Privacy notice
Last updated: 18 September 2026
This notice explains how Santese Art processes personal data of people who visit the website or contact us. It reflects how the site actually works: a showcase with no accounts, no online purchases and no profiling tools.
1. Data controller
The controller is Santese Art di Rocco Santese, Via Torre Santa Susanna, 124, 72024 Oria (BR), Italy.
For requests about personal data: santesearts@gmail.com · +39 329 215 1568.
2. What data we process and why
Contact requests: name, email address and message content. The form does not save data on the website: it opens your device's mail app and sends the message to us. We process that data to reply, send quotes and, if asked, arrange an appointment.
Direct communications: if you email or call us, we process the data you provide for the same purpose.
Technical browsing data: the hosting provider may keep, for a limited time, data such as IP address, date and time, pages visited and browser type, for security, diagnostics and site operation.
Language preference: if you choose Italian or English, the site stores that choice in the browser's localStorage (key santeseart-locale), on your device only.
3. Legal basis
Taking steps at your request before entering a contract (Art. 6(1)(b) GDPR), for example quotes and appointments.
Legitimate interest in keeping the site secure and working (Art. 6(1)(f) GDPR), for technical logs.
Compliance with legal obligations, where applicable (Art. 6(1)(c) GDPR), for example retaining relevant correspondence.
4. Recipients and transfers
Data are processed by the controller and any authorised collaborators. We do not sell personal data and we do not use them for third-party advertising.
The site is hosted by Vercel, which may process technical browsing data as a provider. Contact emails arrive in the controller's Gmail inbox, so Google processes the correspondence as the email service provider.
These providers may have servers outside the European Economic Area. In that case the transfer takes place with the safeguards required by the GDPR, such as standard contractual clauses or equivalent tools.
5. Retention
Contact requests are kept for as long as needed to handle them and, if a later relationship follows, for the duration of that relationship. Correspondence with tax or legal relevance is kept for the periods required by law.
Technical logs follow the hosting provider's policies, usually for a limited period. The language preference stays on your device until you clear browsing data.
7. Your rights
You may request access, rectification, erasure, restriction, portability and objection to processing, within the limits of Arts. 15-22 GDPR. To exercise them, write to santesearts@gmail.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
We do not make automated decisions, including profiling, that produce legal or similarly significant effects concerning you.
8. Updates
This notice may be updated if the site or the law changes. The date at the top of the page shows the version in force.