Last updated: May 2026
Data Controller
The Data Controller for this website (kbstudio.it) is:
Kristijan Boros (KBStudio) – Oracle NetSuite Solution Architect & Senior Consultant
Email: euro2007mail@gmail.com
Country of registration: Italy
What data we collect
This website processes personal data in the following situations:
- Contact form: name, email address, company (optional) and the content of the message you send us.
- Server logs: IP address, browser identifier, pages visited, timestamps – retained for security and abuse prevention.
- Cookies and similar technologies: see the Cookie Policy for full details and consent options.
- Analytics (with your consent): aggregated usage data via Google Analytics 4 / Site Kit and Jetpack stats.
Why we process your data (purposes & legal basis)
- To respond to your enquiries via the contact form – legal basis: pre-contractual measures and your request (GDPR Art. 6.1.b).
- To operate the website securely (logs, abuse prevention) – legal basis: legitimate interest (GDPR Art. 6.1.f).
- To analyse usage via cookies and analytics – legal basis: your explicit consent (GDPR Art. 6.1.a).
- To comply with legal obligations (e.g. accounting if you become a client) – legal basis: legal obligation (GDPR Art. 6.1.c).
How long we keep your data
- Contact form messages: up to 24 months unless we enter a commercial relationship.
- Server logs: up to 12 months.
- Analytics data: aggregated, retained per Google Analytics 4 settings (default 14 months).
- Consent records: as long as required to demonstrate compliance with the GDPR.
Who we share your data with
We do not sell your data. We share data only with technical service providers strictly necessary to operate the site (data processors under GDPR Art. 28):
- Hosting / infrastructure provider (Plesk-managed server, EU)
- Google LLC – if you consent to Analytics cookies (data may be transferred outside the EEA under Standard Contractual Clauses)
- Automattic Inc. (Jetpack) – if you consent to performance/analytics cookies
- CookieYes Limited – consent management
International transfers
Some processors are located outside the European Economic Area. Where this is the case, transfers are protected by adequacy decisions or Standard Contractual Clauses (SCC) under GDPR Art. 46.
Your rights
Under the GDPR (Art. 15-22) you have the right to:
- Access your data and request a copy
- Have inaccurate or incomplete data corrected
- Have your data erased (“right to be forgotten”)
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting the lawfulness of prior processing
- Lodge a complaint with the Italian supervisory authority (Garante per la Protezione dei Dati Personali)
To exercise any of these rights, contact us at euro2007mail@gmail.com.
Cookies
We use cookies as described in the Cookie Policy. You can change your preferences at any time via the “Manage cookie preferences” link in the footer.
Updates to this policy
This Privacy Policy may be updated to reflect changes in the law or in how we operate. The “Last updated” date at the top will reflect any changes.