Cookie Policy

Last updated: 31 August 2026

This Cookie Policy describes the types of cookies and similar technologies (hereinafter, for brevity, "cookies") used by this website, the purposes for which they are used, and how the user can manage their preferences. It is drafted in accordance with Regulation (EU) 2016/679 ("GDPR"), Italian Legislative Decree 196/2003 (the "Privacy Code", as amended by Legislative Decree 101/2018), and the Guidelines on cookies and other tracking tools issued by the Italian Data Protection Authority (Garante per la protezione dei dati personali, 10 June 2021).

---

1. Data Controller

The Data Controller is:

• VisionFlow — video production studio, Milan, Italy
• VAT number (P.IVA): 14861030964
• E-mail: hello@visionflow.video

For any question regarding this Cookie Policy or the processing of personal data, you may write to the e-mail address above.

---

2. What cookies and similar technologies are

Cookies are small text files that websites store on the user's device (computer, tablet, smartphone) during browsing. The same rules apply to other similar technologies that allow information to be stored on or read from the device, including:

• the browser's local storage and session storage (local memory areas of the browser);
• pixels/web beacons, identifiers, and fingerprinting techniques.

Depending on their purpose, these tools are divided into technical cookies (necessary for the site to function) and profiling/tracking cookies (which monitor the user and analyse their behaviour). The latter may be installed only with the user's prior consent.

Cookies may also be first-party (set directly by this site) or third-party (set by domains other than the site's).

---

3. What the site stores on your device

We want to be transparent: this site uses analytics cookies (Google Analytics 4 and Yandex Metrica) — but only after your consent. No profiling or marketing cookies are present.

Before consent is given, only strictly technical items are stored on your device:

• the local storage entry vf-consent — your choice per cookie category and the date of that choice, so the banner does not reappear on every visit;
• the session cookie NEXT_LOCALE — the interface language you selected; it is deleted when the browser closes;

These items collect no data for profiling purposes, do not track you across other sites and require no consent, as they are strictly necessary for the site to work.

Once you press "Accept", Google Analytics 4 and Yandex Metrica cookies are added — they are listed in the table in section 5.

---

4. Categories of cookies and technologies

4.1 Technical / necessary cookies (no consent required)

They are necessary for the site to work properly and to provide the services you request. No consent is required under Art. 122 of the Italian Privacy Code and the Garante's Guidelines. This category covers:

• storing your cookie choice (vf-consent);
• the interface language preference (NEXT_LOCALE);
• any technical cookies/entries needed for security and stability.

These cookies are always active: without them the site cannot remember your cookie choice or your interface language. The analytics cookies in section 4.2 load only after consent.

4.2 Analytics / statistical cookies (active after consent)

These are used to collect information, in aggregate form, about the number of visitors and how they use the site.

• Under the Garante's Guidelines, analytics tools may be treated as technical cookies (and therefore not require consent) only if suitably anonymised — for example, by masking significant portions of the IP address, without cross-referencing other data and without transmission to third parties who use it for their own purposes.
• Analytics tools that are not anonymised, or comparable to profiling, require prior consent.

Two analytics tools operate on this site — Google Analytics 4 and Yandex Metrica. Both are non-anonymised and therefore require prior consent: their scripts load only after "Accept" is pressed. Declining does not restrict use of the site in any way. Further details in the Google and Yandex privacy policies.

4.3 Profiling / marketing cookies (currently NOT active)

These are used to build user profiles and deliver advertising in line with the user's preferences, including on other sites. They always require the user's prior, free, specific, and revocable consent.

No profiling or marketing cookie is active on this site (no Meta/Facebook pixel, no advertising platform, no remarketing). Analytics cookies are described in section 4.2.

---

5. Cookies and technologies actually used on this site

---

6. The banner and consent management

When you first visit the site, a cookie banner is shown. It is a genuine consent mechanism: no analytics script loads before you choose, and only technical/necessary items are active in the meantime. Your choice and its date are recorded in the vf-consent entry.

