privacy
Privacy policy
This site is a lookbook. It has no accounts, no comments and no shop; the only thing you can sign up for is a monthly email, described below. So there is little to say here. What there is, is below.
Who is responsible
The data controller is Woobik Studio (Woobik di Silva Cordeiro Pedro Henrique), Via Barberini 54, 61040 Monte Porzio (PU), Italy, VAT no. IT02692610419. You can reach the controller at hello@dahliaferrante.com.
What we collect, and why
Server logs. Like every web server, ours records each request: the IP address, the date and time, the page requested, the browser's user-agent string and the referring page. These logs are kept for 30 days and used only to keep the site running and secure (legal basis: our legitimate interest in security and error diagnosis, art. 6(1)(f) GDPR). They are deleted automatically after that.
Email. If you write to hello@dahliaferrante.com, we process your email address, your name if you give it, and whatever you tell us, in order to answer you (legal basis: the steps you asked us to take, art. 6(1)(b), or our legitimate interest in answering, art. 6(1)(f)). Correspondence is kept while the matter is open and for up to 12 months afterwards, unless a legal obligation requires longer.
Shop links. Some looks list "similar pieces": links to third-party shops that may earn us a commission. They are marked as sponsored, and once you are on the shop's site its own privacy policy applies. When you follow one of these links we add one to a counter for that link and that day, so we know which pieces people care about. That is the whole record: no IP address, no cookie, no profile, and nothing is passed to the shop about you.
The edit. If you subscribe to the monthly email we store your address and the moment you confirmed it, on our own server, in our own mailing software; nothing goes to a third-party mailing service. Double opt-in: nothing is sent until you click the confirmation link, and if you never click it the address is kept as unconfirmed and then removed. Issues carry no open or click tracking. Every issue has an unsubscribe link, and unsubscribing, or writing to hello@dahliaferrante.com, removes the address. Legal basis: your consent, art. 6(1)(a) GDPR, which you can withdraw at any time. The sign-up form has a rate limit per address (a hashed, hourly counter, discarded after an hour) so it cannot be abused.
Nothing else. No account system, no comment section and no contact form.
Cookies and third parties
By default this site sets no cookies and loads nothing from anyone else. Fonts, images and video come from our own server; no content delivery network, no profiling, no advertising network, no social buttons that phone home.
On your first visit a small banner asks whether we may use two optional services, described below. Nothing is loaded until you say yes. Refusing is one click and costs you nothing, and if your browser sends a Global Privacy Control or Do Not Track signal we take that as a no and do not even ask. Your answer is kept in a single first-party cookie, df_consent, which holds nothing but the answer itself and expires after six months. You can change it at any time through the "cookies" link in the footer.
Analytics, only with your consent. Google Analytics 4, provided by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland), tells us how many people visit, which pages they look at and roughly which country they come from. Google Signals and all advertising features are switched off and IP addresses are not stored. The service sets cookies under this domain (_ga and _ga_*, up to two years) and may process the data on servers in the United States under the EU-US Data Privacy Framework. Legal basis: your consent, art. 6(1)(a) GDPR. What Google does with the data is governed by Google's own privacy policy.
Marketing, only with your consent. The Pinterest Tag, provided by Pinterest Europe Ltd (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland), lets Pinterest attribute to this site the visits that arrive from Pinterest. It may set cookies and local storage under Pinterest's domain, and Pinterest processes that data as an independent controller under its own privacy policy. Legal basis: your consent, art. 6(1)(a) GDPR.
Any content blocker can block both services without breaking the site.
Where the data lives
The site and its email are hosted on a server in Germany operated by the studio and rented from Hetzner Online GmbH (Gunzenhausen, Germany). We transfer no data outside the European Economic Area ourselves. Google and Pinterest may transfer the data their tools collect, with your consent, to the United States under the EU-US Data Privacy Framework and standard contractual clauses, as set out in their policies.
Your rights
Under the GDPR you can ask for access to the personal data we hold about you, have it corrected or erased, restrict or object to its processing, and receive it in a portable format. Where processing rests on consent, you can withdraw it at any time. To exercise any of these rights, write to hello@dahliaferrante.com. You also have the right to lodge a complaint with a supervisory authority; in Italy that is the Garante per la protezione dei dati personali.
Children
This site is not directed at children and we knowingly collect no data from anyone under 16.
Changes
If something changes, this page changes with it. The date at the top tells you when.