Last updated: September 18, 2025
This Privacy Policy describes how Omega Studio (hereinafter also “Omega Studio” or the “Controller”) processes the personal data of users, clients, prospective clients, suppliers, and applicants who interact with the website omega-studio.org (the “Website”) and with the professional services offered (3D surveys and scans, photogrammetry, drone mapping, 3D modeling, rendering, web and visual design, consultancy).
1. Controller identity and contact details
Controller: Camilla Sicignano
Tax code: SCGCLL93E62F704R
Phone: +44 7470753133
Privacy contact email: omegastudio3dscan@gmail.com
The Controller is established in the United Kingdom and processes personal data in accordance with both the EU General Data Protection Regulation (GDPR) and the UK GDPR and the Data Protection Act 2018.
2. How we collect data
We collect personal data in three main ways:
- Data provided directly by the user: form submissions, quote requests, emails, newsletter subscriptions, CV submissions.
- Data collected automatically: browsing data (IP address, logs, browser and device technical data), cookies, and analytics tools (activated only with consent).
- Data received from third parties: payment platforms, business partners, cloud and collaboration service providers.
3. Types of data processed
- Identification and contact details: name, surname, email, phone, company.
- Browsing data: IP address, device ID, browser, logs.
- Service/project-related data: images, videos, 3D datasets, point clouds, maps, geographic coordinates, technical documentation (which may incidentally include faces or license plates).
- Billing and payment data.
- Marketing and preference data: newsletter subscriptions, email interactions, events.
- Recruitment data: CVs, portfolios, references.
We do not intentionally process special categories of data (Art. 9 GDPR/UK GDPR). If exceptional circumstances arise, explicit consent will be requested.
4. Purposes and legal bases for processing
| Purpose | Legal basis |\n|———|————-|\n| Website browsing and security | Legitimate interest; legal obligation |\n| Managing requests and quotes | Performance of pre-contractual measures |\n| Service provision | Contract performance |\n| Administration and accounting | Legal obligation |\n| After-sales support | Contract/legitimate interest |\n| Direct marketing to clients | Legitimate interest (opt-out) |\n| Marketing based on consent | Consent |\n| Analytics (GA4) | Consent |\n| Recruitment (candidates/collaborators) | Pre-contractual measures |
5. Data sharing
We share data only with:
- IT providers, website hosting and maintenance;
- cloud platforms for storage/delivery of project files;
- legal, tax, and accounting consultants;
- communication and email marketing providers (if activated);
- analytics providers (Google Analytics 4, subject to consent);
- public authorities where required by law.
All providers are appointed as Processors (Art. 28 GDPR) or act as independent Controllers. An updated list is available upon request.
6. Data transfers outside the EEA and UK
Data may be transferred to third countries, particularly when using providers based in the USA (e.g., Google LLC). Such transfers take place based on:
- adequacy decisions by the European Commission and the UK Government;
- adherence to the EU-U.S. Data Privacy Framework and UK Extension (where applicable);
- Standard Contractual Clauses and supplementary measures.
7. Data retention periods
- Technical logs: 7–30 days.
- Contact/correspondence data: up to 24 months.
- Contract/project data: contract duration + 10 years.
- Marketing data: up to 24 months or until withdrawal.
- Analytics: GA4 retention max 14 months, only in aggregated form.
8. Your rights
Data subjects may request access, rectification, erasure, restriction, objection, portability, and withdraw consent.
- If you reside in the EU: you may contact the Garante per la Protezione dei Dati Personali or your national supervisory authority.
- If you reside in the UK: you may contact the Information Commissioner’s Office (ICO).
Requests and withdrawals should be sent to the Controller’s email: cami_iris@hotmail.it.
9. Marketing and communications
- Users may receive communications regarding services similar to those already purchased (“soft marketing”), with the possibility to opt out in every email.
- For all other marketing communications, explicit consent is required.
- Consent can always be withdrawn via the unsubscribe link or by contacting the Controller.
10. Cookies and tracking tools
The Website uses necessary technical cookies and, with consent, analytics cookies.
Google Analytics 4:
- Activated only with consent.
- Configured with IP anonymization, Consent Mode, retention max 14 months.
- Provider: Google Ireland Limited / Google LLC.
- Privacy Policy: https://policies.google.com/privacy
Users may change preferences through the banner or browser settings.
11. Surveying and drone services
When performing external or internal surveys, minimization measures are applied:
- planning of survey areas to reduce incidental capture;
- on-site notice where required;
- blurring of faces and license plates;
- restricted access to datasets.
12. Minors
The services are aimed at a professional/adult audience. We do not knowingly collect data from minors under 14 (EU) or 13 (UK). In case of unauthorized collection, such data will be deleted.
13. Updates
In case of substantial changes to this Policy, users will be informed through a Website notice and, if relevant, by email to active clients.
14. Contact
To exercise your rights or request clarification:
- Email: cami_iris@hotmail.it
- Phone: +44 7470753133