1. Controller and contact details
The data controller is Fabio Fusco, operating under the Sound Director brand, with an address at Via dei Frentani, 100, 66100 Chieti. VAT no. 02819330693, Italian tax code FSCFBA94H14C632O. For information and to exercise your rights: info@sounddirector.it.
2. Data requested in the form
To assess your project, the form requests your full name, email address, service of interest (Sound Engineering, Light Design, Live Show — Audio & Lighting or Installation), location and project description. Phone number, company or venue, approximate date and budget are optional. Further information may be exchanged during follow-up contact to clarify your request.
Required fields are necessary to identify your request, respond and prepare a relevant quotation; the form cannot be submitted without them. Optional fields may be left blank. Please do not include unrelated information, particularly special categories of personal data under Article 9 GDPR, identity documents or third-party data unnecessary to handle your request.
3. Purposes and legal bases
Quote requests: Reading your message, contacting you, clarifying requirements and preparing a quotation. The legal basis is taking pre-contractual steps at your request (Article 6(1)(b) GDPR). Specific consent is not required for these purposes, as processing relies on that legal basis.
Company representatives: Where an individual acts on behalf of a company or other organisation, their name, professional contact details and role may be processed to handle the request and the relationship with that organisation. Where applicable, the legal basis is the controller’s legitimate interest (Article 6(1)(f) GDPR) in managing business enquiries and professional relationships, respecting individuals’ fundamental rights and freedoms.
Legal obligations and protection of rights: compliance with applicable legal obligations is based on Article 6(1)(c); retention strictly necessary for a dispute is based on the legitimate interest in protecting rights (point (f)). Requests are not retained indiscriminately for these purposes.
Follow-up contact directly related to the quotation request, its preparation, clarification or negotiation forms part of handling the request and any pre-contractual or contractual relationship.
4. Browsing and external services
The website is hosted by Aruba. Providing and securing the service may involve processing IP addresses, dates and times, requested resources, browser information and technical request outcomes. The basis is the legitimate interest in operating and securing the website, limited to necessary data. According to Aruba, hosting logs are retained for no longer than 6 months, subject to legal obligations or further legitimate retention needs.
Fonts are hosted on the website’s own server: browsing does not involve requests to external services to load fonts.
The website code reviewed contains no analytics tools, advertising pixels or operations that write cookies or local storage. This notice does not replace any specific cookie requirements if tools subject to such requirements are introduced.
To limit abusive submissions, the form temporarily uses an identifier derived from the IP address using a keyed hash, along with attempt timestamps. This technical data is stored in a private server file without form content; entries older than one hour are deleted on the next submission attempt. The form does not set cookies.
5. Processing methods and recipients
Request data will be handled using IT systems and email, with access limited to authorised people who need to respond to the project. It is not intended for publication. It may be processed by hosting, email and technical support providers necessary for the service, appointed as processors under Article 28 where applicable, or by entities acting as independent controllers for their respective purposes. Data may be disclosed to authorities where required by law.
Aruba provides hosting and the info@sounddirector.it mailbox. The form sends requests through the server’s mail service without storing their content in a website database. Requests may be forwarded to riccardo@sounddirector.it, fabio@sounddirector.it and simone@sounddirector.it, limited to authorised persons and the needs of handling the request. Aruba has confirmed that its appointment as processor under Article 28 GDPR is included in the service contract. Requests are managed exclusively by email, without a CRM or other platforms.. The website does not use automated decision-making, including profiling, that produces legal effects or similarly significantly affects the data subject.
6. Retention
If no contractual relationship is established, quotation requests that do not proceed will generally be retained for no more than 12 months after the last relevant contact, unless further retention is necessary to establish, exercise or defend a legal claim or is required by law.
If a contractual relationship is established, necessary data will be processed to perform the contract and meet relevant legal obligations, with periods to be defined in the documentation relating to that relationship. In the event of a dispute, only necessary data may be retained until it is resolved and for applicable time limits. Aruba has stated that no email backups are made for the service used. The security archive service is not active. Deletion of enquiries that do not lead to further engagement must also cover any forwarded copies and copies downloaded to devices managed by the controller. For ordinary email logs, Aruba has not provided a single retention period: availability and retention depend on the particular log type. Any telecommunications traffic data retained for statutory purposes is subject to the relevant rules and is not automatically subject to the hosting log retention period.
7. Transfers outside the EEA
According to the confirmation received from Aruba for the hosting and email services used, data is not transferred outside the European Union or accessible to third parties located in those countries. This confirmation covers the Aruba services reviewed. Any introduction of other providers or tools will require an assessment of transfers and, where necessary, safeguards under Articles 44 et seq. GDPR, and an update to this notice.
8. Your rights
In the cases and within the limits set out in Articles 15–22 GDPR, you may request access to your data, rectification, erasure and restriction of processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Portability applies to automated processing based on consent or contract where the relevant conditions are met. If any future processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing.
Write to info@sounddirector.it. The controller normally responds within one month; in complex cases this period may be extended by two months, with reasons communicated within the first month. Requests are normally free of charge; only information necessary to verify your identity may be requested.
You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority under Article 77, and seek a judicial remedy.
9. Updates
This notice will be updated when the requested data, purposes or providers change. The final notice must reflect the service’s actual operation, providers and processing arrangements. Last updated: 12 October 2026.