Privacy & Cookie Policy
Last updated: 21 September 2026
This Privacy and Cookie Policy explains how personal data is collected and used when you visit pirots.com. It is provided in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679).
Data Controller
SPACE HOLDING SAS di Pirotta Davide & Co. — Milan, Italy. VAT No. IT01855080196. Email: davide@pirots.com
What Data Is Collected
Technical data (automatic). When you visit this site, the hosting provider automatically records technical information such as your IP address, browser type, device type, referring page, and the date and time of your visit. This is standard server-log data, necessary to deliver the site and keep it secure.
Analytics data. This site uses Framer’s built-in, cookieless statistics and, only if you allow Analytics, Google Analytics to measure visits and page activity. Google Analytics can receive your IP address, page activity, approximate location and device/browser information. Its script is not loaded before consent, and advertising features are disabled.
Embedded video. Project films are hosted by YouTube (Google). Until you allow Video, the site displays a preview image hosted by Framer and does not load the YouTube player. Once you allow Video, the player loads from youtube-nocookie.com. YouTube may receive your IP address and device information and use cookies or similar storage, particularly when you play a film. If you are signed in to Google, your activity may be associated with your account. You can also choose to open the film directly on YouTube.
Direct contact. If you email the address above or reach out via the social profiles linked on this site, the personal data you choose to share (such as your name, email address, and the content of your message) is processed solely to reply to you and, where relevant, to discuss or carry out professional work.
No forms or accounts. This site does not include contact forms, accounts, newsletters, or e-commerce, and does not knowingly collect data from anyone under 16.
Legal Basis
Legitimate interest (Art. 6(1)(f) GDPR) — for technical server logs required to operate and secure the site, and for responding to enquiries you initiate.
Consent (Art. 6(1)(a) GDPR) — for Google Analytics and loading embedded YouTube players. These options are off until you accept them. You can withdraw either choice through Cookie settings at any time.
Contract or pre-contractual measures (Art. 6(1)(b) GDPR) — where correspondence concerns a possible or ongoing professional engagement.
Cookies
Essential. Site delivery and access protection may require technical storage. Your consent choices are saved on this device in local storage under pirots_privacy_v1 for six months. This records the policy version, your Analytics and Video choices, and the save and expiry times. If storage is unavailable, choices apply only to the current page session.
Analytics (Google Analytics). Optional, off by default. The _ga and _ga_* cookies measure visits and sessions after you consent. This site configures these cookies to expire after 180 days without renewal. Framer’s built-in statistics do not use cookies or persistent visitor identifiers.
Third-party video (YouTube). Optional, off by default. YouTube players load only after you allow Video. The privacy-enhanced player reduces some uses of viewing information but does not make YouTube anonymous or replace consent. Storage used by YouTube is controlled by Google and may vary according to playback and your Google account settings.
Use Reject all, Accept all or Customize in the banner. Closing the banner on your first visit rejects optional cookies. Analytics and Video can be selected separately. Open Policies in the footer, then use Cookie settings at the top of this page at any time to change or withdraw your choices. Withdrawing Video removes the players; withdrawing Analytics disables measurement, clears accessible Google Analytics cookies and reloads the page. Cookies already stored by YouTube on Google’s own domains can be removed in your browser settings. Refusing optional cookies does not prevent you from browsing this site.
Who Data Is Shared With
Personal data is not sold or traded. It is processed by the following providers acting as data processors or independent controllers: Framer B.V. (Netherlands, EU) — website hosting and delivery; Google Ireland Ltd. / Google LLC — Google Analytics and YouTube. Data may also be disclosed where required by law.
International Transfers
Google may process data outside the European Economic Area, including in the United States. Such transfers rely on the safeguards provided by Google, including the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
How Long Data Is Kept
Consent choices are retained on this device for six months. Google Analytics cookies are configured for 180 days; event-data retention is controlled separately in the Google Analytics property. Server-log retention is controlled by Framer for hosting, security and diagnostics. Email correspondence is retained as long as needed for the professional relationship and applicable legal or accounting obligations.
Your Rights
Under the GDPR you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, email davide@pirots.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or the supervisory authority in your country of residence.
Changes
This policy may be updated to reflect changes to the site or to legal requirements. The revision date at the top of this page indicates the most recent version.