Privacy Policy

Data Controller

Types of data collected

This website does not collect personal data automatically. There are no contact forms, registration systems or tracking tools.

Personal data is provided voluntarily by the user exclusively via email. In such cases, the following may be processed:

Sender's email address; message content; any personal data voluntarily included by the user in the body of the communication (including, in the case of product orders, name, phone number and collection details).

Purpose of processing

Data is used exclusively to respond to user enquiries, manage informational communications relating to the association's activities, and process any product reservations and orders.

Legal basis

Processing is based on the implied consent of the user who contacts us voluntarily (Art. 6(1)(a) GDPR) and on the legitimate interest of the data controller in responding to received enquiries (Art. 6(1)(f) GDPR).

Hosting and technical data

The website is hosted on Aruba S.p.A. infrastructure (based in Italy), which may process technical data — such as IP addresses, request timestamps and browser type — necessary for the operation and security of the service.

Data retention

Data is retained for the time strictly necessary to handle the enquiry and to fulfil any legal obligations.

Disclosure to third parties

Data is not shared with third parties, except where required by law.

User rights

Under Articles 15–22 of the EU General Data Protection Regulation (GDPR), users may request: access to their data, rectification or deletion, restriction of or objection to processing, data portability, and withdrawal of consent at any time.

To exercise your rights: petras.petrellasalto@gmail.com

Changes

This privacy notice may be updated over time. The date of the last update is shown at the top of this page.