Privacy

Last updated 27 October 2026

Who is responsible

Three Second Studio is run by Giovanni Lavigna, Via Trieste 306, 87046 Montalto Uffugo (CS), Italy. I decide how the data below is used. You can reach me at gio@threesecondstudio.com.

If I emailed you about your brand's ads

I use your name, job title, company and work email address, plus public information about your brand's ads and reviews. Your address comes from the public page named in my email, such as your company website, a press page or an interview.

I use it to offer my ad production services to your company. The legal basis is legitimate interest under Article 6(1)(f) of the GDPR and of the UK GDPR, because the service relates to your job. I send at most three emails, and I don't track opens or clicks.

You can object at any time, without giving a reason. Reply "no" or write to gio@threesecondstudio.com and I'll stop. I then keep only your email address on a do-not-contact list, so that I never write to you again. If you don't reply at all, I delete your details three months after my last email.

If you're a client

I use your contact details, order details and the files you send to do the work, invoice you and meet my tax obligations. The legal bases are our contract and my legal obligations. I keep invoices and related records for as long as Italian tax law requires.

I make the videos with Higgsfield, an AI service. Its terms let it use uploaded files to improve its models, so I ask you before uploading your product photos or other files.

Who else handles your data

My email provider, Zoho, which stores mail in the EU. I keep the list of brands I write to in a spreadsheet on my own computer. I use Claude, an AI assistant made by Anthropic in the USA, to research brands and draft emails, with model training on my chats turned off. For client files I use Higgsfield, an AI video service based in the USA. This website is hosted by Cloudflare, also in the USA. For these transfers Cloudflare relies on its certification under the EU-U.S. Data Privacy Framework, and Anthropic and Higgsfield say in their privacy policies that they rely on adequacy decisions or the European Commission's Standard Contractual Clauses. I don't sell your details or share them with anyone else, and I don't make automated decisions about you.

Your rights

You can ask to see, correct or delete your data, ask me to limit how I use it, and object as described above. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali), to the UK Information Commissioner's Office, or to the authority where you live or work.

This website

No cookies, no analytics, no tracking. Fonts are served from this site. Cloudflare, which hosts it, sees your IP address to deliver the pages and protect the site.