Privacy Policy

1. Data Controller

Sberla is currently operated by a group of private individuals who are testing the market for design services; it is not (yet) a registered company. The people behind Sberla act as the data controllers for the personal data you submit and can be reached, for any privacy-related matter, at hello@sberla.studio. If Sberla is later established as a legal entity, this section will be updated with its full identification details.

2. What data we collect

We only collect the data you actively provide and the minimum technical data needed to run the website.

Data you submit through the contact / quote form: first name, last name, company or institution, email address, phone number, city, country, the package you are interested in, the project details you write, and (optionally) your address. We also record that you accepted this Privacy Policy and the date of submission, as proof of consent.

Technical data: when you load the site, our hosting and infrastructure providers may automatically process limited technical information (such as your IP address and browser type) in server logs, for security and to deliver the website. We do not use this data to profile or track you.

3. Why we use your data and the legal basis

We use your form data only to read your request, reply to you and, where relevant, prepare a quote and discuss a possible project.

The legal bases are: your consent (Art. 6(1)(a) GDPR), which you give by ticking the box on the form; and the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). Technical/security processing relies on our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

4. Who we share your data with

We do not sell your data. We share it only with service providers who process it on our behalf as data processors, under appropriate data processing agreements:

Supabase — database hosting for your request.
Resend — delivery of the notification email to our team.
Vercel — website hosting and infrastructure.

5. International data transfers

Some of our providers may process data outside the European Economic Area (e.g. in the United States). Where this happens, the transfer is protected by appropriate safeguards under the GDPR, such as the European Commission’s Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework. You can request a copy of these safeguards by writing to us.

6. How long we keep your data

We keep the data from your request for as long as needed to handle it and for our legitimate business and accounting obligations, and in any case no longer than necessary for the purposes above. After that, the data is deleted or anonymised. You can ask us to delete it sooner at any time.

7. Your rights

Under the GDPR you have the right to access your data, rectify it, erase it, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time (without affecting processing already carried out). To exercise any of these rights, email us at hello@sberla.studio.

You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it), or the data protection authority of your country of residence.

8. Cookies

This site does not use profiling or tracking cookies. It only uses local browser storage to remember your light/dark theme preference. See our Cookie Policy for details.

9. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and row-level security on our database. No method of transmission is ever fully secure, but we work to keep your data safe.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the “last updated” date above.

11. Contact

For any question about this policy or your personal data, contact us at hello@sberla.studio.