
Privacy Policy
With reference to the GDPR, Regulation (EU) 2016/679 on the protection of personal data,
in force throughout Europe since May 25, 2018.
This Application collects some Personal Data from its Users.
This document includes a section dedicated to Users in Switzerland and their privacy rights.
This document may be printed using the print command available in the settings of any browser.
Data Controller
Lorena Agnese Braneschi
Villadossola (Verbania)
Email: lorena.agnese.braneschi@gmail.com
Types of Data Collected
Among the Personal Data collected by this Application, either independently or through third parties, are: first name; last name; email; phone number; tracking data.
Full details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed before the Data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide such Data, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free not to provide such Data, without any consequences on the availability or operation of the Service.
Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies—or other tracking tools—by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy section.
The User assumes responsibility for any Personal Data of third parties obtained, published, or shared through this Application.
Method and Place of Data Processing
Italy
Processing Methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.
In addition to the Data Controller, in some cases, other parties involved in the organization of this Application (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data. These may also be appointed, if necessary, as Data Processors by the Data Controller.
The updated list of Data Processors may always be requested from the Data Controller.
Place
The Data is processed at the operational offices of the Data Controller and in any other place where the parties involved in the processing are located.
For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User may refer to the section concerning details on Personal Data processing.
Retention Period
Personal Data is retained for the time strictly necessary to achieve the purposes for which it was collected. In particular:
-
data collected via contact forms are retained for a maximum of 12 months
-
data related to contractual relationships or purchases are retained for 10 years, in compliance with legal obligations
-
data processed for marketing purposes are retained for a maximum of 24 months or until consent is withdrawn
-
browsing and analytics data are retained for the time required by the services used
-
technical and security data (logs) are retained for a maximum of 6 months
At the end of the retention periods, the data will be deleted or anonymized.
Purposes of Data Processing
User Data is collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Platform and hosting services and Contacting the User.
For detailed information on the purposes of processing and the Personal Data processed for each purpose, Users may refer to the section “Details on the processing of Personal Data.”
Details on the Processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Contacting the User
Contact form (this Application)
By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, bookings, or any other nature indicated by the form header.
Personal Data processed: last name, first name, email, phone number, browsing data.
Spam Protection
These services analyze traffic on this Website, which may contain Users’ Personal Data, in order to filter it from parts of traffic, messages, and content recognized as spam.
Analytics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.
Google Analytics (Google Ireland Limited)
Google Analytics is a web analysis service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other services developed by Google.
Google may use the data collected to contextualize and personalize ads within its advertising network and, if configured, may anonymize the IP address.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt-out.
Platform and Hosting Services
These services aim to host and run key components of this Application, making it possible to deliver this Application from a single platform.
These platforms provide the Data Controller with a wide range of tools such as analytics tools, user registration management, comment management, database management, e-commerce, payment processing, etc. The use of these tools involves the collection and processing of Personal Data.
Some of these services operate through servers located in different geographic locations, making it difficult to determine the exact location where Personal Data is stored.
Wix (Wix.com, Ltd.)
Wix is a platform provided by Wix.com, Ltd. that allows the Data Controller to develop, operate, and host this Application. Wix is an extremely versatile and customizable tool that allows hosting various types of websites, from simple blogs to complex e-commerce platforms.
Personal Data processed: last name; email; billing address; shipping address; payment information; first name; phone number.
Place of processing: Israel – Privacy Policy.
Hosting and Backend Infrastructure
These services have the function of hosting data and files that allow this Application to operate, enable its distribution, and provide a ready-to-use infrastructure to deliver specific features.
Displaying Content from External Platforms
These services allow viewing content hosted on external platforms directly from the pages of this Application and interacting with them.
Even if Users do not use the service, it may still collect traffic data relating to the pages where it is installed.
Google Maps (Google LLC)
Google Maps (accessible via https://www.google.com/maps) is a geographic mapping service provided by Google LLC that allows this Application to integrate such content into its pages.
This service may collect data even if the User does not directly interact with the map.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy.
The website may contain links or buttons redirecting to external platforms (e.g., WhatsApp, Telegram). Interaction with such services involves the collection and processing of data by the respective providers according to their privacy policies.
Further Information for Users
Legal Basis for Processing
The Data Controller processes Personal Data relating to the User if one of the following applies:
-
the User has given consent for one or more specific purposes
-
processing is necessary for the performance of a contract and/or pre-contractual measures
-
processing is necessary to comply with a legal obligation
-
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority
-
processing is necessary for the purposes of legitimate interests pursued by the Data Controller or a third party
Users may request clarification from the Data Controller regarding the specific legal basis of each processing activity.
Further Information on Retention Time
Unless otherwise stated, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained longer due to legal obligations or based on User consent.
User Rights under the GDPR
Users may exercise certain rights regarding their Data, including:
-
withdraw consent at any time
-
object to the processing of their Data
-
access their Data
-
verify and request rectification
-
obtain restriction of processing
-
obtain deletion of their Data
-
receive their Data and transfer it to another controller (data portability)
-
lodge a complaint with a supervisory authority
How to Exercise Rights
Requests can be sent to the Data Controller using the contact details provided in this document. Requests are free of charge and will be handled as soon as possible, in any case within one month.
Additional Information for Users in Switzerland
This section applies to Users in Switzerland and replaces any conflicting information.
Users have rights under Swiss data protection law, including:
-
right of access
-
right to object to processing
-
right to data portability
-
right to rectification
Additional Information on Processing
Legal Defense
Personal Data may be used for legal defense purposes in court.
System Logs and Maintenance
This Application and third-party services may collect system logs, including IP addresses.
Changes to This Privacy Policy
The Data Controller reserves the right to modify this privacy policy at any time by notifying Users on this page and, where possible, through the Application.
Users are encouraged to check this page regularly.
If changes affect processing based on consent, the Data Controller will collect consent again if required.
Last updated: April 1, 2026