Privacy Policy

This Privacy Policy explains how LM DevStudio (“we”, “us”) processes personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.

Data controller

The data controller is Mandaglio Luca, Frazione Canosse n. 1 int 2, 23883 Brivio (LC), Italy, P.IVA 03980160133. For any question about this policy or your personal data, you can contact us at info@lmdevstudio.com.

Data we process

• Contact-form data. When you use the contact form, we process the name, email address, and message you submit, so that we can read and reply to your enquiry.
• Call-booking data. If you choose to load the embedded scheduler in the Contacts section and book a call, we process the name, email address, and any notes you submit to schedule the meeting.
• Technical connection data. Like any website, when you visit, our hosting provider automatically processes technical data needed to deliver and secure the site, including your IP address, browser type, and the pages requested. We do not keep our own server logs of this data; it is handled by our hosting provider (see “Recipients and processors” below).
• Aggregate audience measurement. We measure traffic with Cloudflare Web Analytics, which is cookieless and collects only aggregate, anonymous statistics. It sets no cookies, stores nothing on your device, and does not identify you.

We do not carry out profiling, use advertising cookies, or make automated decisions.

Purposes and legal bases

• To read, reply to, and manage your enquiry — legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to messages (Art. 6(1)(b) and (f) GDPR).
• To schedule and hold the introductory call you request — legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). The third-party scheduler itself is loaded only after your explicit action — legal basis: consent (Art. 6(1)(a) GDPR).
• To keep the site secure and prevent abuse or spam — legal basis: our legitimate interest in the security of our systems (Art. 6(1)(f) GDPR).
• To measure aggregate audience statistics — legal basis: our legitimate interest in understanding, in anonymous and aggregate form, how the site is used (Art. 6(1)(f) GDPR).

Recipients and processors

We share personal data only with providers that process it on our behalf, under a data-processing agreement:

• Cloudflare, Inc. — hosts the website (Cloudflare Pages), provides the cookieless Cloudflare Web Analytics, and runs Cloudflare Turnstile, a privacy-friendly anti-spam check on the contact form. Turnstile sets no cross-site tracking cookies; your IP address is transmitted to it solely to verify that the form submission is not automated.
• Resend (resend.com) — delivers the contact-form email to us. The name, email, and message you submit are transmitted to Resend for the sole purpose of delivering your enquiry to info@lmdevstudio.com.
• Cal.com — provides the appointment scheduler in the Contacts section, through its EU-hosted service (cal.eu), with scheduling data stored and processed within the European Union. It is loaded only after your explicit action and processes the details you enter solely to create and manage the booking.

We do not sell personal data or share it for advertising.

Retention

We keep the content of your enquiry and our related correspondence for 24 months, after which it is deleted, unless we need to retain it longer to comply with a legal obligation or to establish, exercise, or defend a legal claim. Booking details are kept together with the related correspondence for the same period. Technical connection data handled by our hosting provider is retained according to that provider’s own retention periods.

International transfers

Some of our providers (Cloudflare, Resend) are based in the United States. Where personal data is transferred outside the European Economic Area, the transfer is protected by appropriate safeguards under the GDPR — namely the European Commission’s Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework. The scheduling service (Cal.com) is used through its EU-hosted offering, so booking data is stored and processed within the EU.

Your rights

Under the GDPR, you have the right to access your personal data and to request its rectification, erasure, or restriction, to object to processing, and to data portability. You may exercise these rights at any time by writing to info@lmdevstudio.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

Data Protection Officer

Given the nature and scale of our processing, we are not required to and have not appointed a Data Protection Officer. For any matter concerning your personal data, please contact us at info@lmdevstudio.com.

Changes to this policy

We may update this Privacy Policy from time to time. The date of the latest version is shown above.