Privacy policy
Last updated: 14 September 2026
Who we are
The controller of personal data collected through this website is Chimera Agency S.r.l. — To Be All Group, registered office at Via Valtellina 12, 20159 Milan, Italy, VAT number 13089060969, share capital € 10,000 fully paid up.
For anything concerning your data, write to chimeragency@legalmail.it.
What we collect
When you browse the site we collect nothing. We use no analytics tools, we don't profile visitors, we don't share data with advertising companies, and we don't load content from other websites: everything you see, images and typefaces included, comes from our own servers. Looking at the roster leaves no trace.
If you write to us through the contact form we collect your name, email address, the company you represent and your message, together with the talent or selection you were interested in. You provide this yourself, and we use it only to reply to you.
If you use the assistant we keep the text of the conversation: your questions and the assistant's answers, with the date. We don't ask for your name, email or phone number in order to talk to you, and we don't collect them anywhere: if you type them into a message they remain in the conversation text, so we recommend not entering personal data beyond what your question requires. We read conversations to answer better and to improve the service.
Alongside each contact message and each conversation we keep, for thirty days, an encrypted fingerprint of your network address. It is not the address itself: it is a code from which you cannot be identified, and it serves one purpose only, preventing the form and the assistant from being used for automated submissions. After thirty days it is deleted, while the request and the conversation remain.
Why we use it
Contact form data is used to answer your enquiry and to explore a possible collaboration: it is necessary to act on what you asked us.
Conversations with the assistant are used to provide the service you requested by using it, and to improve how it works, on the basis of our legitimate interest in offering a useful tool.
The network address fingerprint protects the form and the assistant from abuse, on the basis of our legitimate interest in keeping them working.
If a business relationship follows, the data needed to manage it is processed to perform the contract and to comply with related legal obligations, in particular tax obligations.
The assistant does not make decisions on our behalf. It gives you information and suggestions about our talent: every assessment concerning a collaboration is made by the agency's people.
How long we keep it
Contact requests are automatically deleted 24 months after they are closed.
Conversations with the assistant are automatically deleted after 12 months.
The network address fingerprint is deleted after 30 days.
Data linked to an active business relationship is kept for the period required by law, in particular tax law.
You can ask us to delete your data earlier at any time, and we will, unless a legal obligation requires us to keep it.
Who we share it with
We do not sell or transfer your data to anyone.
To run the website we rely on technical providers which process data on our behalf, as processors:
- a provider hosting the site, the database and file storage;
- the providers of the artificial intelligence models that process the messages exchanged with the assistant.
An up-to-date list of our processors is available on request, by writing to chimeragency@legalmail.it.
Where it is processed
The database and files are stored on servers located in the European Union, in Ireland.
The messages you exchange with the assistant are also processed in the United States. The infrastructure that routes them is located in the European Union, but processing takes place at United States providers. This transfer is covered by the Standard Contractual Clauses approved by the European Commission, which our provider has entered into with its own providers and which give you directly enforceable rights.
Conversation content is not used to train artificial intelligence models.
If you would rather your messages did not leave the European Union, do not use the assistant and write to us through the contact form: that data stays in Ireland.
Cookies and browser storage
This site uses no cookies, which is why you see no consent banner: there is nothing to consent to.
The only thing we store in your browser is the language you selected, so it is remembered on your next visit. You can clear it at any time from your browser settings.
Agency staff accessing the private area have their login session data stored, which is necessary to stay authenticated.
Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its use, receive it in a readable format, or object to its processing.
Write to chimeragency@legalmail.it: we reply within thirty days.
If you believe your data is being handled improperly, you can contact the Italian Data Protection Authority, www.garanteprivacy.it.
Changes
If we change this policy we will update the date at the top of the page. Previous versions remain available on request.