Privacy policy.

Who processes your data.

The data controller is Studio Remarka S.r.l. (VAT GE 302230994). You can meet us at three offices, by appointment: Milan — Vicolo Privato Lavandai 2a, 20144; Turin — Corso Regina Margherita 94, 10153; Rome — Via Flaminia 122, 00196. For any question about your data, write to info@remarka.biz: a person replies, not a form.

What we collect and why.

We only process the data we need to reply to you or let you use the free tools.

Contact form and quote request

• What: your name, one contact detail (email or phone) and the message text, plus any attachments you choose to upload.
• Why: to reply and prepare a quote. Legal basis: your request (pre-contractual steps).
• Requests reach us by email; we do not use them to send you advertising.

Website chat

• What: the messages you write in the chat window and, if you provide it, a contact detail (email or phone); we also record the page you write from and its language. The chat sets no cookies: your browser keeps the conversation in its own local storage (localStorage).
• Why: to reply to you. Legal basis: your request (pre-contractual measures).
• A person from the studio replies, not an automated system; outside working hours only an automatic acknowledgement appears.

Free tools and site check-up

• What: the address of the site you analyse and, if you ask for the report by email, your email address; we also record the score obtained and the page language.
• Why: to generate your analysis, send you the PDF and — only if you consented — get back to you with an offer or a reminder. Legal basis: your consent, which you can withdraw at any time.
• We keep these requests in an internal list of prospective clients.

Client area (cab.remarka.biz)

• What: email, name, preferred language and, in the access logs, the IP address and browser (user-agent) used to log in. We do not store passwords: you sign in with a temporary link sent by email.
• Why: to give you access to your projects. Legal basis: performance of the service contract.
• The client area is reserved for people already working with us.

Server technical logs

• What: the IP addresses and requests that every web server records in order to run and to defend against abuse.
• Why: security and diagnostics. Legal basis: our legitimate interest in keeping the site online and secure.

Who we entrust the data to.

To run the site we rely on a few providers, which process data only on our behalf. Data from the forms and the client area stays within the European Union:

• Hetzner — site hosting on servers in Germany (EU).
• Brevo — sending transactional emails (replies, PDF reports, client-area sign-in links); an EU-based provider.

Two technical features send one piece of data to a provider based outside the EU, but only when you trigger them and limited to the following:

• Google PageSpeed Insights API — when you measure a page’s speed or SEO, we send Google only that page’s address, to obtain the score. None of your personal data.
• Anthropic (Claude API) — the AI-based tools send Anthropic the text or address you paste in yourself, only when you press the button, to generate the result. That content is not used to train models.

The website chat reaches the studio through Telegram (Telegram Messenger, a provider based outside the EU): every message you send, with the optional contact detail and the page you write from, is forwarded to our Telegram account, from which we reply.

We do not pass your data to third parties for marketing purposes.

Maps and external content.

Google maps load only if you ask for them: we show a preview, and the interactive map starts — with its connection to Google — only after you click. Until you click, your browser does not contact Google Maps.

How long we keep the data.

• Contact-form requests: for as long as needed to handle the request and any resulting obligations.
• Leads from the free tools: as long as they are useful for follow-up, or until you ask for their deletion.
• Client area: access logs for 12 months; the account for as long as the collaboration lasts. On closure, or at your request, the linked data is deleted in cascade.
• Website chat: 30 days from the last message, after which the conversation is deleted automatically from our server. Notifications already delivered to our Telegram account stay in its history until we delete them.
• Server technical logs: for a short period, then overwritten.

Your rights.

Over your data you can exercise the rights granted by the GDPR: access, rectification, erasure, restriction, objection and portability. You can withdraw a consent already given at any time, without affecting what was done before.

To exercise them, just email info@remarka.biz: we handle it, including for the client area (export or cascade deletion). If you think something is wrong, you can contact the Italian data protection authority (Garante).

Updates to this page.

If we change tools or purposes, we will update this page and the date shown at the top.