Privacy Policy
Last updated: 26 August 2026
This Privacy Policy describes how QARYA SRL ("Qarya", "we", "us", "our") collects, uses and protects personal data when you visit qarya.studio and related subdomains (the "Site"), contact us, or use our intelligence services. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection law.
1. Data controller
The data controller is QARYA SRL, an Italian limited liability company. You can reach us for any privacy related request at hello@qarya.studio.
2. Personal data we collect
- Contact data. Name, business email, company name and the content of the message you send through our contact form or by email.
- Technical and usage data. IP address, browser and device type, referring page, pages viewed and interaction events, collected through cookies and similar technologies where you have consented.
- Business relationship data. Information exchanged during commercial discussions, contract negotiation and service delivery, including professional details of the people we work with at client organisations.
- Data processed within our services. When we deliver sales cycle, supply chain, market monitoring or due diligence intelligence, we may process professional information about companies and their representatives obtained from public sources, licensed databases or from our clients.
We do not intentionally collect special categories of data and we do not knowingly collect data from minors.
3. Why we process your data and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and contact requests | Steps prior to entering a contract, Art. 6(1)(b) GDPR |
| Providing and managing our services | Performance of a contract, Art. 6(1)(b) GDPR |
| Analytics and marketing cookies | Consent, Art. 6(1)(a) GDPR |
| Site security, fraud prevention and service improvement | Legitimate interest, Art. 6(1)(f) GDPR |
| Intelligence and due diligence activities on business actors | Legitimate interest of our clients and of Qarya in assessing counterparties, Art. 6(1)(f) GDPR |
| Accounting, tax and legal obligations | Legal obligation, Art. 6(1)(c) GDPR |
4. Cookies
The Site uses necessary cookies and, only with your consent, analytics and marketing cookies. Full details on each cookie, its provider and how to change your choices are available in our Cookie Policy.
5. Who we share data with
We share personal data only when necessary, with categories of recipients such as: hosting and infrastructure providers, email and CRM providers, analytics and marketing technology providers, professional advisors, and public authorities where required by law. External providers act as data processors under Art. 28 GDPR and are bound by written agreements. We never sell personal data.
6. International transfers
Some providers may process data outside the European Economic Area. In that case we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses, together with supplementary measures where appropriate.
7. Retention
- Contact form messages: up to 24 months from the last interaction.
- Client and contractual records: for the duration of the relationship and up to 10 years afterwards for accounting and legal purposes.
- Cookie consent records: up to 12 months, then consent is requested again.
- Analytics and marketing data: as defined by the relevant provider, generally no longer than 26 months.
8. Your rights
Under Articles 15 to 22 GDPR you have the right to access your data, to obtain rectification or erasure, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights write to hello@qarya.studio. We reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of your country of residence.
9. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls on a need to know basis, logging and periodic review of our providers.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in our activities or in applicable law. The date at the top of this page always indicates the latest version. Significant changes will be highlighted on the Site.
11. Contact
For any question about this Privacy Policy or about how we handle personal data, contact us at hello@qarya.studio.