Privacy

Privacy Policy

Last updated: 30 April 2026

This page explains what personal data we collect when you visit 58th.it or get in touch with us, why we collect it, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and Italian Legislative Decree 196/2003 as amended ("Codice Privacy").

We try to keep this short and accurate rather than long and defensive. If anything is unclear, write to us.

Who we are

The data controller is:

We do not have a designated Data Protection Officer (DPO) — our processing does not meet the thresholds requiring one under Art. 37 GDPR. You can reach us about any privacy matter at the email above.

What we collect, and why

We try to collect as little as possible.

When you contact us by email

We process your name, email address, and the contents of your message. If you write to us by other means (LinkedIn, WhatsApp), we receive whatever those platforms expose to us — typically your display name and message content.

• Purpose: to reply to you and, where relevant, to start or continue a working relationship.
• Legal basis: Art. 6(1)(b) GDPR — steps taken at your request before entering a contract — or Art. 6(1)(f) — our legitimate interest in answering inbound enquiries.
• Retention: as long as the conversation remains active, plus up to 24 months. If a contract follows, correspondence is kept for the period required by Italian tax and civil law (typically 10 years).

Newsletter

Newsletter subscriptions are not currently active. The "Subscribe" form on the site is a placeholder. No email addresses are being collected at this time.

When we activate the newsletter, we will update this policy with the provider, legal basis (your consent under Art. 6(1)(a) GDPR), and retention details before any addresses are collected.

When you simply visit the site

Our hosting provider records standard server log data — IP address, browser type, requested URL, timestamp — for security and debugging.

• Purpose: to keep the site running and protect it from abuse.
• Legal basis: Art. 6(1)(f) GDPR — legitimate interest.
• Retention: logs are kept for a short rolling window by our host, typically up to 30 days.

We do not run web analytics or advertising scripts. See the Cookies policy for the full picture, including the one third-party network call your browser makes when loading the site (Google Fonts).

Who else processes your data

We use a small set of trusted service providers, each acting as data processor under Art. 28 GDPR:

• Vercel Inc. — hosting and content delivery for 58th.it. Vercel is based in the United States; their Data Processing Addendum is at vercel.com/legal/dpa. EU data residency is configurable at the project level and is set accordingly.
• Google Ireland Ltd. (Google Workspace) — for sending and receiving messages from hello at 58th.it. Google acts as data processor for mailbox content.
• Google Ireland Ltd. (Google Fonts) — when your browser loads the site, it fetches our typefaces from Google's CDN. This means Google receives your IP address and User-Agent as a technical side effect of serving the font files. Google Fonts does not set cookies. We are evaluating self-hosting the fonts to remove this dependency.

We don't sell your data and we don't share it with third parties for their own marketing.

International transfers

Some of the services above are based outside the European Economic Area, mainly in the United States. Where that is the case, we rely on the European Commission's Standard Contractual Clauses (Implementing Decision 2021/914) as the lawful transfer mechanism, alongside each provider's own technical and organisational safeguards.

Your rights

Under GDPR you can:

• Access the data we hold about you (Art. 15)
• Correct anything inaccurate (Art. 16)
• Erase your data, where applicable (Art. 17)
• Restrict or object to processing (Art. 18 and 21)
• Receive a copy of your data in a portable format (Art. 20)
• Withdraw consent at any time, where consent is the legal basis (Art. 7)

To exercise any of these, write to hello at 58th.it. We will reply within 30 days.

If you believe we've handled your data unlawfully, you can lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali — at www.garanteprivacy.it.

Changes to this policy

If we change how we handle data, we'll update this page and the "Last updated" date above. Material changes — for example, activating the newsletter, introducing analytics, or self-hosting the fonts — will be reflected here before they take effect.