Privacy policy

The website lato51.com is jointly managed by: Architect Lara Carola Spano — VAT No. 10268620019 Architect Alice Vercellino — VAT No. 09905750015 both with their studio at Via San Quintino 41, 10121 Turin (TO), Italy, operating under the name "Lato51 studioarchitettura" as joint data controllers pursuant to Article 26 GDPR. Data subjects may request information on the essence of the joint controllership arrangement by writing to the addresses indicated below.

Email: [email protected] — Telephone: 011 5613131. You may contact either joint controller to exercise your rights.

a) Enquiries submitted through the contact form. We process your name, email address, the type of project indicated and the content of your message solely to respond to your enquiry and assess a potential professional appointment. Legal basis: performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR). Provision of data: optional; failure to provide your name, email address and message prevents us from responding to the enquiry.

b) Correspondence by email or telephone. We process the data contained in the communications you send us in order to respond and manage the relationship. Legal basis: pre-contractual measures or legitimate interest in responding to correspondence received (Articles 6(1)(b) and 6(1)(f) GDPR).

c) Technical browsing data. The systems serving the website record, for the technically necessary period, data such as the IP address, browser type, and date and time of the request, solely to enable the transmission of pages and ensure infrastructure security. Legal basis: legitimate interest in the security and proper functioning of the website (Article 6(1)(f) GDPR).

d) Aggregated statistical measurement of visits. We record, in aggregated form, which pages are consulted, where the visit comes from, the approximate country and the device and browser type, in order to understand how the website is used and to improve its content and performance. The measurement, carried out through Cloudflare Web Analytics, takes place on the infrastructure serving the website and not in the user's browser: it sets no cookies, stores no information on the device, builds no profiles and does not enable identification of the data subject. Legal basis: our legitimate interest in understanding, in aggregated form, how the website is used and in improving it (Article 6.1.f GDPR).

The website does not use cookies and does not employ profiling, individual tracking or behavioural advertising tools.

The data is neither disseminated nor transferred to third parties for commercial purposes. It may be processed on our behalf, as data processors pursuant to Article 28 GDPR, by the following providers:

Cloudflare, Inc. — website hosting, content delivery network, security, DNS management and aggregated statistical measurement of visits (Cloudflare Web Analytics);

Web3Creative (Web3Forms) — technical management of contact form submissions; it in turn uses Amazon Web Services, Cloudflare and Hetzner;

Google Ireland Ltd / Google LLC — business email service (Google Workspace).

The studio's tax, accounting or legal advisers, as well as the competent authorities in the cases provided for by law, may also become aware of the data.

Some of the providers listed are established in the United States or may process data outside the European Economic Area. In such cases, the transfer takes place on the basis of the safeguards provided for in Chapter V of the GDPR: an adequacy decision by the European Commission (EU-US Data Privacy Framework), where applicable, and/or Standard Contractual Clauses.

Contact enquiries not followed by an appointment: no longer than 24 months from the last contact.

Data relating to a professional appointment: for the duration of the relationship and thereafter for the periods required by contractual, tax and legal obligations.

Copy of the enquiry held by the provider managing the form: retained in accordance with the service terms for up to three years from the date of submission, unless deleted earlier.

Technical browsing data: for the period strictly necessary for security purposes.

Aggregated statistical data on visits: retained in aggregated form, not attributable to individual users, for the retention periods provided by the Cloudflare Web Analytics service.

You may exercise at any time the rights provided for in Articles 15-22 GDPR: access to data, rectification, erasure, restriction of processing, portability and objection. You may also withdraw consent, where given, without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, write to [email protected]: we will respond within one month of the request. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).

We do not carry out profiling or automated decision-making processes that produce legal effects concerning you.

No Data Protection Officer has been appointed, as the conditions set out in Article 37 GDPR do not apply.

This privacy notice may be updated. Last updated: 7 October 2026.