /, /blog, /services)
• Page title: page title as it appears in the browser
• User Agent: browser and operating system information (e.g., Chrome on Windows, Safari on iOS)
• Referrer: referring website, if available
• Session ID: unique session identifier randomly generated, stored in the browser to track visits within the same session
• Date and time: visit timestamp

Note: The IP address is recorded in encrypted form and is used only for security and abuse prevention purposes. It is not used to directly identify users.

3. Purpose of Processing

Personal data is processed for the following purposes:

• Responding to contact and information requests
• Providing the requested services
• Fulfilling legal obligations
• Improving the website browsing experience
• Anonymous statistical analysis of website usage

4. Legal Basis for Processing

The processing of personal data is based on: consent of the data subject for sending communications; execution of a contract or pre-contractual measures; fulfillment of legal obligations; legitimate interest of the controller for statistical analysis and service improvement.

5. Processing Methods

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are adopted to prevent data loss, unlawful or incorrect use, and unauthorized access.

6. Data Retention

Personal data is retained for the time necessary to achieve the purposes for which it was collected and in any case no longer than the terms provided by current legislation. Data related to contact requests is retained for a maximum of 24 months.

7. Data Communication and Disclosure

Personal data will not be disclosed and may be communicated to third parties only to fulfill legal obligations or to execute the requested services (e.g., hosting service providers, email services). Except as described in section 8 for artificial intelligence features, data will not be transferred outside the European Union.

8. Chatbot and Artificial Intelligence Features

The website and the Platform use generative artificial intelligence systems for the chatbot and for some tools (e.g. text generation). The use of artificial intelligence is always signalled in the interface with a label and an information icon, under Article 50 of Regulation (EU) 2024/1689 (AI Act).

• Data processed: messages and texts sent by the user, request parameters, preferred language; for Platform tools also the account identifier and technical usage metadata (tool, processed tokens, credits charged, outcome)
• Providers: MiniMax (MiniMax M3 model) as the primary provider and DeepSeek (DeepSeek Flash model) as the backup provider, used only when the first is unavailable
• Purpose: provide automated assistance, answer frequently asked questions and deliver the tools requested by the user
• Legal basis: legitimate interest of the controller for the chatbot; performance of a contract for Platform tools
• Retention: the content of conversations and generated texts is not stored on our servers. We keep only technical usage metadata, for credit management and cost control. Anathema Studio does not use user content to train artificial intelligence models
• Data transfer: the providers are based and host their servers outside the European Economic Area; the texts sent pass through their systems only to generate the answer. By using these features, the user consents to this transfer

Note: Generated content may contain errors or inaccuracies and should be checked before use. Do not enter personal, sensitive or confidential data. Using the chatbot is optional: you can always contact us directly via email or phone.

9. Data Subject Rights

Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:

• Access their personal data
• Request rectification or deletion of data
• Request restriction of processing
• Object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the supervisory authority

10. Cookies and Local Storage

This website uses technical cookies necessary for the proper functioning of the site and analytics tools to collect aggregate information on website usage. For more information on cookies and tracking technologies used, please refer to the Cookie Policy.

For analytics purposes, the system uses the browser's localStorage to store a session identifier (analytics_session_id) that allows tracking user visits within the same session. This data is stored locally in the browser and does not constitute an HTTP cookie. You can refuse the use of these technologies through the cookie banner on the site.

11. Changes to the Privacy Policy

The Controller reserves the right to make changes to this privacy policy at any time, informing users on this page. Please check this page regularly to verify any updates.

To exercise your rights or for any questions regarding this Privacy Policy, you can contact the Controller at: info@anathema-studio.com