Privacy

Who is responsible

The controller of your data is Metodo Covo S.r.l.s, the company that runs this site, with its registered office at Via San Rocco 50/D, 56021 Cascina (PI), Italy.

For anything about your data, write to info@metodocovo.com.

This notice is given under Article 13 of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).

When you write to us

The form on the Contact page asks for your name, your email address and a message, and for who you are: an artist, a brand, someone with an event, someone asking about the Alive beta, or someone saying hi. If another page of the site sent you to the form, the message also says which one.

We use these to read what you wrote and to answer you, and for nothing else. There is no newsletter, no marketing list and no profile.

The legal basis is Article 6(1)(b) of the GDPR where you are asking about work we might do for you (steps taken at your request before a contract), and otherwise our legitimate interest in answering the people who write to us (Article 6(1)(f)).

Giving us these details is your choice. Without a name and an address we cannot write back.

The form sends your message to our mailbox as an email. The site itself keeps no copy of it: it has no database.

We keep a message for as long as the conversation it starts goes on, and for no more than 24 months after the last message in it. If it leads to work together, what belongs to that work is kept for as long as contract and tax law require. The same goes for mail you send straight to our address.

When you take the Work with us test

The Work with us page is a test for anyone who would like to join the studio. It asks what you make, for links to your work and to what you made for the test, where the test took you and what you did there, the answer to its riddle, and your name and email address.

It starts by asking for your CV. The CV never leaves your device: the page draws its first page in your browser, shreds it there, and forgets it. Nothing of it is sent to us or kept.

While you take the test, your answers are kept in your browser, as the section on cookies says. They reach us only when you press Send, as one email to our mailbox, the same way the contact form's messages do. The site itself keeps no copy.

We use your application to get to know you and to answer you, and for nothing else. The legal basis is Article 6(1)(b) of the GDPR: steps taken at your request before a possible contract.

We keep an application for as long as the conversation it starts goes on, and for no more than 24 months after the last message in it.

Who else handles your message

• Resend, the service that delivers the emails the contact form and the Work with us test send, based in the United States. It receives each message in order to deliver it, and keeps its delivery records for a limited time.
• Aruba S.p.A., in Italy, which hosts the mailbox the message arrives in.
• Vercel Inc., based in the United States, which hosts this site and so carries what the forms send.

They handle the message on our behalf, as processors. Nobody else receives it: we do not sell personal data and we do not pass it on, unless a law or an authority obliges us to.

What the site records when you visit

• Server logs. Vercel, which serves the pages, records the technical details of each request (your IP address, the time, the page asked for, your browser's user agent) and keeps them for a limited time, to run the service and keep it secure.
• The limiters. When you send the contact form, try an answer to the Work with us riddle or send an application, your IP address is held in the server's memory, and only there, to count how many times one address has done so in the last ten minutes. It is not saved.

The basis for both is our legitimate interest in keeping the site running and safe from abuse (Article 6(1)(f) of the GDPR).

Cookies and tracking

This site sets no cookies. It runs no analytics, no advertising and no social media trackers, and it builds no profile of you. That is why you were not shown a cookie banner.

Two things can be kept in your browser. On the For Artists and For Brands pages, the tab remembers how far along the walk to the door you were, so that coming back to the page returns you to the same spot. It lives in the tab's session storage and is gone when you close the tab.

If you take the Work with us test, your browser's local storage keeps your answers, the phase you reached and whether you turned the sound off, so that you can leave and come back over several days. Nothing in it is sent anywhere until you press Send. It stays until you send your application or press Start over; after you send, only your name and the date stay, so that the page can show you what you sent. You can also clear it from your browser's settings at any time.

The typefaces are served by this site itself, not fetched from a font service.

Things that happen only if you start them

• Films. On the For Artists page, pressing play on a film loads YouTube's player from youtube-nocookie.com, its privacy-enhanced mode. Nothing is loaded from YouTube until you press play. From then on Google (Google Ireland Limited, for visitors in Europe) receives your IP address and handles the playback as a controller in its own right, under its own privacy policy.
• The microphone. On the Alive page you can let a sketch listen to your room. Your browser asks you first. The sound is measured on your device, to move the picture: it is not recorded, and it is not sent to us or to anyone else.
• The concert room. Stepping inside opens a connection to a server of ours, hosted on Oracle Cloud. You are anonymous there: the server gives each visitor a number and a colour, follows where your figure stands and the gestures it makes while you are connected, and forgets them when you leave. As with any connection, the server sees your IP address.
• Links out. The links to Instagram, Spotify, Apple Music, YouTube and our clients' own sites are ordinary links. Those sites learn nothing about you from this one until you follow a link, and what they do then is theirs to explain.

Where your data goes

Resend, Vercel, Oracle and Google are American companies and may process data in the United States. Where personal data leaves the European Economic Area, it does so under the safeguards the GDPR provides: the EU-US Data Privacy Framework for the companies certified under it, or the European Commission's Standard Contractual Clauses.

Your rights

You can ask us at any time for a copy of the data we hold about you, to have it corrected or deleted, to have its use restricted, to receive it in a portable form, or to object to our using it (Articles 15 to 22 of the GDPR). Write to info@metodocovo.com: we answer within one month, as the law requires.

If you think we have handled your data wrongly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority of the EU country you live in.

No decision about you is made by a machine here: there is no automated decision-making and no profiling.

Changes to this page

If what the site does with data changes, this page changes first, and the date at its top with it.