Privacy policy
Last updated: 10 November 2026.
This is a translation of the Italian text. In case of any difference, the Italian version prevails.
This notice explains what personal data the chi-design.com website collects, why, how long we keep it and what rights you have, under Article 13 of Regulation (EU) 2016/679 (GDPR).
Data controller
CHI DESIGN ITALIA S.A.S. DI DE SANTIS DAVIDE — registered office Via Lima 53, 00198 Roma (RM), Italy — VAT IT15010101002 — REA 1562240 — email info@chi-design.it — PEC (certified email) chidesignitaliasrl@pec.it
For any question or request about your data, you can write to either of these addresses.
What data we collect
Data you send us through the contact form. Name, company and email are required: without them we cannot reply to you. Phone, role and message are optional. Please enter only your own contact details, and do not include in your message any data that is not needed for your request, data about other people or sensitive data (for example about health). The form is intended for professionals and companies and is not aimed at anyone under 18.
Technical browsing data. Like any website, the server automatically records some information about visits: IP address, date and time, page requested, referring page, browser and operating system. When you submit the form, your IP address is also used to block repeated submissions (no more than 5 per hour): this data stays only in the server’s temporary memory and is not written to disk.
The website does not use cookies and does not collect visit statistics. Details are in the cookie policy.
Why we process it and on what legal basis
- To reply to your request, send you a confirmation email and, if you wish, prepare a quotation and handle the negotiation. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
- To keep a record of our correspondence in order to handle any new contact and protect our rights. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
- To protect the website from abuse, spam and cyber attacks. Legal basis: the controller’s legitimate interest in the security of the website (Art. 6(1)(f) GDPR).
We do not use your data for newsletters or promotional communications, we do not sell it and we do not pass it on to third parties for their own purposes. We do not make automated decisions and we do not carry out profiling.
How your data is processed
The website does not store requests in a database: when you submit the form, the data is sent by email to the info@chi-design.it inbox and you receive a confirmation email at the address you provided. From then on, the request is handled like any other business correspondence.
If you receive a confirmation for a request you did not send, write to us: we will delete the data straight away.
How long we keep it
- Contact requests and related correspondence: 24 months from the last contact, unless a contractual relationship begins; in that case the data is kept for as long as the law requires (usually 10 years for accounting records) and, where necessary, for as long as needed to defend our rights.
- Technical server and application logs: 14 days, after which they are deleted automatically.
Who may process the data
The data is processed by the controller and by the people it has authorised. It may also be processed by the IT service providers that handle the hosting and technical maintenance of the website and the email service, appointed as data processors (Art. 28 GDPR). An up-to-date list of processors is available on request at info@chi-design.it.
The data may be disclosed to public authorities only where the law requires it.
Where the data is located
The website’s server is located in the European Union. The email provider that manages the info@chi-design.it inbox may transfer data to the United States and to other countries outside the European Union: it does so on the basis of the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and of the standard contractual clauses approved by the Commission (Art. 46 GDPR).
Your rights
At any time you can ask the controller:
- to access your data and receive a copy of it (Art. 15);
- to correct or complete it (Art. 16);
- to erase it (Art. 17);
- to restrict its processing (Art. 18);
- to receive it in a machine-readable format or have it transmitted to another controller (Art. 20);
- to object to processing based on legitimate interest (Art. 21).
To exercise these rights, write to info@chi-design.it or to the PEC address chidesignitaliasrl@pec.it. We reply within one month. If the request is complex, this may be extended to three months: in that case we will let you know within the first month.
If you believe the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the country where you live or work.
Links to other websites
The website contains links to other websites: CHI Design’s social media profiles (Instagram, LinkedIn, Facebook), Google Maps and some press articles. They are plain links: no content from those services is loaded on our website. When you open them, the privacy notices of the respective operators apply.
Changes
If the processing described here changes, for example because new services are added, we will update this page before the change and update the date at the top.