Privacy Policy

Personal Data Processing Notice pursuant to Art. 13 of EU Regulation 2016/679

VIDEOMEGADRIVE S.r.l. (the “Data Controller”) regards the protection of Users’ personal data as a matter of fundamental importance and ensures that the processing of personal data collected is carried out in full compliance with EU Regulation 2016/679 (the General Data Protection Regulation, hereinafter “GDPR”) and any other applicable data protection legislation.

The term “personal data”, pursuant to Art. 4(1) of the GDPR, refers to “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (hereinafter “Personal Data”).

This Privacy Policy relates exclusively to the processing of data obtained through the use of the website https://videomegadrive.com/ (the “Site”), built on the Framer platform. The Site is a showcase/portfolio website: it does not contain contact forms, registration areas, or any field requiring the User to enter personal data. This Policy applies only to this Site and not to any other website the User may visit via external links.

Who will process the Personal Data?

Data Controller: VIDEOMEGADRIVE S.r.l.
Tax ID / VAT number: 12869340963
Registered office and local unit: Viale San Michele del Carso 12 – 20144 Milan, Italy
Phone: +39 02 49473305
Email: production@videomegadrive.com
Certified email (PEC): vmd@smart-cert.it

The contact details above are the ones the User may use to exercise the rights of control over the processing of their Personal Data under Articles 15-22 GDPR.

For what purpose, and on what legal basis, will the Personal Data be processed?

The Site does not knowingly collect any Personal Data from the User, as it contains no forms, registration fields, or other means of data entry. Any data that is processed is limited to the following:

a) Browsing data. Simply browsing the Site involves the automatic processing of certain technical data (e.g. IP address and browser characteristics) by the hosting infrastructure that hosts the Site (Framer), solely for the purpose of operating and securing the service. The Site uses only Framer’s built-in analytics tool, “Framer Analytics”, which does not use cookies or persistent identifiers and processes data in aggregated, anonymized form (the IP address is hashed using a key that resets daily): for this reason, no cookie banner is required. The Site does not use profiling cookies or third-party analytics tools (e.g. Google Analytics). Legal basis: the Controller’s legitimate interest in ensuring the Site functions properly and securely (Art. 6(1)(f) GDPR).

b) Voluntary contact. Should the User choose to contact the Controller via the email address or phone number listed on the Site, any Personal Data provided on that occasion (for example: first name, last name, email address, phone number, content of the communication) will be processed solely to respond to the request. Legal basis: performance of pre-contractual measures taken at the data subject’s request, and/or the Controller’s legitimate interest in responding to inquiries received (Art. 6(1)(b) and (f) GDPR).

Who may the Personal Data be disclosed to?

Technical browsing data is processed by Framer, Inc., as the provider of the Site’s hosting service. Any data provided through voluntary contact may be accessed by the Controller’s authorized staff and collaborators, as well as by any IT consultants engaged for the technical management of the Site, each within the scope of their respective duties. Data may also be disclosed to public or judicial authorities where required by law. A full list of authorized parties and data processors is available upon request from the Controller at the contact details above.

Is Personal Data transferred outside the European Union?

The hosting service provider (Framer, Inc.) is based in the United States. Any transfer of technical data to that non-EU country is carried out in compliance with the safeguards set out in Articles 46 et seq. GDPR, through the provider’s adoption of Standard Contractual Clauses approved by the European Commission. Further information is available in Framer’s own privacy statement: framer.com/legal/privacy-statement.

For how long will the Personal Data be processed?

Browsing data is retained by the hosting provider only for as long as is technically necessary to ensure the security and proper functioning of the Site, in accordance with the retention periods set out in Framer’s own privacy statement. Data provided through voluntary contact is retained for as long as necessary to respond to the request, and in any case for no longer than 6 months from the date of the request, unless retention is required to comply with a legal obligation.

What are the User’s rights?

The User has the right to request from the Controller, pursuant to Articles 15-22 GDPR, access to their Personal Data, its rectification or erasure, restriction of processing, data portability, and the right to object to processing. Such requests, as well as any other question relating to this Policy, may be sent to the Controller’s contact details listed above, together with a copy of a valid identity document for verification purposes.

Without prejudice to the right to seek redress through any other administrative or judicial remedy, the User has the right to lodge a complaint with the competent Data Protection Authority if they believe that the processing of their Personal Data by the Controller has been carried out in breach of the GDPR. In Italy, complaints may be lodged with the Garante per la protezione dei dati personali (see garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali).

Where and how is the Personal Data processed?

Data is processed using automated tools for the time strictly necessary to achieve the purposes described above. The Controller adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Art. 32 GDPR. Personal Data is not disclosed to the public, nor is it subject to any wholly automated decision-making process, including profiling.

Is the User obliged to provide Personal Data?

Browsing the Site does not require the User to provide any Personal Data. Providing Personal Data is therefore always optional and occurs only if the User voluntarily chooses to contact the Controller; in that case, failure to provide the necessary data (e.g. an email address) may make it impossible for the Controller to respond to the request.

This Privacy Policy may be updated from time to time to reflect regulatory or organizational changes; Users are invited to check this page periodically.
Last updated: 9 July 2026