Privacy Policy — Pickpantrystorypulse Milano Forma Interiors

1. Data Controller Identification

This privacy policy governs the processing of personal data collected through the digital publication and digital platforms of Pickpantrystorypulse Milano Forma S.r.l. ("Company", "we", "us", or "our"), an architectural and interior design studio legally registered in the Republic of Italy.

Legal Corporate Entity: Pickpantrystorypulse Milano Forma S.r.l.
Commercial Registry Number / Partita IVA: IT-MI-09842140968
REA Registration: REA MI-2541098
Registered Atelier Headquarters: Via Monte Napoleone 14, 20121 Milano (MI), Italy
Designated Data Protection Contact: [email protected]

2. Categories of Personal Data Collected

We process personal data strictly necessary to fulfill professional architectural inquiries, manage bespoke commissions, and ensure the cryptographic security of our web infrastructure:

Identity & Contact Information: Full legal name, private or enterprise email address, telephone contact numbers, and postal location provided willingly via our inquiry forms.
Project Brief Specifications: Architectural requirements, site measurements, aesthetic preferences, budget classifications, and timeline projections communicated in correspondence.
Technical Telemetry: Anonymized Internet Protocol (IP) address, browser family, user agent strings, and session timestamps collected automatically via server logs for intrusion mitigation.
Consent Records: Cryptographic or client-side timestamps confirming acceptance or refusal of non-essential cookie categories.

3. Legal Bases for Processing Under GDPR

In adherence to Article 6 of the General Data Protection Regulation (EU 2016/679), all processing operations undertaken by Pickpantrystorypulse rely on at least one lawful ground:

Pre-Contractual & Contractual Measures (Art. 6(1)(b))

Processing client identity and project coordinates to prepare architectural proposals, project budgets, and contractual agreements at the direct request of the data subject.

Legitimate Studio Interests (Art. 6(1)(f))

Maintaining the resilience, cryptographic integrity, and performance of our web servers, safeguarding against automated bot spamming and Denial of Service (DoS) attacks.

Explicit Freely-Given Consent (Art. 6(1)(a))

Storing local preferences and serving analytical telemetry scripts solely when a visitor explicitly selects "Accept All" via our cookie consent interface.

Statutory Legal Compliance (Art. 6(1)(c))

Fulfilling Italian commercial taxation, anti-money laundering (AML) protocols, and municipal building permit record retention mandates.

4. Third-Party Processors & Data Transfers

Pickpantrystorypulse does not monetize, license, or sell personal records to third-party data brokers or marketing aggregators. We engage only tightly vetted sub-processors operating under binding Data Processing Agreements (DPAs):

Hosting & Cloud Infrastructure: ISO/IEC 27001 certified data center facilities located strictly within the European Economic Area (EEA), utilizing end-to-end TLS 1.3 encryption.
Email Routing Infrastructure: Secure mail transfer relays operating under strict SPF, DKIM, and DMARC enforcement protocols.
Municipal & Engineering Partners: Registered Italian structural engineers and local municipal planning bodies (Comune di Milano) with whom files are shared strictly upon explicit client contract authorization.

5. Data Retention Protocols

Personal data is retained only for the duration necessary to satisfy the specific purpose for which it was acquired:

General Inquiries: Unconverted project inquiries and communications are purged from our active systems after twenty-four (24) calendar months.
Active Client Contracts: Architectural plans, CAD files, material ledgers, and billing invoices are archived for ten (10) years in compliance with the Italian Civil Code (Codice Civile Art. 2220).
Digital Access Logs: Server telemetry logs are cyclically overwritten every ninety (90) calendar days.

6. Data Subject Rights Under GDPR and CCPA/CPRA

Under Chapter III of the GDPR and equivalent California privacy statutes, visitors possess comprehensive rights regarding their personal data:

Right of Access (Art. 15): You may request confirmation of whether your data is being processed and obtain a portable copy of stored records.
Right to Rectification (Art. 16): You may demand correction of inaccurate or incomplete biographical and spatial project data.
Right to Erasure ("To Be Forgotten" Art. 17): You may request complete erasure of your data, provided retention is not required by statutory legal or fiscal regulations.
Right to Restriction & Objection (Arts. 18 & 21): You may restrict processing or object to processing conducted under legitimate interest bases.
Right to Withdraw Consent: Where processing is predicated upon consent, you may withdraw that consent at any time without retroactive invalidation.
Right to Lodge a Complaint: You maintain the unconditional right to file a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, garanteprivacy.it).

To exercise any of the aforementioned rights, transmit a formal request to our designated privacy desk at [email protected]. Identity verification may be required to protect against unauthorized disclosure.