Salta al contenuto principale

Legal

Privacy Notice

Under Articles 13–14 of Regulation (EU) 2016/679 (GDPR), this notice explains how we collect, use and protect your personal data on casaegiardino.info.

Last updated: 2026-10-15

This privacy notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and describes how we process personal data of users browsing casaegiardino.info.

1. Data Controller

The Data Controller is Casa & Giardino arredamenti s.r.l., registered office at Via Campagnola, 8/10, 25080 Manerba del Garda (BS), Italia.
VAT / Tax Code: IT01569910985 — REA BS 322974 — Share capital € 700.000 i.v..

The Controller has not appointed a Data Protection Officer (DPO).

2. Categories of data collected

2.1 Data provided voluntarily

  • Contact / showroom booking form: first name, last name, email, phone, preferred date for the appointment.
  • Design Board (wishlist) submissions: first name, last name, email, phone, selected products, optional notes.
  • Newsletter subscription: email, name if provided, language, proof of the subscription and of the consents given (see section 5).

2.2 Data collected automatically

  • Browsing data (IP address, browser type, operating system, visited pages, timestamps).
  • Cookies and similar technologies (see Cookie Policy).

3. Purposes and legal bases

  • Replying to user requests (contacts, bookings, Design Board) — Art. 6(1)(b) GDPR (pre-contractual measures).
  • Legal, accounting and tax obligations — Art. 6(1)(c) GDPR.
  • Sending the newsletter — Art. 6(1)(a) GDPR and Art. 130 of the Italian Privacy Code (consent).
  • Measuring opens and clicks in newsletter emails — Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code (separate, optional consent).
  • Site usage statistics (analytics cookies) — Art. 6(1)(a) GDPR (consent).
  • Marketing, profiling, remarketing (marketing cookies / Meta Pixel) — Art. 6(1)(a) GDPR.
  • Site security and technical operation — Art. 6(1)(f) GDPR (legitimate interest).

4. Data retention

Data submitted through site forms is retained for a maximum of 24 months from the last contact, except where retention obligations under law (e.g. tax / accounting: 10 years) require a longer period. Cookie data is retained as described in the Cookie Policy. For the newsletter, see section 5.4.

5. Newsletter and email measurement

If you subscribe to the newsletter, we email you news about products, collections, projects and showroom events. We process your email address, your name if you provide it, your chosen language and proof of your subscription (date, time and IP address of the request and of the confirmation, together with the notice you were shown). The subscription only takes effect once you confirm it through the link we email you (double opt-in). Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 130 of Legislative Decree 196/2003). You can unsubscribe at any time using the link at the bottom of every email.

5.1 The provider

The newsletter is sent with SubitMail, the email platform of the agency crazyone / SubitOnline, appointed as data processor under Art. 28 GDPR. Emails are delivered through Amazon Simple Email Service (Amazon Web Services EMEA SARL) in the EU Frankfurt region (eu-central-1), Germany.

5.2 Measured emails

Emails may be "measured": they contain an invisible image and links that pass through the platform's servers before taking you to the destination page. When you open the email or click a link, the platform records the open, the link clicked, the date and time, your IP address and the email program or browser you use. We use this data to understand which content interests you and to improve future emails.

5.3 Only with a separate consent

We only measure opens and clicks if you have accepted it with a consent separate from the one to receive the newsletter, as required by the Italian Data Protection Authority in its guidelines on tracking pixels in emails (decision no. 284 of 17 April 2026). This consent is optional and the box is never pre-ticked: without it you receive the same emails, with no invisible image and with direct links. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of Legislative Decree 196/2003). You can withdraw it at any time through the "Ricevi le email senza tracciamento" link (receive emails without tracking) at the bottom of every measured email, and keep receiving the newsletter; from then on we no longer record opens or clicks, not even from emails you have already received.

5.4 Retention

Subscription data is kept for as long as you remain subscribed. Open and click data is kept for as long as needed to analyse how campaigns perform.

6. Recipients and processors

Data may be shared with the following processors (Art. 28 GDPR):

  • Convex Inc. (backend database) — USA, with Standard Contractual Clauses.
  • Amazon Web Services EMEA SARL (Amazon SES, confirmation and notification emails) — Frankfurt region, Germany, EU.
  • Aruba S.p.A. (fallback delivery of the same emails) — Italy, EU.
  • Hetzner Online GmbH (Next.js / Dokploy hosting) — Germany, EU.
  • Adobe Fonts (Parabolica web fonts) — Adobe Inc., USA.
  • Google LLC — Google Analytics and Google Maps, USA.
  • Meta Platforms Inc. — Meta Pixel for remarketing, USA.
  • SubitMail (email platform of the agency crazyone / SubitOnline, newsletter delivery and email measurement for those who accepted it) — delivery through Amazon SES, Frankfurt region (eu-central-1), Germany, EU.

7. International transfers

Some processors operate outside the EEA. Transfers are governed by Standard Contractual Clauses adopted by the EU Commission and/or applicable adequacy decisions, with supplementary technical and organisational measures where required.

8. Data subject rights

You may exercise the rights under Articles 15–22 GDPR by writing to sergio@casaegiardino.info:

  • access and copy of your data (Art. 15);
  • rectification (Art. 16);
  • erasure / right to be forgotten (Art. 17);
  • restriction (Art. 18);
  • portability (Art. 20);
  • objection to processing based on legitimate interest (Art. 21);
  • withdrawal of consent at any time, without prejudice to the lawfulness of prior processing.

You may also lodge a complaint with the Italian Data Protection Authority (Garante) or your local supervisory authority.

9. Security

We implement appropriate technical and organisational measures (TLS encryption, access controls, periodic backups, audit logging) to protect data from unauthorised access, loss or destruction (Art. 32 GDPR).

10. Changes to this notice

We may update this notice from time to time. The current version is always published on this page with the "Last updated" date.

Informativa sulla Privacy | Casa e Giardino