Privacy policy.
Last updated 21 August 2026
This policy explains what happens to personal data when you visit voxalta.it or write to us. It is short because this site does very little and uses no cookies. Most of what follows describes the small amount of technical data that any website unavoidably processes. One thing happens away from here: appointments are booked on a Cal.com page we link to, and section 3 explains what that involves.
1. Who is responsible
Vox Alta is a shared brand and not a separate legal entity. The two individual businesses behind it act as joint controllers under Article 26 GDPR:
- Elias Loi Visual Studio, VAT IT02732940461, Italy
- Morning Lights Studio di L.A., VAT IT02413580503, Italy
The essence of the arrangement between them: Elias Loi Visual Studio is the single point of contact for this website and handles every request concerning personal data, including the rights listed in section 9. You may nevertheless exercise your rights against either controller.
Write to ciao@voxalta.it for anything related to this policy. Full entity details are on the Impressum page.
2. When you email us
This site has no contact form. The contact links open your own email client, so nothing is collected until you decide to write. When you do, we process your email address, your name if you give it, and whatever the message contains.
Why: to read your message and reply, and to discuss, prepare or carry out a possible engagement.
Legal basis: Article 6(1)(b) GDPR where the exchange concerns a contract or steps taken at your request before entering one; Article 6(1)(f) GDPR, our legitimate interest in answering people who contact us, in every other case.
Who else is involved: our mailbox runs on Google Workspace, provided by Google Ireland Limited as our processor.
3. When you book a call
We use Cal.com to arrange appointments. The booking page is not part of this website and is not embedded in it: you reach it through a link, which we share in emails and in sales material.
When you open that page and confirm a slot, we receive your name, your email address, your time zone, the date and time you picked and anything you write in the booking notes. The appointment is then created in our calendar and confirmed by email.
Why: to agree on a time and hold the meeting.
Legal basis: Article 6(1)(b) GDPR for steps taken at your request before entering a contract; Article 6(1)(f) GDPR, our legitimate interest in organising meetings, in every other case.
Who else is involved: Cal.com, Inc. handles the booking on our behalf, as our processor. What happens while you are on their page is also covered by Cal.com's own privacy policy.
4. When you visit the site
These pages are hosted by Cloudflare. Delivering a page necessarily involves your IP address, browser user agent, the page requested and the time of the request. Cloudflare processes this as our processor, to serve the site and to protect it from abuse.
Legal basis: Article 6(1)(f) GDPR, our legitimate interest in operating and securing the website.
5. Audience measurement
We use Cloudflare Web Analytics to see how many people visit and which pages they read. It is cookieless: it does not store or read anything on your device, it does not assign a persistent identifier and it does not track you across other websites. What we see are aggregated counts, not individual profiles.
Legal basis: Article 6(1)(f) GDPR, our legitimate interest in knowing whether the site is read at all. Because nothing is stored on or read from your device, no consent banner is required.
6. What we do not do
- We do not use cookies. See the Cookie policy.
- We do not run advertising, retargeting or profiling of any kind.
- We do not build user profiles, and we take no automated decisions producing legal or similarly significant effects on you.
- We do not sell, rent or trade personal data.
7. Processors and transfers outside the EEA
We rely on three providers, all bound by data processing agreements:
- Cloudflare, Inc., United States, for hosting, security and audience measurement.
- Google Ireland Limited, Ireland, for our email and calendar, with processing that may involve Google LLC in the United States.
- Cal.com, Inc., United States, for appointment scheduling.
Personal data may therefore be processed outside the European Economic Area, in the United States. Those transfers rely on the safeguards offered by these providers, namely the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.
Beyond these providers, data may be disclosed to our professional advisors, or to public authorities where the law requires it.
8. How long we keep it
- Email correspondence: for as long as it takes to handle your request and, where it concerns work we actually carried out, for the period required by Italian civil and tax law. Correspondence that leads nowhere is deleted once it is no longer useful.
- Bookings: kept for as long as the meeting and its follow-up require, and deleted together with the correspondence they belong to.
- Technical logs and aggregated measurement: for the retention periods applied by Cloudflare, which are short and outside our control.
9. Your rights
Under Articles 15 to 22 GDPR you can ask us for access to your personal data, correction, erasure, restriction of processing or portability, and you can object to processing based on our legitimate interest. Write to ciao@voxalta.it and we will reply within one month.
If you believe we are handling your data improperly, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the authority of the EU country where you live.
10. Security
The site is served over HTTPS. No system is perfect, but the amount of personal data involved here is deliberately small.
11. Changes
This page describes what we do today, and the date at the top is the version you are reading. When the way we handle personal data changes, this page and the cookie policy are rewritten and the date changes with them.
Vox Alta · Elias Loi Visual Studio and Morning Lights Studio di L.A. · ciao@voxalta.it