1. Introduction & Scope
Troppo Caro (“we,” “us,” “our,” or the “Studio”), a specialized creative production and technology studio operating under PRG Media Company (“PRG,” “Company”), respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, process, disclose, and protect your information when you visit our website www.troppocaro.com (the “Site”), inspect our creative portfolio, submit project inquiries, or interact with studio representatives.
By accessing or using the Site, you acknowledge the terms set forth herein. If you do not agree with this policy, please discontinue use of the Site.
2. Information We Collect
We collect personal data across three core channels depending on how you engage with our studio:
2.1 Information You Provide Directly to Us
- •Contact Identity: Full name, corporate email address, telephone number, and company name.
- •Project Inquiries: Production briefs, budget estimates, aesthetic moodboards, and timelines.
- •Communications: Email threads, discovery meeting notes, and feedback submissions.
- •Billing Credentials: Invoicing information processed via secure financial providers for commissioned work.
2.2 Information Collected Automatically
- •Network Telemetry: IP address, device model, operating system, and browser engine.
- •Interaction Metrics: Pages viewed, reel watch duration, and referral URLs.
- •Approximate Region: Country and city-level geolocation estimated via IP addresses.
- •Session State: Essential session cookies for playback continuity and UI preferences.
2.3 Information from Third Parties
We may receive contextual engagement telemetry if you interact with Troppo Caro or PRG Media Company channels on external platforms (e.g., LinkedIn, Vimeo, Instagram, X), or through professional agency partner referrals.
3. How We Use Your Information
We use collected data solely to deliver superior creative experiences and fulfill client engagements:
- •Production Scoping: Reviewing briefs, architecting virtual production workflows, and scoping commercial proposals.
- •Client Service: Executing contracts, coordinating milestone deliverables, and administrative invoicing.
- •Platform Optimization: Optimizing ultra-high-definition video streaming delivery and global CDN caching.
- •Integrity & Compliance: Defending against cyber attacks, preventing fraud, and fulfilling statutory compliance.
4. Legal Basis for Processing (GDPR & UK GDPR)
Under European data protection laws, processing of your personal data is grounded in four explicit legal bases:
- •Contractual Performance: Necessary to draft statements of work, deliver commissioned productions, or evaluate requested proposals.
- •Legitimate Business Interests: Operating studio infrastructure, maintaining security, and presenting our creative portfolio to prospective clients.
- •Legal Obligations: Compliance with mandatory EU and member state tax, reporting, and accounting standards.
- •Explicit Consent: Applicable where you have willingly opted into optional communications or non-essential cookies.
5. Data Sharing & Third Parties
We do not sell, rent, trade, or monetize your personal data. Disclosures occur strictly within authorized channels:
- •PRG Media Company Affiliates: Internal coordination between creative units for joint productions and administrative management.
- •Vetted Service Providers: Trusted cloud hosts, edge CDNs, transactional email services, and enterprise security partners operating under binding confidentiality terms.
- •Professional Advisors: Legal, accounting, and insurance partners for risk mitigation and regulatory compliance.
- •Statutory Authorities: Law enforcement or judicial bodies solely when required by valid court order or statutory mandate.
6. Cookies & Tracking Technologies
The Site employs minimal technical cookies to provide reliable video playback and preserve interface settings:
- •Essential Operational Cookies: Mandatory for session persistence, CSRF security, and video player state memory across page transitions.
- •Performance Telemetry: Anonymized metrics regarding page loading latencies and CDN routing efficiency without personally identifiable tracking.
You can configure cookie settings via your browser preferences. Note that disabling essential cookies may degrade media streaming.
7. Data Retention & Archival
We retain personal information only for the duration necessary to fulfill the objectives described in this policy, satisfy contractual commitments, resolve potential legal disputes, and comply with statutory retention laws (e.g., tax records). When personal data reaches the conclusion of its retention lifecycle, it is either securely wiped or irreversibly anonymized.
8. Data Security Safeguards
We implement industry-standard organizational and technical measures engineered to preserve the confidentiality and integrity of your information:
- •Encryption: All communications are transmitted across 256-bit TLS/SSL encrypted channels.
- •Access Controls: Strict role-based permissions restricted to authorized studio personnel.
- •Continuous Monitoring: Continuous anomaly detection and automated security patching on edge hosts.
9. Your Global Privacy Rights
9.1 European Union & UK Rights (GDPR)
Residents of the EEA and United Kingdom enjoy recognized statutory rights:
- •Right of Access: Request a full copy of personal records held by the studio.
- •Right to Rectification: Demand prompt correction of inaccurate records.
- •Right to Erasure: Request permanent deletion (“right to be forgotten”).
- •Right to Portability: Receive your data in machine-readable JSON/CSV format.
- •Right to Object: Oppose processing rooted in legitimate business interests.
- •Supervisory Recourse: Lodge an inquiry with your national Data Protection Authority.
9.2 California Consumer Rights (CCPA / CPRA)
California residents hold specific protections regarding data categories and disclosure purposes:
- •Right to Know: Right to know specific categories of personal data collected and commercial rationale.
- •Right to Delete: Right to request deletion of personal information.
- •Non-Discrimination: Right to non-discrimination for exercising statutory privacy rights.
- •Notice of No-Sale: Troppo Caro does not sell or share personal consumer information.
10. International Data Transfers
Troppo Caro operates globally, serving commercial clients throughout the European Union, North America, and international markets. Consequently, information may be transferred to and hosted on secure infrastructure outside your jurisdiction. Whenever cross-border data transfers occur, we implement European Commission Standard Contractual Clauses (SCCs) to ensure equivalent data protection standards.
11. Children's Privacy Protection
The Site is directed exclusively toward working professionals and adult commercial entities. We do not knowingly solicit or collect personal information from individuals under sixteen (16) years of age. If you believe we have inadvertently collected information relating to a minor, please notify us immediately, and we will promptly expunge the data from active storage.
12. Third-Party Links & Embedded Media
The Site may display links or embedded media from external channels (such as Vimeo, YouTube, or social platforms). Troppo Caro holds no authority over the data policies of third-party domains. We advise reviewing their respective privacy statements before providing personal information.
13. Policy Modifications
We reserve the right to revise this Privacy Policy periodically to maintain alignment with evolving statutory mandates or studio workflows. Updated policies will be published on this page with a revised “Last Updated” timestamp. Continued engagement with the Site following amendments signifies acceptance of the revised terms.
14. Studio Contact & Data Inquiries
For questions regarding this policy, data subject requests, or studio privacy practices, please contact our legal team directly: