Privacy Policy

Data controller

The data controller is Komorebi Studio di Di Roberto Diego, Italian VAT number 03322920608. For requests concerning your data, write to diego@diegodiroberto.com.

Data you choose to provide

The website does not require an account. Most personal data is provided directly by you when you choose to contact me:

• —Contact form: name, optional company, email address, message, and an optional indication of when you would like to start.
• —Name, email, and message are required to submit the form; company and timing are optional. If you prefer not to use the form, you can contact me by email.
• —Direct email: sender address, message content, attachments, and standard email metadata.
• —Call booking: the data you enter on the Google Calendar booking page, together with the time slot you select.

Why this data is used

I use this data to review and respond to your request, assess whether and how I can help, arrange the call, and handle any steps you ask me to take before an engagement. If a professional relationship begins, later processing is also governed by the agreements and obligations that apply to that relationship.

Technical data and website statistics

The website is hosted on Vercel and uses Vercel Web Analytics and Vercel Speed Insights. The hosting provider may process technical data needed to deliver and protect the website, such as IP addresses and request data. According to Vercel’s documentation, Web Analytics does not use cookies and records aggregated data that is not associated with a person or IP address; Speed Insights records anonymous performance data points and does not reconstruct an individual visitor’s browsing session.

• —Web Analytics may include the page visited, referrer, country, browser, operating system, and device type.
• —Speed Insights may include page or route, browser, device, country, network speed, and Web Vitals metrics.
• —The website does not send the content of the contact form or emails to these tools.
• —The Tally form includes Google reCAPTCHA to distinguish legitimate submissions from spam. When the check is loaded or executed, it may analyze technical and interaction signals, including an IP address and information about the network, browser, and device.

Service providers involved

Some functions are provided by external services. Each provider processes the data needed to perform its role under its current terms and privacy notice:

• —Tally, a company based in Belgium, runs the embedded form and stores responses on behalf of the controller. Tally states that form data is encrypted in transit and at rest and stored in Europe. It may use the subprocessors listed in its documentation; some, such as the service used for email notifications, may operate in the United States when that feature is enabled.
• —Vercel hosts the website and provides Web Analytics and Speed Insights.
• —Google provides the external booking page, the video-call service, and reCAPTCHA, which Tally uses for spam protection. The data processed depends on the service that is actually loaded or used.

Processing outside the European Economic Area

Vercel, Google, and some subprocessors used by these providers are based outside the European Economic Area or operate infrastructure there. This may involve processing in other countries. The safeguards that apply depend on the provider, the active service, and the agreements in force; the providers’ current privacy notices and data-processing terms contain the authoritative details.

Retention

Inquiries, correspondence, and booking data are kept for as long as needed to handle your request and any related professional follow-up, plus any additional period required to meet applicable obligations or manage disputes. Form responses remain in the Tally account until the controller deletes them; technical deletion from systems and backups follows the provider’s own timelines. Vercel’s aggregated data follows the periods described in the service documentation and the active plan.

Your rights

Where applicable, you may request access, rectification, erasure, restriction of processing, or data portability, or object to processing. You may also withdraw consent where processing relies on consent. To exercise any of these rights, write to diego@diegodiroberto.com. If you believe the processing is improper, you may complain to the Italian Data Protection Authority or the competent authority in your country.

Security

I use services that state they apply technical and organizational measures to protect data, and I limit collection to what is needed for the functions described. No online transmission or storage can be considered entirely risk-free.

Updates

This notice is updated when the website, its providers, or the processing changes. The version published on this page is the current one. Last updated: August 17, 2026.