Privacy policy
What data we collect through the site, why, where it goes and for how long. In plain words.
Who handles your data
The data controller is DEMA Studio. For any question about your data, or to exercise your rights, write to:
Contact form
We collect what you write in the form: name, company, email, phone number if you leave it, the type of request, budget, timeline and your message.
We use it only to reply to you and, if you ask, to prepare a proposal. The legal basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). We do not use it for newsletters and we do not pass it on to anyone.
Your request goes into our client management system, on a server located in the European Union. A backup copy stays on Cloudflare and is deleted within 30 days.
We keep it for as long as we need to follow up on your request. If no collaboration starts, we delete it within 24 months of the last contact. If it does, we keep it for the length of the relationship and for the periods required by law, for example 10 years for tax records.
Dema AI, the site chat
What you type in the chat is sent to Google (Vertex AI), which generates the reply and processes the data on our behalf as a processor. The conversation is not saved on our servers: it stays in your browser and disappears when you close the tab.
To prevent abuse we count how many messages arrive from each connection. We do not store your IP address: we keep only an encrypted fingerprint, from which the address cannot be recovered, and delete it after 2 days. The legal basis is our legitimate interest in offering the chat and protecting it (Art. 6(1)(f) GDPR).
Replies are generated by AI and may contain mistakes. Please do not type personal data or sensitive information in the chat.
If you message us on WhatsApp from the site buttons, the conversation goes through WhatsApp (Meta) and is also subject to its privacy rules. For clicks on the link we only count how many visits come from each source, for example Instagram, with no data about who clicked.
Browsing, hosting and cookies
The site is hosted on Cloudflare, which processes the IP address and technical data of each request to run and protect the site, like any web server.
We do not use profiling cookies or third party analytics. In your browser we only store the language you choose and your conversation with Dema AI: they make the site work and do not track you. Cloudflare may use technical security cookies.
Data outside the European Union
Cloudflare, Google and Meta are US companies: some data may be processed outside the European Union, under the safeguards provided by the GDPR, namely the EU-US Data Privacy Framework and standard contractual clauses.
Your rights
You can ask us at any time to see your data, correct it, delete it, restrict its use, object to its processing or receive it in a readable format (Articles 15 to 22 GDPR). One email is enough: we reply within a month.
Last updated: 8 October 2026