Skip to content
Home » Privacy Policy EN

Privacy Policy EN

Privacy Policy – Privacy Information Notice

In accordance with Regulation (EU) 2016/679 (GDPR)

1. Data Controller

The Data Controller of personal data is:
Il Giardino Segreto S.r.l.
P.IVA / C.F.: 06308840658
Numero REA: SA – 513654
PEC: giardinosegretosrl@pec.it
Email: ilgiardinosegretosrl@gmail.com
Registered Office: C.so Umberto I, 77, 84013 Cava de’ Tirreni (SA)
Telephone: +39 089340943

2. Types of Data Collected

Attraverso il sito ilgiardinosegretocava.it, vengono raccolti i seguenti dati personali:

  • Data voluntarily provided by users:
    • First name, last name, and email address through the contact form;
    • First name, last name, and email address for newsletter subscription;
    • First name, last name, email address, and telephone number through the event booking form.
  • Data collected automatically:
    • Browsing data (such as IP addresses, browser type, operating system, and pages visited);
    • Technical and profiling cookies (please refer to the Cookie Policy);
    • Analytical data collected through third-party tools (e.g., Google Analytics and Jetpack).

3. Purposes of Data Processing

Personal data are processed for the following purposes:

  • Responding to enquiries and requests submitted through the contact form;
  • Managing newsletter subscriptions and sending newsletters, updates, and promotional communications, subject to the data subject’s consent where required by law;
  • Managing and processing event booking requests;
  • Producing aggregated and anonymous statistical analyses relating to the use and traffic of the website; Fulfilling obligations imposed by applicable laws, regulations, and competent authorities.

4. Legal Basis for Data Processing

Personal data are processed on the basis of the following legal grounds:

  • The data subject’s consent, pursuant to Article 6(1)(a) of the GDPR, for newsletter subscriptions, contact requests, and event booking requests;
  • The performance of pre-contractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR;
  • Compliance with legal obligations to which the Data Controller is subject, pursuant to Article 6(1)(c) of the GDPR;
  • The legitimate interests pursued by the Data Controller, pursuant to Article 6(1)(f) of the GDPR, for ensuring the security, maintenance, and proper functioning of the website.

5. Methods of Data Processing

Personal data are processed by means of manual, electronic, and telematic tools, using procedures and methods strictly related to the purposes set out above. The Data Controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, safeguarding the confidentiality, integrity, and availability of personal data, and protecting them against unauthorised or unlawful processing, accidental loss, destruction, or damage.

6. Mandatory Nature of Data Provision

The provision of personal data is voluntary. However, failure to provide the data requested may prevent the Data Controller from responding to enquiries, processing event booking requests, managing newsletter subscriptions, or providing certain functionalities and services available through the website.

7. Data Retention

Personal data will be retained for the period necessary to fulfil the purposes for which they were collected and, in particular:

  • Personal data collected through contact forms and event booking requests will be retained for a maximum period of 24 months;
  • Personal data processed for newsletter subscriptions will be retained until the data subject withdraws their consent;
  • Statistical and analytical data will be retained in accordance with the retention periods established by the relevant third-party service providers (e.g., Google);
  • Any other personal data will be retained for the period required by applicable laws, regulations, or the fulfilment of legal obligations.

8. Recipients of Personal Data

Personal data may be disclosed, to the extent strictly necessary for the purposes set out above, to the following categories of recipients:

  • Employees and collaborators of the Data Controller who are authorised to process personal data;
  • Providers of technical, IT, and support services (including hosting providers, maintenance providers, and third-party software or plugin providers), appointed as Data Processors where required by law;
  • Public authorities, supervisory authorities, and other competent bodies, where disclosure is required pursuant to applicable laws or regulations.

Personal data will not be disclosed to the public and will not be transferred to countries outside the European Economic Area (EEA).

9. Rights of the Data Subject

As a data subject, pursuant to Articles 15 to 22 of the GDPR, you may exercise the following rights:

  • The right to access your personal data;
  • The right to rectification or erasure of your personal data;
  • The right to restriction of processing;
  • The right to data portability;
  • The right to object to the processing of your personal data;
  • The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out prior to such withdrawal;
  • The right to lodge a complaint with the competent supervisory authority, namely the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Requests relating to the exercise of these rights may be addressed to:
 ilgiardinosegretosrl@gmail.com

10. Protection of Minors

This website and its services are not intended for individuals under the age of 16. The Data Controller does not knowingly collect personal data from minors.

11. Cookies and Tracking Technologies

This website uses technical, analytical, and profiling cookies, as well as similar tracking technologies, in accordance with applicable data protection and electronic communications laws.

Users’ consent preferences are managed through the Quantcast Consent Management Platform (CMP), which displays a cookie banner upon the user’s first visit to the website and allows users to manage, modify, or withdraw their consent at any time.

For more detailed information regarding the cookies used, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

12. Changes to this Privacy Policy

The Data Controller reserves the right to amend, update, or modify this Privacy Policy at any time, including in response to changes in applicable laws and regulations, the services provided, or the methods used to process personal data.

Users are encouraged to review this Privacy Policy periodically to remain informed about how their personal data are processed and protected.

Last updated: 19 June 2026