Legal
Privacy Policy
Last updated: 10.09.2026
Under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended, this notice describes how we process the personal data of users of kr3a.design.
1. Data controller
The data controller is KR3A DESIGN, Via San Bernardino 146, 25018 Montichiari (BS), Italia, VAT 04352740981, C.F. SFNNTN88E31L109S.
For any request concerning personal data, write to atelier@kr3a.design or call +39 393 7657758 · +39 331 9195030.
2. Data processed
Contact and project data you provide voluntarily through the site forms: name, company, email address, telephone, project type, location, message content and any request for a site survey or consultation.
Browsing data collected automatically by our systems: IP address, browser and device type, pages visited, date and time of request. This data is used in aggregate form for site security and statistics.
Cookies and similar technologies, as set out in the Cookie Policy and according to the preferences you express in the banner.
3. Purposes and legal bases
a) Answering enquiries, preparing quotations, arranging surveys and project consultations: pre-contractual measures at your request, art. 6.1.b GDPR.
b) Managing the contract, invoicing and tax or civil law obligations: legal obligation, art. 6.1.c GDPR.
c) Site security, abuse prevention and aggregate statistics: legitimate interest of the controller, art. 6.1.f GDPR.
d) Analytics and marketing cookies: your consent, art. 6.1.a GDPR, withdrawable at any time from the cookie preferences panel.
4. Whether providing data is mandatory
Providing the fields marked as required is necessary to act on your request. Without them we cannot reply, arrange a survey or hold a consultation. All other data is optional.
5. Recipients
Data may be disclosed to parties acting as processors under art. 28 GDPR: hosting and web infrastructure provider, email provider used for enquiries and automatic confirmations, tax and legal advisers, installers and technical partners appointed for the survey.
Data is never published or sold to third parties for marketing purposes.
6. Transfers outside the EU
Some providers may process data outside the European Economic Area. Such transfers rely on a European Commission adequacy decision or on Standard Contractual Clauses under art. 46 GDPR, with appropriate supplementary measures.
7. Retention
Enquiries with no contractual follow-up: 24 months from last contact.
Contractual, tax and warranty data: 10 years from the end of the relationship, as required by Italian civil and tax law.
Technical logs: 12 months maximum. Cookie consent records: 6 months, unless withdrawn earlier.
8. Your rights
You may exercise the rights of access, rectification, erasure, restriction, portability and objection (arts. 15-22 GDPR) at any time, and withdraw consent without affecting the lawfulness of prior processing.
Send requests to atelier@kr3a.design; we reply within 30 days.
You also have the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it.
9. Security and automated processing
We apply appropriate technical and organisational measures, including TLS encryption, named access accounts and data minimisation. We carry out no automated decision-making or profiling under art. 22 GDPR.