Last updated: 2 November 2026
Privacy and cookies
This page explains how GAIRA Studio uses the information you share and how you can exercise your rights.
Data controller
Carla Falchi – EI, trading as GAIRA Studio, is the controller responsible for processing inquiries sent to the studio.
Contact: hello@gairastudio.com.
Information collected
The contact form collects your name, email address, the service you are interested in and your message. All four fields are required to send an inquiry. You can also contact us directly by email.
Please avoid including sensitive data or personal information about other people in your message.
The hosting provider may process technical information, including your IP address, request date and browser details, to keep the website available and secure.
Purposes and legal bases
Information submitted through the form is used to understand your project, respond to your inquiry and prepare a potential proposal. For service inquiries, processing is based on taking steps at your request before entering into a contract (Article 6(1)(b) of the GDPR).
Other correspondence and website security are based on GAIRA Studio's legitimate interests in handling incoming messages and protecting its service (Article 6(1)(f) of the GDPR). The form does not subscribe you to a newsletter or trigger automated advertising emails.
Recipients
Inquiries are intended for Carla Falchi. Technical providers process information within the scope of their services:
- Vercel hosts the website and handles the technical processing of the form.
- Resend (Plus Five Five, Inc.) delivers your message to GAIRA Studio's email inbox.
- GAIRA Studio's email service enables the receipt and follow-up of correspondence.
The website does not have a dedicated inquiry database: inquiries are sent by email. This does not prevent messages from being stored in the studio's mailbox or providers' technical logs.
International transfers
Vercel and Resend may process data outside the European Economic Area, including in the United States. Their processing agreements provide transfer safeguards, including the European Commission's Standard Contractual Clauses, subject to the terms applicable to each service.
Read the Vercel data processing agreement and Resend data processing agreement. You can request information about applicable safeguards at hello@gairastudio.com.
Retention
Correspondence is retained for as long as necessary to handle and follow up on your inquiry. Retention depends on the closure of the project or discussion, the need to retain evidence and applicable legal obligations. Information that is no longer needed should be deleted; a subsequent contractual relationship may require separate retention.
Providers also apply their own retention periods to logs and technical copies. Resend states that emails and logs are retained for 30 days on its Free, Pro and Scale plans. This is separate from the retention of messages in the studio's inbox. See Resend's security information.
Your rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure or restriction of processing of your data, and data portability where applicable. You may object to processing based on legitimate interests on grounds relating to your particular situation.
Send your request to hello@gairastudio.com. Identity verification may be necessary where there is reasonable doubt. A response must be provided within one month, with extensions permitted in the cases specified by the GDPR.
You may also lodge a complaint with the French data protection authority (CNIL).
Cookies and external links
The website's current code does not integrate advertising tools, marketing pixels or audience analytics scripts. The form does not store advertising preferences. Technical mechanisms needed for hosting and security may depend on Vercel's configuration.
Strictly necessary cookies may be exempt from consent requirements. Any addition of non-exempt trackers will require information and consent before activation. Read the CNIL's guidance.
The Instagram link opens an external service without embedding its content on this website. Once you open that service, its own privacy policy applies.