Privacy and Cookie Policy
Last updated: 2 August 2026
This policy describes how CarrotStudio collects and processes the personal data of users who visit the website www.carrotstudio.it, use the contact form or communicate through the contact details indicated on the site.
Data processing is carried out in compliance with the Swiss Federal Act on Data Protection and, where applicable, with the European Union General Data Protection Regulation.
1. Data controller
The data controller is:
Mercaldi Matteo (CarrotStudio)
Switzerland
Email: info@carrotstudio.it
Phone: +41 76 425 00 78
For any questions regarding this policy or the processing of personal data, you may contact us using the details indicated above.
2. Personal data collected
CarrotStudio collects the data provided voluntarily by users and certain technical information generated during browsing.
Data submitted through the contact form
When a user uses the contact form, the following may be collected:
- name;
- email address;
- content of the message;
- any other information voluntarily included in the request.
The form requires only the data necessary to receive and handle the communication.
Users are asked not to include sensitive data or unnecessary information within the message.
Communications by email
When a user contacts CarrotStudio by email, the sender's address, the content of the communication and any data or documents voluntarily transmitted are processed.
Communications sent to the address info@carrotstudio.it are managed through Gmail, a service provided by Google.
Technical browsing data
During the visit to the site, the technical infrastructure and the services used for its operation may automatically process certain information, including:
- IP address;
- date and time of the request;
- page visited;
- browser type;
- device type and operating system;
- referring URL;
- technical data relating to the operation, security and any errors of the site.
This data may be contained in the technical logs of the infrastructure and is processed to deliver the site correctly, ensure its security, prevent abuse and detect technical problems.
3. Purposes of the processing
Personal data may be used to:
- respond to requests received through the form or by email;
- provide information about CarrotStudio's services;
- process quotation requests;
- assess possible projects or collaborations;
- take pre-contractual measures requested by the user;
- manage contractual relationships with clients;
- send communications relating to the requested services;
- ensure the operation and security of the site;
- prevent unauthorised access, abuse and harmful activities;
- analyse the use of the site and improve its content and performance;
- comply with legal obligations;
- protect the rights and legitimate interests of CarrotStudio.
Data received through the contact form or by email is not used to send newsletters or recurring promotional communications without a specific request or consent from the data subject.
4. Grounds and legal bases for the processing
Processing is carried out where it is necessary to:
- respond to a request from the user;
- take pre-contractual measures requested by the user;
- perform a contract;
- comply with a legal obligation;
- ensure the operation, security and improvement of the site;
- pursue a legitimate interest of CarrotStudio, in compliance with the rights of data subjects;
- manage activities for which the user has provided consent, where required.
Where processing is based on consent, the user may withdraw it at any time. Withdrawal does not affect the lawfulness of the processing carried out before the withdrawal.
5. Contact form and email management
The data entered in the form is used exclusively to receive, understand and handle the user's request.
Communications are forwarded to CarrotStudio's business email address and managed through Gmail, a service provided by Google.
Google may process the technical data and content necessary to provide the email service in accordance with its own terms and privacy policies.
CarrotStudio does not sell or use the content of the communications received for third-party advertising purposes.
6. Hosting and Vercel infrastructure
The site is hosted and delivered through Vercel.
Vercel provides the infrastructure necessary to make the site accessible, deliver content, handle network requests and contribute to the security and performance of the service.
During these operations, Vercel may process technical information such as:
- IP address;
- date and time of access;
- page or resource requested;
- browser and device information;
- diagnostic and security data.
The processing of this information is necessary to enable the technical operation of the site.
7. Google Analytics
The site uses Google Analytics to understand how the pages are viewed and to improve content, structure and performance.
Google Analytics may collect information such as:
- pages visited;
- duration and sequence of browsing;
- interactions with the site;
- approximate origin of the visit;
- browser and device type;
- operating system;
- approximate geographic area;
- session data.
Google Analytics normally uses first-party cookies, including cookies referable to the names _ga and _ga_<ID>, to distinguish users and sessions.
The collected data is used to produce statistics on the use of the site. CarrotStudio does not voluntarily enter into Google Analytics names, email addresses or other directly identifying information collected through the contact form.
Where required by applicable law, non-essential cookies and analytics features are activated only after the user's express choice through the cookie banner.
Users may change or withdraw their choice at any time through the cookie settings available on the site or through their browser settings.
