Our Studio S.R.L. · updated 30 October 2026
Data controller
Our Studio S.R.L. — VAT IT01464680451 — Via Alfio Maggiani 143, 54033 Marina di Carrara (MS), Italy
info@our-studio.it · +39 328 44 27 27 8
1. Requests by form and email
When you write to us by email or through the request form on this site ("Plan an experience", "Plan an exhibition") we process the data you provide: name and surname, email, phone, organisation, role, language, project details (interests, number of people, period, duration, city and venue, artists and services of interest, indicative budget, notes), how you heard of us and, if requested, your preference for a call. Purpose: to reply, assess the request, prepare a proposal and arrange a meeting. Legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR) and consent (art. 6.1.a GDPR).
2. Petra, the artificial-intelligence assistant
Petra is an artificial-intelligence system, not a person: we say so in every conversation, as required by the EU AI Act (Regulation (EU) 2024/1689, art. 50). Replies are generated automatically and may contain errors; decisions on your requests are always taken by Our Studio staff, never by automated means (art. 22 GDPR). To generate replies, messages are processed by Anthropic's Claude model, acting as data processor, which does not use conversations to train its models. The conversation is stored in your browser and, so that our team can follow up your request, in our archive (Supabase, servers in the European Union), accessible only to Our Studio staff. Contact details (name, email, phone, organisation, details) enter our system only if you give explicit consent to send the request. Please do not share health data or other special categories of data. Legal basis: your request for information and pre-contractual steps (art. 6.1.b GDPR); consent for sending contact details (art. 6.1.a GDPR).
3. Phone number verification
If you leave a phone number, we send you a code by SMS to check that the number is yours: this protects you and us from wrong numbers or numbers entered by someone else. The service is provided by Twilio, acting as data processor, which processes the number only to send and check the code. Legal basis: legitimate interest in accurate data and abuse prevention (art. 6.1.f GDPR).
4. Statistics and advertising (only with your consent)
With "analytics" consent we enable Google Analytics 4 (Google Ireland Ltd.) to measure visits and use of the site and chat in aggregate form; Google Analytics 4 does not log or store IP addresses. With "marketing" consent we enable the Meta Pixel (Meta Platforms Ireland Ltd.), which lets us measure our campaigns on Facebook and Instagram and show our content to interested people; for the collection and transmission of this data Our Studio and Meta are joint controllers, and Meta's information is available at facebook.com/privacy/policy. Legal basis: consent (art. 6.1.a GDPR and art. 122 of the Italian Privacy Code), which you can withdraw at any time via the "Cookie" link at the bottom of the page. Without consent these tools are not loaded.
Cookies and browser storage
Technical, always on: os_cookie_consent (your cookie choices, 6 months), os_lang (language), petra_chat_v1 (your conversation with Petra, until you choose "New conversation"). Analytics, with consent: _ga, _ga_* (Google Analytics, up to 13 months). Marketing, with consent: _fbp (Meta, up to 90 days). We ask for your cookie choice again after 6 months or when the tools we use change.
Recipients and transfers
Data is handled by Our Studio staff and by the providers who support us as data processors: website hosting and email (Italy), Supabase (archive, EU), Anthropic (artificial intelligence), Twilio (SMS), Google and Meta (only with consent). Where a request requires it, only the data needed for the organisation may be shared with collaborators involved (transport, accommodation, restaurants). Some providers are based or have servers outside the European Union (United States): in these cases transfers rely on the EU-US Data Privacy Framework adequacy decision or on the European Commission's Standard Contractual Clauses (arts. 45–46 GDPR). To protect the form and the chat from abuse, we also temporarily process the IP address and time of requests. Data is never sold or shared with third parties for their own purposes.
Retention
Requests and contact data: for as long as needed to manage the communication and in any case no longer than 24 months from the last contact. Conversations with Petra that do not become a request: after 12 months they are moved to a separate archive, accessible only to Our Studio's administration, and permanently deleted within 24 months at the latest. SMS verification data: only the outcome of the check, kept with the conversation. Statistics: as set out above.
Your rights (arts. 15–22 GDPR)
You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent at any time without affecting processing already carried out. Write to info@our-studio.it. You may lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
AI-generated content
Petra's face and some evocative images on this site are generated with artificial intelligence and are labelled as such. The works, places, people and projects described are real.
Minors
This site and the chat are not intended for children under 14.