Legal
Privacy Policy
Last updated: 22 July 2026
This Privacy Policy explains how Enea Antonioli, operating as NTNL Studio("we", "us"), processes personal data when you visit ntnlstudio.com or contact us. It is provided for information under the EU GDPR and Italian privacy law; it does not replace professional legal advice.
01 — Data controller
Enea Antonioli, operating as NTNL Studio
Registered for VAT in Italy — VAT no. 01073220145
Location: Valfurva, Italy
Privacy contact: enea.antonioli@gmail.com
02 — Data we process
Depending on how you interact with the site, we may process:
- Browsing and technical data — IP address, date and time of access, requested URLs, browser and device information, and similar server or CDN logs generated when you load pages. These are typically processed by our hosting provider to deliver and secure the website.
- Contact data — if you email us (for example via a
mailtolink), the content of your message and your email address, which we use only to reply and manage the enquiry. - Aggregated analytics data— when Cloudflare Web Analytics is enabled on this site, aggregated metrics such as page views, referrers, countries/regions, and similar traffic statistics. Cloudflare's Web Analytics product is designed to be privacy-oriented and does not use cookies or fingerprint visitors for advertising.
We do not run marketing pixels, remarketing tags, or advertising profiles on this site.
03 — Purposes and legal bases
- Operating and securing the website (hosting, logs, abuse prevention) — performance of a service / legitimate interest in keeping the site available and secure.
- Responding to enquiries you send by email — pre-contractual steps or legitimate interest in communicating with you; where applicable, your consent to the exchange.
- Understanding site traffic through privacy-oriented analytics (Cloudflare Web Analytics, when enabled) — legitimate interest in measuring aggregated use of the portfolio site, balanced against your rights given the limited, non-profiling nature of the tool.
04 — Hosting
The website is hosted by Netlify. Netlify may process technical data as a data processor / service provider on our behalf to serve pages, handle HTTPS, and maintain infrastructure. Further detail: Netlify Privacy Policy.
05 — Analytics (Cloudflare)
We intend to use Cloudflare Web Analytics (provided by Cloudflare, Inc.) to obtain basic, aggregated statistics about visits (for example popular pages, approximate geography, and traffic sources). The beacon may be added after publication; until it is installed, this section describes the intended processing so the policy stays accurate when analytics go live.
Cloudflare states that Web Analytics does not use client-side cookies or localStorage for the purpose of tracking individuals, and does not fingerprint people for advertising. Metrics are collected via a lightweight script and/or Cloudflare's infrastructure depending on setup. See Cloudflare's Privacy Policy and their Web Analytics documentation for product details.
Data may be processed on servers outside the European Economic Area. Where required, transfers rely on the safeguards Cloudflare provides (such as Standard Contractual Clauses or other lawful transfer mechanisms described in their documentation).
06 — Retention
- Server / hosting logs— retained only as long as needed for security, diagnostics, and operation of the site, according to the host's practices and our configuration.
- Email correspondence — kept for as long as useful to handle your request and any related follow-up, then deleted or archived as appropriate.
- Analytics — retained according to Cloudflare Web Analytics retention for the property, in aggregated form.
07 — Recipients
Personal data may be accessed by us and by service providers acting on our instructions, in particular Netlify (hosting) and, when analytics are enabled, Cloudflare (Web Analytics). We do not sell your personal data.
08 — Your rights
Under the GDPR, you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability where applicable. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
To exercise your rights, email enea.antonioli@gmail.com.
09 — Cookies and similar technologies
Details on cookies and similar technologies are set out in our Cookie Policy.
10 — Changes
We may update this Privacy Policy when our practices, tools, or legal requirements change. The "Last updated" date at the top will be revised accordingly. Continued use of the site after an update means you should review the new text.