Last updated: 2026-05-05
This privacy notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and describes how we process personal data of users browsing casaegiardino.info.
1. Data Controller
The Data Controller is Casa & Giardino arredamenti s.r.l., registered office at Via Campagnola, 8/10, 25080 Manerba del Garda (BS), Italia.
VAT / Tax Code: IT01569910985 — REA BS 322974 — Share capital € 700.000 i.v..
- Email: sergio@casaegiardino.info
- Phone: +39 0365 551180
The Controller has not appointed a Data Protection Officer (DPO).
2. Categories of data collected
2.1 Data provided voluntarily
- Contact / showroom booking form: first name, last name, email, phone, preferred date for the appointment.
- Design Board (wishlist) submissions: first name, last name, email, phone, selected products, optional notes.
2.2 Data collected automatically
- Browsing data (IP address, browser type, operating system, visited pages, timestamps).
- Cookies and similar technologies (see Cookie Policy).
3. Purposes and legal bases
- Replying to user requests (contacts, bookings, Design Board) — Art. 6(1)(b) GDPR (pre-contractual measures).
- Legal, accounting and tax obligations — Art. 6(1)(c) GDPR.
- Site usage statistics (analytics cookies) — Art. 6(1)(a) GDPR (consent).
- Marketing, profiling, remarketing (marketing cookies / Meta Pixel) — Art. 6(1)(a) GDPR.
- Site security and technical operation — Art. 6(1)(f) GDPR (legitimate interest).
4. Data retention
Data submitted through site forms is retained for a maximum of 24 months from the last contact, except where retention obligations under law (e.g. tax / accounting: 10 years) require a longer period. Cookie data is retained as described in the Cookie Policy.
5. Recipients and processors
Data may be shared with the following processors (Art. 28 GDPR):
- Convex Inc. (backend database) — USA, with Standard Contractual Clauses.
- Resend / SMTP provider (transactional email) — EU/USA.
- Hetzner Online GmbH (Next.js / Dokploy hosting) — Germany, EU.
- Adobe Fonts (Parabolica web fonts) — Adobe Inc., USA.
- Google LLC — Google Analytics and Google Maps, USA.
- Meta Platforms Inc. — Meta Pixel for remarketing, USA.
- Newsletter provider (if enabled).
6. International transfers
Some processors operate outside the EEA. Transfers are governed by Standard Contractual Clauses adopted by the EU Commission and/or applicable adequacy decisions, with supplementary technical and organisational measures where required.
7. Data subject rights
You may exercise the rights under Articles 15–22 GDPR by writing to sergio@casaegiardino.info:
- access and copy of your data (Art. 15);
- rectification (Art. 16);
- erasure / right to be forgotten (Art. 17);
- restriction (Art. 18);
- portability (Art. 20);
- objection to processing based on legitimate interest (Art. 21);
- withdrawal of consent at any time, without prejudice to the lawfulness of prior processing.
You may also lodge a complaint with the Italian Data Protection Authority (Garante) or your local supervisory authority.
8. Security
We implement appropriate technical and organisational measures (TLS encryption, access controls, periodic backups, audit logging) to protect data from unauthorised access, loss or destruction (Art. 32 GDPR).
9. Changes to this notice
We may update this notice from time to time. The current version is always published on this page with the "Last updated" date.