8. Google Search Console
CarrotStudio uses Google Search Console to monitor the indexing of the site, identify technical problems and understand, in aggregate form, through which searches the pages appear in Google's results.
Search Console may display aggregated information, such as:
- search queries;
- number of impressions and clicks;
- average position in the results;
- country and type of device;
- indexing status of the pages;
- technical or security problems.
CarrotStudio does not use Search Console to directly identify individual visitors to the site.
9. PageSpeed Insights
CarrotStudio may use Google PageSpeed Insights to analyse the technical performance, accessibility and quality of the public pages of the site.
When a URL is submitted to the service, Google may analyse the publicly accessible resources of the page and return technical data and optimisation suggestions.
PageSpeed Insights is not used by CarrotStudio to collect names, email addresses or content submitted through the contact form.
10. Cookies
Cookies are small text files that may be stored on the user's device during browsing.
The site may use:
Technical cookies
These are necessary for the operation, security or management of the site's preferences.
Where strictly necessary, they may be used without the user's prior consent.
Analytics cookies
Google Analytics may use cookies to measure the use of the site and distinguish users and sessions.
Where required by applicable law, these cookies are set only after the user's consent.
Users may accept, refuse or change their preferences through the banner or the cookie management panel.
Users may also delete or block cookies through their browser settings. Disabling certain technical cookies may impair some functionality of the site.
For more detailed information about the cookies used, their purposes and their retention periods, users may consult the Cookie Policy available on the Site.
11. Providers and recipients of the data
Data may be processed by technical providers strictly necessary for the operation of the site and the management of communications, including:
- Vercel, for hosting, delivery, infrastructure and security;
- Google Analytics, for the site usage statistics;
- Google Search Console, for indexing and aggregated analysis of searches;
- Gmail, for the receipt and management of email communications.
Data may also be disclosed to advisers or authorities where necessary to comply with legal obligations, protect rights or manage any disputes.
CarrotStudio does not sell personal data and does not share it with third parties for independent marketing activities.
12. International transfers
Some providers used by CarrotStudio operate internationally and may process personal data in countries other than Switzerland.
Where data is processed in a country that does not ensure a level of protection considered adequate, the transfer takes place on the basis of the safeguards provided for by applicable law, such as recognised contractual clauses or other appropriate legal instruments.
Further information about the processing carried out by the individual providers is available in their respective privacy policies.
13. Data retention
Data is retained for the time necessary to achieve the purposes for which it was collected.
In particular:
- contact requests are retained for the time necessary to handle the communication and any developments of the request;
- data relating to clients and contracts is retained for the duration of the relationship and thereafter for the period required by legal, tax or administrative obligations;
- technical and security data is retained according to the periods set by the infrastructure providers;
- Google Analytics data is retained according to the settings configured in the relevant account;
- data may be retained for longer where necessary to establish, exercise or defend a right.
Data that is no longer necessary is erased or anonymised, unless legal obligations require otherwise.
14. Security
CarrotStudio adopts reasonable technical and organisational measures to protect personal data against:
- unauthorised access;
- loss;
- misuse;
- alteration;
- disclosure;
- accidental or unlawful destruction.
No system connected to the Internet can, however, guarantee absolute security.
15. Rights of data subjects
Within the limits provided for by applicable law, the user may request:
- information about the processing of their data;
- access to the personal data processed;
- rectification of inaccurate or incomplete data;
- erasure of the data;
- restriction of processing;
- objection to certain processing;
- delivery or portability of the data, where applicable;
- withdrawal of consent previously given.
To exercise these rights, you may write to: info@carrotstudio.it
CarrotStudio may request the information necessary to verify the identity of the applicant and prevent the data from being disclosed to unauthorised persons.
The data subject may also lodge a complaint with the competent data protection authority where they consider that the processing infringes applicable law.
16. Links to external sites
The site may contain links to sites or services operated by third parties.
CarrotStudio does not control the ways in which such parties process personal data. Before using an external service, users are advised to consult its privacy policy.
17. Changes to this policy
CarrotStudio may update this policy to reflect regulatory, technical or organisational changes.
The updated version is published on this page and shows the date of the last change at the top.
18. Contacts
For questions, requests or reports relating to the protection of personal data:
CarrotStudio
Switzerland
Email: info@carrotstudio.it
Phone: +41 76 425 00 78