Privacy Policy

Last updated: August 6, 2025

1. Controller & Contact

Controller:: Red Hog Studio Srl
Registered office:: Via Montebianco, 167 – Rome Italy
VAT:: IT 17067191001
E-mail for privacy matters:: privacy@redhogstudio.com

2. Data Protection Officer (DPO)

Francesco Sapio – privacy@redhogstudio.com

3. Categories of Personal Data We Process

Context	Data collected
Contact form	name, surname, e-mail phone (optional) service need, free-text comment “where you heard about us” privacy/marketing-consent flags
Newsletter / Direct-e-mail marketing	e-mail address, name/surname (when provided)
Site analytics & security	masked IP address, browser/device information pseudonymous cookies or identifiers (Matomo) interaction metadata sent to Google reCAPTCHA (may include full IP, device & behavioural data)

4. Purposes, Legal Bases & Retention

Activity	Purpose	GDPR legal basis	Retention
Responding to contact-form enquiries	Evaluate and reply to requests, prepare pre-contractual offers.	Art. 6 (1)(b) – pre-contractual steps at data-subject request.	24 months after last interaction.
Sending newsletters / DEM	Inform about news, promotions, events.	Art. 6 (1)(a) – consent (separate, granular).	Until consent is withdrawn or address bounces; verified every 24 months.
Web analytics (Matomo, self-hosted)	Measure audience, improve content, detect anomalies.	Art. 6 (1)(f) – legitimate interest; we employ IP-anonymisation and privacy-enhanced settings.	Raw logs 90 days; aggregated stats 13 months.
Spam/bot filtering (Google reCAPTCHA)	Protect forms against automated abuse.	Art. 6 (1)(f) – legitimate interest in security.	Up to 6 months, per Google policies.
Server hosting & backup	Operate website, ensure integrity, disaster recovery.	Art. 6 (1)(f) – legitimate interest.	Backups max 30 days; server logs 7-30 days.

Provision of mandatory fields on the contact form and newsletter sign-up is necessary to receive a reply or the requested communications; failure to provide them prevents us from delivering the service.

5. Recipients & International Transfers

Recipient (processor / sub-processor)	Service	Location	Transfer safeguard
Hetzner Online GmbH	Web-hosting (VPS)	Germany	In-EEA; DPA in place.
Google LLC – Google Drive	Cloud backup & file collaboration	USA	EU-US Data Privacy Framework & SCCs.
Google LLC – reCAPTCHA	Bot mitigation	USA	EU-US DPF & SCCs (JavaScript executed client-side).

No other third parties receive personal data unless required by law or to defend legal claims.

6. Cookies & Tracking Technologies

Essential cookies (WordPress session, security tokens) are set automatically; blocking them may impair site functioning.
Analytics cookies placed by our self-hosted Matomo instance respect “Do Not Track” and use IP-masking.
Google reCAPTCHA loads cookies or similar identifiers governed by Google’s own privacy policy.
A detailed cookie banner allows you to refuse non-essential cookies on your first visit and modify preferences later.

7. Data Subject Rights

Under Articles 15-22 GDPR you may at any time:

obtain confirmation whether we process your data, and access a copy;
request rectification or erasure;
restrict processing;
object to processing based on legitimate interest;
receive your data in a portable format (where processing is automated on the basis of consent or contract);
withdraw consent (newsletter / marketing) without affecting prior lawfulness.

To exercise rights, write to privacy@redhogstudio.com or the postal address above. We may verify your identity before acting.

8. Right to Lodge a Complaint

You may lodge a complaint with the Italian Supervisory Authority (Garante per la Protezione dei Dati Personali) or with your local EU authority.

9. Automated Decision-Making

We do not engage in automated decision-making producing legal or similarly significant effects.

10. Security Measures

We implement HTTPS/TLS, strong access controls, encryption at rest for backups on Google Drive, server hardening, regular patching and logging per industry best practice. Hetzner data centres are ISO 27001-certified.

11. Policy Updates

We may revise this Privacy Policy to reflect changes in legislation or our processing activities. Updated versions will be published on this page; material changes will be highlighted for at least 30 days.

RED HOG STUDIO

Guidonia Montecelio (RM) Italy

Via Monte Bianco 167

VAT N. IT17067191001

SOCIAL

Designed to impress by Backdoor