Privacy and cookies.

1. Data controller

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003 as amended. It covers the website kult-studios.com and the data we process when you contact us. It does not cover third-party websites you may reach through our links.

2. Data we process

• Browsing data. The servers hosting the site automatically record technical data (IP address, date and time of the request, page requested, browser and operating system) that are needed to deliver the site and keep it secure. We do not use them to identify or profile you.
• Data you send us. If you write to us by email or WhatsApp, or call us, we process the data you choose to share: name, email address, phone number, company, the content of your message and of your brief.
• The brief form. The form on the Contact page does not send anything to our servers: it composes the text inside your browser and you send it yourself, on WhatsApp or by email. We receive the data only when you choose to send that message.
• Academy applications. If you apply for the Academy we process your name, email, any portfolio or social profile you share and your message.

Please do not send us special categories of data (for example health data) unless strictly necessary. The site and our services are not intended for children under 14.

3. Purposes and legal bases

• Replying to your requests and preparing a proposal: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Carrying out production and training contracts (Art. 6(1)(b) GDPR).
• Meeting legal, tax and accounting obligations (Art. 6(1)(c) GDPR).
• Keeping the site secure and preventing abuse, and defending our rights in court: our legitimate interest (Art. 6(1)(f) GDPR).

We do not send newsletters or promotional messages without your consent, we do not profile you and we do not make decisions based solely on automated processing. Providing your data is optional, but without it we cannot reply to you.

4. Who receives the data

Your data are processed by authorised staff of Nahartes S.r.l. and may be shared with:

• providers that help us run the site and our communications (website hosting, email and work tools), appointed as data processors under Art. 28 GDPR;
• professionals bound by confidentiality, such as accountants and legal advisers, for legal obligations;
• public authorities, when required by law.

If you contact us on WhatsApp, that service is provided by WhatsApp Ireland Limited under its own privacy policy. We never sell your data or publish it.

5. Transfers outside the EU

Some providers may process data outside the European Economic Area, for example in the United States. In that case the transfer is based on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or on the standard contractual clauses approved by the Commission.

6. Retention

• Requests that don’t lead to a project: up to 24 months from the last contact.
• Contract, tax and accounting data: 10 years, as required by Italian law (Art. 2220 of the Civil Code).
• Browsing data: only for the time needed to keep the service secure, under the hosting provider’s policies.

7. Cookies and local storage

This site uses no profiling or analytics cookies and no third-party tracking tools. It only uses a technical item in your browser’s local storage (key kult-lang) to remember the language you chose: it stays on your device, is never sent to us and you can delete it from your browser settings at any time.

Fonts, scripts, images and videos are served directly by our site, so browsing it does not send requests to third-party servers. Because only technical tools are used, no consent banner is required (Italian Data Protection Authority, cookie guidelines of 10 June 2021).

Links to Instagram, TikTok, WhatsApp and Skool take you to third-party sites with their own policies. No content from these platforms is embedded in our pages.

8. Your rights

You can ask at any time to access your data, correct or erase it, restrict or object to its processing and receive it in a portable format (Articles 15–22 GDPR). Where processing is based on consent, you can withdraw it at any time. Write to info@kult-studios.com: we reply within one month.

If you believe your data are processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of the EU country where you live or work.

9. Changes

We may update this notice when our services or the law change. The date at the top of the page shows the latest version. See also our terms of use.