Privacy Policy

1. Controller

Pentagon Studios des Max Schweitzer
Kreuzbichl 11, 39021 Latsch (BZ), Italy
VAT 03127560211
Email: info@pentagon-studios.com
Phone: +39 389 6320748

No data protection officer has been appointed, as the conditions of Art. 37 GDPR are not met.

2. Principle

We process personal data only as far as necessary to operate this website and to handle your enquiry. We do not sell data and do not pass it on to third parties for advertising purposes.

3. Visiting the website (server logs)

This website runs on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary connection data:

• truncated or full IP address
• date and time of access
• address requested, amount of data transferred, status code
• browser type, operating system and language

Purpose: delivering the site, operational security and defence against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning site).
Retention: Cloudflare usually keeps these logs for a few days.

Cloudflare may also process data outside the EU. Transfers are based on the EU Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework, to which Cloudflare has self-certified. We have concluded a data processing agreement with Cloudflare.

4. Contact form

When you write to us via the form, we process the details you provide: name, email address, optionally phone number and company, the chosen topic and your message.

Purpose: handling your enquiry and possibly initiating a working relationship.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and your consent under Art. 6(1)(a) GDPR, which you give in the form.
Retention: enquiries that do not lead to a project are deleted after 24 months at the latest. If a project results, the retention periods under Italian tax and commercial law apply (generally ten years).

Storage in Notion

Your enquiry is stored in our project management system at Notion Labs, Inc. (2300 Harrison St, San Francisco, CA 94110, USA). Notion is our processor under Art. 28 GDPR; a corresponding agreement including Standard Contractual Clauses is in place.

Spam protection with Cloudflare Turnstile

To prevent automated misuse of the form we use Cloudflare Turnstile. Technical characteristics of your browser and your IP address are transmitted to Cloudflare and evaluated there. Turnstile works without recognition cookies and without image puzzles.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against misuse). Turnstile is only loaded once you start filling in the form.

5. Videos via Cloudflare Stream

Our videos are hosted on Cloudflare Stream. The player only loads when you click play. Until then there is no connection to the video service. During playback your IP address and technical playback data are transmitted to Cloudflare.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting our work), triggered by your deliberate action.

6. Fonts

We use the licensed typeface "Adelle Sans" via Adobe Fonts (Adobe Inc., 345 Park Avenue, San Jose, CA 95110, USA). Loading the font transmits your IP address to Adobe. Adobe states that it does not use this data for profiling and does not set cookies.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent appearance). Adobe's licence terms do not permit us to serve the font from our own server.

7. Cookies and measurement

Without your consent we set no cookies for statistics or advertising. On your first visit we ask you via a banner. Your choice is stored locally in your browser (localStorage, key ps-consent) — this information never leaves your device.

Details on the individual categories are in the cookie policy. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out beforehand.

Google services (only with consent)

If you consent to the "Statistics" or "Marketing" categories, we load services from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — depending on configuration Google Analytics, Google Tag Manager and Google Ads. Cookies may be set and data transmitted to Google, including to the USA.

We use Google Consent Mode v2: as long as no consent has been given, storage for advertising and statistics is explicitly denied and the sharing of advertising data is suppressed.
Legal basis: Art. 6(1)(a) GDPR.

Meta services (only with consent)

If you consent to the "Marketing" category, we load the visitor action pixel from Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland) to measure whether our ads lead to enquiries. Meta and we are joint controllers under Art. 26 GDPR for the collection and transmission of this data.
Legal basis: Art. 6(1)(a) GDPR.

8. Recipients of your data

9. Your rights

Under the GDPR you have the following rights towards us:

• access to the data stored about you (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• objection to processing based on legitimate interests (Art. 21)
• withdrawal of consent with effect for the future (Art. 7(3))

Simply write to info@pentagon-studios.com. We reply within the statutory period of one month.

10. Right to lodge a complaint

You may lodge a complaint with a supervisory authority. In Italy this is:

Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Rome, Italy
garanteprivacy.it

11. No automated decision-making

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Changes

If our website or the legal situation changes, we will adapt this policy. The version published here applies.