Privacy Policy

Atelier IAS S.r.l., trading as IAS Creative, is the data controller for this website. Registered office: Via Acciaioli 7, 00186 Rome, Italy. VAT / P.IVA IT18027741000. We also have an operational presence in Los Angeles, California.

Email: info@iasatelier.com - Phone: +39 320 3519488.

We have not appointed a Data Protection Officer, as none is required for our activities under Article 37 GDPR. Privacy requests go to the email address above.

This policy covers the website iascreative.com only. Work we carry out for clients under a contract (production files, footage, client materials) is governed by the agreement and, where we act as processor, by a separate data processing agreement with that client.

(a) Data you give us. If you write to us or use the enquiry form: your name, email address, company name, the services you are interested in, your message, and anything else you choose to include in a project enquiry.

(b) Technical data collected automatically by our hosting infrastructure when a page is served: IP address, user agent, device and browser type, referring page, pages requested and timestamps. This is standard server logging, needed to deliver the site and keep it secure.

(c) Data from cookies and similar technologies. Today the site sets only strictly necessary storage. Anything beyond that requires your consent - see our Cookie Policy.

No field is required by law. To reply to an enquiry we need an email address and a message; a name helps us address you properly. Company name and the service checkboxes are optional and only help us route your request. Without an email address we simply cannot answer you.

Only with providers that process data on our instructions as processors under Article 28 GDPR:

• Website hosting and delivery platform (Lovable, and its underlying hosting and edge network): serves the pages, keeps server and security logs.
• Backend and database platform (Supabase, provided through Lovable Cloud): hosts the server-side environment used by the site, including the cached public Google Business reviews shown on the homepage.
• Media delivery (CDN): stores and serves the images and videos on this site. It receives the technical request data needed to deliver a file.
• Email: messages you send to our address are received and stored in our business mailbox.
• Analytics: none is installed at the date of this policy. If we add it, it will only run after consent and this policy will be updated first.
• Professional advisors (accountants, lawyers) and public authorities, where we are legally required to disclose.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

Some of our providers are established in the United States. Where personal data leaves the European Economic Area, the transfer relies on the European Commission's Standard Contractual Clauses and, where the provider is certified, on the EU-US Data Privacy Framework, together with supplementary measures such as encryption in transit and access controls. You can request a copy of the safeguards in place by emailing info@iasatelier.com.

You have the right to access your data, to have it corrected or erased, to restrict or object to processing (including processing based on our legitimate interest), to data portability, and to withdraw consent at any time - withdrawal does not affect processing that was lawful before it.

To exercise any right, email info@iasatelier.com. There is no fee. We reply within one month, extendable by two further months for complex requests, in which case we will tell you.

You can also complain to the Italian supervisory authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome - garanteprivacy.it - or to the authority where you live or work. Visitors in the United Kingdom have equivalent rights under the UK GDPR and may complain to the Information Commissioner's Office (ICO). Visitors in Switzerland have equivalent rights under the Federal Act on Data Protection (FADP) and may contact the Federal Data Protection and Information Commissioner (FDPIC).

This section applies to residents of California (CCPA/CPRA) and of states with comparable laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana.

These are the categories collected in the previous 12 months. You have the right to know and access the personal information we hold, to correct it, to delete it, to opt out of the sale or sharing of personal information and of targeted advertising, and to limit the use of sensitive personal information - we do not collect sensitive personal information for these purposes. We never discriminate against anyone for exercising these rights.

An authorised agent may submit a request on your behalf by emailing us with written proof of authorisation; we may ask you to verify the request directly. We honour Global Privacy Control browser signals as an opt-out of sale, sharing and targeted advertising. To be clear: we do not sell personal information and we do not share it for cross-context behavioural advertising as those terms are defined by these laws.

This site is aimed at businesses and founders, not at minors. We do not knowingly collect data from anyone under 16 (under 14 in Italy, per Article 2-quinquies of the Italian Privacy Code) or under 13 in the United States. If you believe a child has sent us personal data, email us and we will delete it.

Traffic to this site is encrypted in transit (HTTPS). Access to our mailbox and platform accounts is restricted and protected by strong authentication, and we use vetted providers. No system is perfectly secure, so we cannot offer an absolute guarantee - but we do take incidents seriously and will notify you and the authorities where the law requires it.

We do not carry out automated decision-making or profiling that produces legal effects or similarly significantly affects you.

If we change this policy we update the date and version above. For material changes - a new purpose, a new category of recipient, or a new cookie category - we will show a notice on the site and, where the change concerns consent, raise the policy version so the consent banner asks you again.

Atelier IAS S.r.l. - Via Acciaioli 7, 00186 Rome, Italy - info@iasatelier.com