Last updated: 01.07.2026

1. Who we are

Maio Studio is a collaboration between two independent professionals who act as joint data controllers for this website:

• Valentina De Sanctis — VAT no. 18381661000

• Patrizio Mei — VAT no. 17151421009

Based in Rome, Italy. Contact: hello@maiodesign.it

We decide together how and why your data is processed here, which makes us joint controllers under Article 26 GDPR. You can exercise your rights (section 6) by writing to the email above — either of us can handle your request.

2. What we collect, and why

Contact form. When you write to us, we collect your email address and your message. We use them only to read and reply. Legal basis: our legitimate interest in responding, and steps taken at your request before any contract (Article 6(1)(b) and (f) GDPR).

Server logs. Our hosting provider automatically records technical data (IP address, browser type, time of access) to keep the site secure and running. Legal basis: our legitimate interest in a working, secure site (Article 6(1)(f) GDPR).

We don't use analytics or profiling tools, and we don't track your browsing.

3. Cookies

Technical cookies (always on). Needed for the site to work. No consent required.

Vimeo videos. Our videos are hosted on Vimeo and load in "do not track" mode, so Vimeo doesn't set tracking cookies or build a profile of you. When a video loads, your browser still connects to Vimeo (which may receive your IP) to stream it — that connection is what lets you watch. The only cookies involved are the ones essential to running the player securely.

We don't use analytical, advertising, or profiling cookies.

4. How long we keep your data

Contact messages: as long as needed to handle your request and anything that follows from it, and no longer than 24 months after our last exchange, unless the law requires otherwise. Server logs: kept by our provider for a limited period, for security.

5. Who we share it with, and where it goes

We don't sell your data or use it for marketing. A few providers process it on our behalf to run the site:

• Framer — hosting and contact-form delivery.

• Vimeo — video hosting (in do-not-track mode)

These providers may process data in the United States. Where that happens, transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (Chapter V GDPR).

6. Your rights

Under the GDPR you can ask us to: access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time (for anything based on consent, like Vimeo cookies) — without affecting what came before. Write to hello@maiodesign.it; we reply within a month.

7. Complaints

If you think we've mishandled your data, you can complain to the Italian supervisory authority: Garante per la protezione dei dati personali — Piazza Venezia 11, 00187 Roma — garante@gpdp.it — garanteprivacy.it

8. Changes

We may update this policy. The version in force is always the one published here, with its "last updated" date.