This Privacy Policy explains how Nicola Malgeri, operating as NinetyStudio ("I", "me", "my"), collects, uses, and protects your personal data when you visit this website, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD).

Data Controller

Name: Nicola Malgeri
NIF: X7837741P
Location: Valencia, Spain
Email: n.malgeri@ninetystudio.io

What Data I Collect

Data You Provide Directly

When you contact me through the contact form, book a strategy call via Calendly, or email me directly, I may collect your name, email address, company information, and any other information you choose to provide in your message.

Data Collected Automatically

When you visit my website, I may collect certain information automatically through cookies and similar technologies. This includes your IP address, browser type, device information, pages visited, time spent on pages, and referring website. For full details, please see my Cookie Policy.

Why I Collect Your Data

I process your personal data for the following purposes:

Purpose	Legal Basis
To respond to your enquiries and communications	Your consent / Legitimate interest
To provide services you have requested	Contract performance
To schedule and conduct strategy calls	Your consent / Contract performance
To analyse website usage and improve user experience	Your consent (for analytics cookies)
To display relevant advertisements	Your consent (for marketing cookies)
To comply with legal obligations	Legal obligation

Data Sharing

I do not sell your personal data. I may share your data with the following third parties:

Google Analytics and Google Ads: If you consent to analytics and/or marketing cookies, data about your website usage may be shared with Google. Google may process this data in the United States. Google is certified under the EU-US Data Privacy Framework. See Google's Privacy Policy.
Calendly: If you book a strategy call, your scheduling data is processed by Calendly. See Calendly's Privacy Policy.
Vercel: This website is hosted on Vercel, who may have access to server logs and data stored on their infrastructure. See Vercel's Privacy Policy.

International Data Transfers

Some of the third parties mentioned above may process your data outside the European Economic Area (EEA). When this occurs, I ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Retention

I retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Contact form enquiries: Up to 2 years after our last communication, unless a business relationship is established.
Client data: For the duration of our business relationship plus the period required by Spanish tax law (typically 5 years).
Analytics data: Retained according to Google Analytics' retention settings (typically 14 or 26 months).
Cookie consent preferences: Stored in your browser until you clear them.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data I hold about you.
Right to rectification: You can request correction of inaccurate or incomplete data.
Right to erasure: You can request deletion of your data in certain circumstances.
Right to restriction: You can request that I limit how I use your data.
Right to data portability: You can request a copy of your data in a machine-readable format.
Right to object: You can object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact me at n.malgeri@ninetystudio.io. I will respond to your request within one month.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es.

Security

I take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

Changes to This Policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact

If you have any questions about this Privacy Policy or how I handle your personal data, please contact me at: n.malgeri@ninetystudio.io