1. Data Controller

Controller: Ikigai Leather Lab / Manuel Carassai
Address: Rome, Italy
Email: info@ikigaileatherlab.it

2. Personal Data Processed

We process only the personal data strictly necessary for the operation of the Website and for managing communications:

• Contact communications: data voluntarily provided when contacting us (e.g., name, email address, and message content).
• Technical data: limited information automatically collected during access to the Website (e.g., IP address, date/time, requested resources, browser/device information), used solely for operational and security purposes.

Please avoid including sensitive or special category data in your messages.

3. Purposes and Legal Bases of Processing

Personal data is processed for the following purposes:

• Handling enquiries and responding to messages
  Legal basis: Art. 6(1)(b) GDPR – performance of pre-contractual measures; Art. 6(1)(f) GDPR – legitimate interest in ensuring effective communication.
• Website operation and security
  Legal basis: Art. 6(1)(f) GDPR – legitimate interest in ensuring the technical functionality and security of the Website.
• Compliance with legal obligations
  Legal basis: Art. 6(1)(c) GDPR – compliance with legal obligations.

4. Recipients of Personal Data

Data may be processed by trusted service providers (e.g., hosting, IT and email services) acting as data processors pursuant to Art. 28 GDPR. Data may also be disclosed to competent authorities where required by law. We do not sell or share personal data for marketing purposes.

5. Data Retention

• Contact data: retained for the time necessary to respond and follow up, then deleted or anonymised within [e.g., 12 months], unless longer retention is required for legal obligations or the establishment, exercise or defence of legal claims.
• Technical data (logs): retained for operational and security purposes, typically no longer than [e.g., 30–180 days].

6. Cookies

The Website uses only strictly necessary technical cookies to ensure its functionality and security. We do not use tracking, analytics, or marketing cookies.

7. International Data Transfers

If personal data is transferred outside the European Economic Area, such transfers are subject to appropriate safeguards in accordance with Chapter V GDPR (e.g., Standard Contractual Clauses – Art. 46(2)(c) GDPR).

8. Data Subject Rights

You may exercise your rights under Articles 15–22 GDPR, including the right to access, rectification, erasure, restriction, portability, and objection. Requests may be sent to: info@ikigaileatherlab.it

You also have the right to lodge a complaint with your competent data protection authority. In Italy, this is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).