Privacy and Cookie Policy

Last updated: 01/03/2026

This notice describes how the terzo.studio website processes the personal data of users who browse the site, send contact requests, ask for a quote for technical services, or request information about booking the spaces.

1. Data controller

The Data Controller is Drabda S.r.l., with registered office at Via Palermo 41, 00184 Rome, email [email protected], certified email [email protected], VAT / Tax Code 18278011004.

2. Types of data processed

• browsing data, technical logs, IP address, and connection metadata;
• data entered in contact forms: name, email, phone number, subject, and message;
• data entered in quote request or booking forms: contact details, organization, event date, time slot, event type, number of participants, possible venue address, technical needs, and free-form notes;
• data processed through technical systems used to prevent spam and automated submissions;
• data that may be transmitted to third parties when the user voluntarily opens external links, for example Google Maps.

3. Purposes and legal basis of processing

• management of contact, quote, and booking requests, including subsequent commercial or organizational follow-up: Art. 6(1)(b) GDPR (pre-contractual measures requested by the data subject);
• technical site management, security, prevention of spam and abuse, protection of the information system, and legal defense: Art. 6(1)(f) GDPR (legitimate interest of the Controller);
• compliance with legal, administrative, or tax obligations when applicable: Art. 6(1)(c) GDPR;
• any future marketing or newsletter activities, if activated, will rely on a specific, free, and separate consent.

The checkbox shown in the forms is used exclusively to confirm that the user has read this notice and does not constitute consent to commercial or marketing communications.

4. Nature of the provision of data

Providing the data marked as mandatory is necessary to send the request and receive a reply. Failure to provide such data makes it impossible to process the request. Optional data may be omitted.

5. Processing methods

Data is processed using electronic tools and appropriate organizational measures designed to limit unauthorized access, disclosure, alteration, or destruction. Requests sent through the website are stored in an information system managed by the Controller and may only be accessed by authorized personnel or by processors appointed for that purpose.

6. Recipients of the data

Data may be disclosed to:

• internal personnel authorized to manage requests, events, quotes, and assistance;
• hosting, cloud, application maintenance, and infrastructure management providers;
• providers of platforms and systems used to store and manage requests;
• consultants or professionals where necessary for legal or administrative obligations or for the protection of the Controller's rights;
• competent authorities where required by law.

7. Transfers of data outside the EU

The website may load technical resources provided by third parties, for example fonts or services connected to external content. This may involve the transmission of technical connection data, such as the IP address, to servers of providers located outside the European Economic Area. In such cases, processing takes place in compliance with the safeguards required by the applicable legislation.

8. Retention period

• contact, quote, and booking requests: for the time needed to manage the request and, as a rule, no longer than 24 months, unless further retention is required for contractual or defensive purposes;
• administrative, accounting, or contractual data: for the periods required by the applicable laws;
• technical logs and security data: for limited periods proportionate to the purpose.

9. Data subject rights

Data subjects may exercise the rights provided by Articles 15 and following of the GDPR, including access, rectification, erasure, restriction, objection, and portability where applicable, by writing to [email protected] or via certified email to [email protected].

The right to lodge a complaint with the Italian Data Protection Authority remains unaffected.

10. Cookies and other tracking tools

10.1 What cookies are

Cookies are small text files that a website sends to the user's device to store technical information or browsing preferences. Similar tools may include local storage, pixels, or technical identifiers.

10.2 Cookies used by the website

Based on the current public frontend configuration, the website does not use analytics, profiling, or marketing tools that install non-technical cookies on user-facing pages.

Only technical or session cookies strictly necessary for the operation of the infrastructure, security services, or page delivery may be present where they are actually used by the technical services connected to the website.

10.3 Third-party services and external links

The website contains external links, for example to Google Maps, which are activated only on the user's initiative. Opening such links entails the application of the third-party provider's own policies.

The website may also load technical resources provided by third parties, such as web fonts. These integrations do not in themselves amount to profiling cookies, but they may involve a connection to the provider's servers with transmission of technical browsing data.

10.4 Consent and cookie banner

If the website uses only technical cookies, no banner for collecting consent is required. If profiling cookies, analytics tools not comparable to technical cookies, or other trackers requiring consent are activated in the future, this section and the related preference collection mechanism must be updated before activation.

10.5 Preference management

Users can manage or block cookies through their browser settings. Disabling technical cookies may impair the proper functioning of some website features.

11. Updates

This notice may be updated in the event of regulatory, technical, or organizational changes. The version published on the website is the version currently in force.