Privacy Policy.

1. Data Controller

Pursuant to Article 13 of Regulation (EU) 2016/679 (the "GDPR") and Italian Legislative Decree 196/2003 as amended (the "Privacy Code"), this policy describes how personal data is processed for users visiting the website madebywest.com, the informational website of the marketing studio Made by West.

The Controller has not appointed a Data Protection Officer (DPO), as it does not fall under the mandatory cases set out in Article 37 of the GDPR.

2. Categories of Data Collected

This website is a purely informational landing page: it does not require registration, does not sell products and does not process payments. Therefore, only the following data is processed:

• Browsing data: the computer systems and software procedures used to operate this website acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols (IP addresses, browser type, operating system, access times). This data may be used, upon request by the competent authorities, to ascertain liability in the event of hypothetical cybercrimes against the website;
• Data provided voluntarily: the email address and any information the user chooses to include when contacting the Controller by email to request information or a consultation.

Providing this data is optional; failure to provide it may make it impossible to respond to the user's requests.

3. Purposes and Legal Basis

• Operation and security of the website (browsing data): legal basis = the Controller's legitimate interest (Art. 6(1)(f) GDPR), aimed at ensuring the security and proper functioning of the website;
• Responding to user requests (email and message content): legal basis = pre-contractual measures and/or performance of the data subject's requests (Art. 6(1)(b) GDPR). The information will be used exclusively to follow up on the request and will not be used for commercial communications without consent.

4. Cookies and Tracking Technologies

This website does not use profiling cookies, third-party cookies, analytics or tracking technologies. Only cookies or technical data strictly necessary for the operation of the website may be used, for which prior consent is not required (Art. 122(2) of the Privacy Code). For this reason, no cookie consent banner is present.

5. Recipients of Data

Personal data is processed by the Controller and, where applicable, by parties acting as processors or authorized personnel. In particular:

• Hosting provider: the website is hosted on third-party infrastructure acting as a data processor, limited to the technical management of the website and the storage of access logs;
• Email service providers: for the management of the institutional mailbox.

Data will not be disclosed or communicated to third parties for marketing purposes, except where required by law.

6. Transfer of Data outside the EU

Should the hosting provider or other technical providers carry out processing in non-EU countries, the transfer takes place exclusively in compliance with Chapter V of the GDPR, through adequacy decisions of the European Commission or Standard Contractual Clauses.

7. Data Retention

• Browsing data (logs): stored for the time strictly necessary for the operation and security of the website and in any case within the limits permitted by applicable law;
• Email communications: stored for the time necessary to handle the request and, if a professional relationship begins, for the contractual, accounting and fiscal obligations required by law (up to 10 years where required).

8. Data Subject Rights

Pursuant to Articles 15-22 of the GDPR, data subjects have the right to:

• obtain confirmation of the existence of data concerning them and access it (right of access);
• obtain the rectification of inaccurate data (right to rectification);
• obtain its erasure, in the cases provided for (right to be forgotten);
• restrict its processing (right to restriction);
• receive it in a structured format and move it elsewhere (right to portability);
• object to processing based on legitimate interest (right to object);
• withdraw consent, where given, at any time, without affecting the lawfulness of processing based on consent given before its withdrawal;
• lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise these rights, simply send a request to info@madebywest.com.

9. Protection of Minors

The website and the Controller's services are aimed at professionals in the hospitality sector and are not intended for minors. The Controller does not knowingly collect personal data from persons under 18 years of age.

10. Changes to this Privacy Policy

The Controller may update this policy to adapt it to regulatory developments or changes to the website. The version in force is the one published on this page; material changes will be signaled by updating the "Last updated" date.

11. Contact

For any questions regarding this policy or the processing of personal data: