How we handle your data.

Supplementary notice: bookings, contact form, analytics and hosting

This section supplements the Privacy Policy above and describes the external providers used by this website. Data controller: Beyond Web Studio di Mattia Orfanò, VAT no. IT01426550321, Trieste, Italy, reachable at contact@beyondwebstudio.com.

Booking the free call (Cal.com)

The “Book a call” buttons open a booking page run by Cal.com, Inc. (United States). If you book, we process your name, email address, any answers you provide, and the date, time and time zone you choose. The appointment is added to the controller's calendar (Google Calendar, Google LLC) and the call takes place on Google Meet. Purpose: arranging the call you requested, as a pre-contractual measure (Art. 6(1)(b) GDPR). The booking page is also subject to the Cal.com privacy policy.

Contact form (Resend)

The details you enter in the form on the Contact page (name, email and, if provided, company, phone, type of request and message) are emailed to the controller through Resend (Resend, Inc., United States) so that we can reply to your request (Art. 6(1)(b) GDPR).

Website analytics (Vercel Web Analytics)

To understand which pages are most useful, this website uses Vercel Web Analytics (Vercel Inc., United States), which does not use cookies. It collects aggregated data: pages visited, referring website, country, browser, operating system, device type and certain actions (for example clicking “Book a call” or submitting the form). Each visit is identified by an anonymous code that resets every day, and IP addresses are not stored. Legal basis: the controller's legitimate interest in improving the website (Art. 6(1)(f) GDPR).

Hosting (Vercel)

This website is hosted by Vercel Inc. (United States). To operate the website and for security purposes, the servers log technical request data such as IP address, date and time and the page requested, kept for a limited period. Legal basis: the controller's legitimate interest in running and securing the website (Art. 6(1)(f) GDPR).

Transfers outside the European Union

The providers listed above are based in the United States. Data transfers rely on the safeguards provided by the GDPR, such as the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission, as adopted by each provider.

Retention and your rights

Bookings and contact requests are kept for as long as needed to handle them and follow up on any resulting business relationship; analytics are kept only in aggregated form. You can exercise your rights under Articles 15–22 GDPR by writing to contact@beyondwebstudio.com, and you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Supplementary notice: BIBI virtual assistant

This section supplements the Privacy Policy above and applies only to the chat with the «BIBI» virtual assistant on this website. Data controller: Beyond Web Studio di Mattia Orfanò, VAT no. IT01426550321, Trieste, Italy, reachable at contact@beyondwebstudio.com.

What the chat does and which data it processes

BIBI is an AI-based assistant that answers questions about Beyond Web Studio's services. The chat only starts if you open it and write a message. We process the content of the messages you write and, only if you choose «Leave your details», the name, email address and any phone number you enter. To prevent abuse, your IP address is used temporarily to count requests, without being stored.

Purposes and legal basis

Answering your questions and, if you ask, getting back to you about our services: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). Preventing misuse of the service: the controller's legitimate interest (Art. 6(1)(f) GDPR).

Who receives the data

To generate replies, messages are sent to OpenRouter, Inc. (United States), which routes them to language model providers (for example NVIDIA Corporation or Google LLC, United States). The models used are free versions: these providers may store messages and use them to improve their models, according to their own policies (OpenRouter privacy policy). Data is therefore transferred outside the European Union. If you leave your details, they are emailed to the controller together with the conversation through the Resend email service (Resend, Inc., United States).

For this reason, please don't enter sensitive data, third-party data or confidential information in the chat.

Retention

The website does not save conversations: they are only visible on the page and disappear when you close or reload it. Contact requests received by email are kept for as long as needed to handle them and follow up on any resulting business relationship. The chat does not use cookies or any other storage on your device.

Your rights

You can exercise the rights provided by Articles 15–22 GDPR (access, rectification, erasure, restriction, objection, portability) by writing to contact@beyondwebstudio.com, and you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).