Design Open · Via Enrico de Nicola 3, 91011 Alcamo TP, Italy
Design Open, Via Enrico de Nicola 3, 91011 Alcamo TP, Italy. Email: studio@design-open.com. Phone: +39 091 664 1567. P.IVA: IT-XXXXXXXXXXX.
GDPR (EU 2016/679); Codice Privacy (D.lgs. 196/2003 amended D.lgs. 101/2018); D.lgs. 70/2003 (e-commerce). Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Roma, garanteprivacy.it.
Contact forms: name, email, phone, company name, project description. Collected on lawful basis of contract preparation (Art. 6(1)(b) GDPR). Project files: brand assets, content, confidential business information shared under NDA. Payment data: processed by Stripe Inc. (PCI DSS Level 1 certified). Design Open does not store card numbers. Analytics: Plausible Analytics, cookieless, EU-hosted. No personal data collected.
Contract performance (Art. 6(1)(b)). Legal obligation (Art. 6(1)(c), Italian tax law). Legitimate interest (Art. 6(1)(f), fraud prevention, service improvement). Consent (Art. 6(1)(a), optional marketing communications).
Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction (Art. 18), Data Portability (Art. 20), Objection (Art. 21). Contact: studio@design-open.com. Response within 30 days. Right to lodge complaint with Garante per la Protezione dei Dati Personali: garanteprivacy.it.
Stripe Inc. (US) operates under Standard Contractual Clauses approved by the European Commission. No other international data transfers occur. All project files stored on EU-hosted servers.
Client contact data: duration of project + 10 years (Italian tax obligations). Design source files: 60 days after project delivery, then securely deleted. Invoices and financial records: 10 years (Italian fiscal law, DPR 600/1973). Analytics data: aggregated, non-personal, retained indefinitely.
HTTPS encryption on all pages. Encrypted file storage. Two-factor authentication on all accounts. Private repositories for source files. NDA signed by all team members and collaborators. 72-hour breach notification per GDPR Art. 33.
Our services are directed to businesses and professionals. We do not knowingly collect personal data from individuals under 16 years of age.
Last updated: March 2026.
Online · Alcamo