In line with the Garante's Guidelines, the banner:

• shows the "Accept all" and "Reject all" buttons with equal prominence;
• lets you refuse every non-necessary cookie in a single click;
• does not treat scrolling or pre-ticked boxes as consent;
• offers a choice by category (the "Customise" button).

Changing or withdrawing your choice. You can withdraw your consent at any time, as easily as you gave it, through the "Cookie settings" link at the bottom of every page: it reopens the banner. Your choice is also cleared if you delete the site's data in your browser (see section 7).

Withdrawing consent does not affect the lawfulness of processing based on consent given before its withdrawal.

---

7. Managing cookies in your browser

The user can manage, restrict, or disable cookies and clear local storage directly from their browser settings. Below are references to the official guides:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Microsoft Edge: Settings → Cookies and site permissions
• Apple Safari: Preferences → Privacy
• Safari iOS / Chrome Android: Device settings → browser section

Disabling technical/necessary cookies may impair some site functions (e.g. remembering the language or the choice on the notice).

---

8. Third-party services and providers

Apart from the analytics tools described in section 4.2, which load only after your consent, the site integrates no third-party tracking or advertising services: no social plugins, no embedded maps, no third-party video embeds with tracking, no advertising platforms.

Data is processed on our behalf by the following processors (Art. 28 GDPR):

• Cloudflare, Inc. (the Cloudflare Workers platform) — website hosting; handles access logs for technical and security purposes;
• Resend — the e-mail delivery service through which the form message is sent to the studio;
• Apple (iCloud Mail) — provider of the studio's mailbox hello@visionflow.video, where the messages received are stored;
• Telegram — the messaging service that receives a notification about each new enquiry containing the data entered in the form.

Google (Google Analytics 4) and Yandex (Yandex Metrica) load only after consent and, as regards their own analytics infrastructure, act as independent controllers: they also process data for their own purposes under their policies, while we receive aggregate reports only.

Apart from the analytics cookies listed in the table in section 5, these providers do not set tracking cookies through the site.

---

9. Data transfers to countries outside the EU/EEA

The hosting service, the e-mail delivery service, the studio's mailbox, the notification service and the analytics tools may process data outside the European Union / European Economic Area. Where this happens, the transfer takes place under Arts. 44–49 GDPR on the basis of appropriate safeguards under Art. 46 (for example the Standard Contractual Clauses — SCCs adopted by the European Commission) and/or adequacy decisions.

The transfer terms applied by the analytics services are published in their own policies: Google and Yandex. The terms of the other providers are set out in their respective privacy policies.

---

10. Where to find the Privacy Policy

The processing of personal data collected through the site (in particular through the contact form: name, e-mail, project type, budget, timeline, message, and consent) is described in detail in the Privacy Policy, available on this site: https://visionflow.video/en/privacy.

---

11. Data subject rights and complaints

You may exercise the rights under Arts. 15–22 GDPR (access, rectification, erasure, restriction, objection, portability) at any time by writing to hello@visionflow.video.

Consent to analytics cookies can be withdrawn at any time (Art. 7(3) GDPR), as easily as it was given: through the "Cookie settings" link at the bottom of every page (see section 6).

If you believe the processing infringes applicable law, you have the right to lodge a complaint with the competent supervisory authority:

• Garante per la protezione dei dati personali (the Italian Data Protection Authority) — Piazza Venezia 11, 00187 Rome, Italy — www.garanteprivacy.it

---

12. Changes to this Cookie Policy

The Controller reserves the right to update this Policy to reflect changes in the law or in technical arrangements (for example, if new tools are introduced). Changes will be published on this page together with the last updated date. Non-technical cookies load only after prior consent — this applies both to the analytics already in use and to any new tool.

---

13. Contact

For any request concerning cookies and personal data:

• VisionFlow
• E-mail: hello@visionflow.video
• Milan, Italy