Legal
Privacy Policy
Last updated: November 2026.
Data controller
EXP STUDIO, Via Forca 16, 36050 Cartigliano (VI), Italy – email [email protected] – phone +39 340 8650708. [Company name and VAT number to be completed]
What data we process
- Data you send through our forms (booking, rental, storage or quote requests): name, email, phone, band/organisation, date and request details.
- Technical browsing data: IP address and browser information recorded in server logs for security and operation, kept for a limited time.
Why we process it and legal basis
- Replying to your requests and managing bookings and services: pre-contractual steps or performance of a contract (Art. 6(1)(b) GDPR).
- Website security and abuse prevention: legitimate interest (Art. 6(1)(f) GDPR).
- Tax and accounting obligations, if a contract follows: legal obligation (Art. 6(1)(c) GDPR).
We do not use your data for marketing and do not sell or share it with third parties for commercial purposes.
How long
Requests that lead to nothing are deleted within 24 months. Data linked to a contract is kept for as long as the law requires (up to 10 years for tax records).
Who can see the data
Only EXP STUDIO staff and the technical providers that keep the website running, appointed as processors: website hosting (Contabo GmbH, servers in Germany/EU), network and DNS (Cloudflare, Inc.), email service. Any transfer outside the EU relies on the safeguards required by the GDPR (standard contractual clauses or an adequacy decision).
Map and external content
The Google Maps map loads only if you click “Show the map”: at that moment Google (Google Ireland Ltd.) receives your IP address and may set cookies under its own policy. Fonts are hosted on our own server: no data is sent to Google Fonts.
Your rights
You can ask at any time for access, rectification, erasure, restriction, portability, or object to processing by writing to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).