Privacy policy

Privacy notice

This notice explains how Seven Stars processes personal data through this website and its related project pages. It is updated on April 15, 2026 and reflects the website's current setup: a bilingual showcase site, a contact form that submits directly to the site server, Google reCAPTCHA anti-spam verification, social links and Vimeo embeds activated only after user consent.

Go to Cookie policy

Controller

Seven Stars

VAT No. 05113450265

Last update

April 15, 2026

Current public version for the Seven Stars website.

Rights

Access, rectification, erasure, restriction, objection and complaint.

You can exercise them by contacting the controller.

Categories of personal data

Browsing data

When you visit the website, technical data such as IP address, timestamps, requested URLs, user agent, browser and device information and security logs may be processed to operate the site, prevent abuse and protect systems.

Contact data

The website form sends name, email address and message content to the site server so that Seven Stars can receive and manage the request at info@sevenstars.video. When anti-spam protection is enabled, the form also uses Google reCAPTCHA to verify that the submission comes from a real user and to prevent automated abuse. The data is processed only to answer the communication and any related follow-up, as well as to protect the service from spam and fraudulent attempts.

External service data

The website loads fonts from Google Fonts and, subject to user choice, may load embedded Vimeo content. When the contact form requires anti-spam verification, the website also loads Google reCAPTCHA, which may process technical data, interactions and risk signals under its own privacy notice. If the user clicks social links, Instagram and YouTube will process data under their own policies.

Privacy preference data

The website stores the user's cookie and external media preference through a necessary local technical tool so the banner is not shown again on every visit for a period of 6 months.

Purposes and legal bases

  • Website operation, security, abuse prevention and technical management of the cookie banner: controller's legitimate interest and technical necessity of the service.
  • Handling enquiries, contacts and potential pre-contractual steps voluntarily initiated by the user via email: performance of pre-contractual measures requested by the data subject and legitimate interest in managing professional contacts.
  • Protecting the contact form against spam, automated activity and abusive use through Google reCAPTCHA: the controller's legitimate interest in website security and service continuity.
  • Loading embedded Vimeo videos and other non-essential external tools: user consent.

Whether providing data is mandatory and what happens if you do not provide it

  • Browsing data and technical identifiers that are strictly necessary for the website to work are processed automatically while the service is being used.
  • Name, email address, message content and the anti-spam verification required by the contact form are necessary to send and manage an enquiry through the contact channel. If the user does not provide them or does not complete the anti-spam verification, the form cannot be submitted and Seven Stars cannot process the request.
  • Consent to optional external media, such as embedded Vimeo videos, is voluntary. Refusing consent does not prevent website browsing, but it keeps the external media blocked until the user changes the preference.

Recipients of the data

Data may be processed by technical providers involved in hosting the website, by email providers used to manage communications and, when the website loads external services or tools, by third parties such as Google and Vimeo. For reCAPTCHA-protected contact forms, Google acts as the technical anti-spam provider.

For Instagram and YouTube links, third-party processing begins only after the user clicks and is governed by the relevant platform's own policies.

Transfers outside the EEA

Some technical or media providers may process data outside the European Economic Area. For Google services used on this website, such as Google Fonts and Google reCAPTCHA, Google states that transfers may rely on the EU-U.S. Data Privacy Framework adequacy mechanism and on the additional safeguards described in its transfer documentation. For Vimeo, the provider states that it relies on Standard Contractual Clauses and, where applicable, also on the EU-U.S. Data Privacy Framework.

Users can review further details and the referenced safeguards directly in the providers' official notices: Google Privacy Policy, Google Data Transfer Frameworks, Vimeo Privacy Policy.

Retention periods

  • Technical data and security logs: up to 30 days, unless longer retention is needed for security investigations or legal defense.
  • Emails and requests voluntarily sent by the user: up to 24 months from the last contact, unless a longer period is required for contractual, tax or legal reasons.
  • Technical data and checks related to the anti-spam validation of the form: for the time strictly necessary to validate the request and according to the external provider's own policies.
  • Cookie and external media preference record: 6 months from the saved choice, unless changed earlier by the user.

Data subject rights

The data subject may request access, rectification, updating, erasure, restriction of processing, objection and portability where provided by law. The data subject may also withdraw consent for optional external media at any time.

The right to lodge a complaint with the Italian Data Protection Authority remains unaffected.