Privacy Policy
Last updated: 25 August 2026
1. Introduction
The subdomain app.hexa-studio.it hosts both the informational website and the web application of the HEXA Social Platform. This notice covers browsing of the website, which does not collect personal data except through the contact form, does not track users, and does not use profiling cookies. Access to and use of the application are governed, in addition to this notice, by the specific Privacy Policy available within the application.
2. Data Controller
HEXA Social Platform
Email: contact@hexa-studio.it
3. Data collected by the website
We only collect strictly necessary data:
- Contact form data — name, email, message. Voluntarily provided by the user to request information or support.
- localStorage preferences — cookie consent, language preference, form rate limit. No data is sent to external servers.
4. Legal basis for processing
| Processing | Legal basis (Art. 6 GDPR) | Purpose |
|---|---|---|
| Contact form | Pre-contractual measures (6.1.b) / Legitimate interest (6.1.f) | Responding to user requests |
| Technical localStorage | Legitimate interest (6.1.f) | Website operation (preferences, consent) |
5. Data recipients
Contact form data is forwarded to the platform server (app.hexa-studio.it) so we can receive and handle your request. We do not share data with third parties or use it for marketing. Font Awesome loaded via Cloudflare CDN does not involve tracking.
6. Retention periods
- Contact emails — up to 12 months after response, then automatic deletion
- localStorage — until manually cleared via browser
7. Your rights (Art. 15-22 GDPR)
You have the right to:
- Access (Art. 15) — know what data concerns you
- Rectification (Art. 16) — correct inaccurate data
- Erasure (Art. 17) — request data removal
- Restriction (Art. 18) — block processing in specific cases
- Portability (Art. 20) — receive data in a structured format
- Objection (Art. 21) — object to processing based on legitimate interest
- Withdraw consent (Art. 7.3) — withdraw consent at any time
To exercise your rights write to contact@hexa-studio.it. You also have the right to lodge a complaint with the supervisory authority in your country of residence.
8. DPO — Data Protection Officer
No DPO has been appointed as the website activity does not fall under the mandatory cases of Art. 37 GDPR.
9. Third-party links
This site contains links to HEXA Social Platform social profiles (Instagram, Facebook, LinkedIn). Clicking these links takes you outside app.hexa-studio.it and the respective social network privacy policies apply.
10. HEXA Social Platform application
Regarding data collected by the HEXA Social Platform web application (app.hexa-studio.it), in addition to this notice please refer to the dedicated Privacy Policy available within the platform after login. The website and the application are distinct products with separate policies.
11. Changes
This policy may be updated. Changes will be published on this page with an updated date. We do not send email notifications for policy updates as the site does not collect emails except through the contact form.