Data Controller

Personal data processed

This website collects personal data exclusively in the following circumstances:

• Contact form — name, email address and message text voluntarily entered by the user through the form on the Contacts page. Data is transmitted by email to the Data Controller and is not stored in the website database.
• Navigation data — the website's computer systems and software procedures automatically acquire, in the normal course of their operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (IP address, browser type, operating system, time of request). These data are used solely for anonymous statistical purposes and to monitor the correct functioning of the website.

Purposes and legal basis of processing

Personal data collected through the contact form are processed for the following purposes:

• Responding to contact requests — legal basis: performance of pre-contractual measures or consent of the data subject (Art. 6(1)(b) and (f) GDPR).
• Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).

Navigation data are processed for website security and technical management purposes, based on the legitimate interest of the Data Controller.

Retention period

Data transmitted through the contact form is retained in the Data Controller's email inbox for the time strictly necessary to process the request, and in any case no longer than 24 months from receipt.

Navigation data is deleted immediately after anonymous statistical processing.

Communication and disclosure of data

Personal data is not sold, transferred or disclosed to third parties, except where necessary to comply with legal obligations or to respond to the data subject's request.

The website uses the following third-party services which may process user data:

• Contact Form 7 (Automattic Inc.) — plugin for managing the contact form. Processes data entered in the form solely for the purpose of sending the email to the Data Controller. Privacy policy: automattic.com/privacy
• Google Analytics 4 (Google LLC) — website traffic analysis service, activated only with the user's prior consent. Collects anonymised navigation data (truncated IP). Data may be transferred to the United States in compliance with GDPR safeguards. Privacy policy: policies.google.com/privacy — Opt-out
• Google Search Console (Google LLC) — server-side monitoring tool; does not install cookies or collect user data.
• Google Maps (Google LLC) — used on the Contacts page to display the venue location. Loading the map involves the transmission of the user's IP address to Google. Privacy policy: policies.google.com/privacy

Cookie Policy

The website uses two categories of cookies:

• Technical cookies — necessary for the correct functioning of the website. They do not require consent pursuant to Art. 122 of Legislative Decree 196/2003.
• Analytical cookies (Google Analytics 4) — activated only with the user's explicit consent via the banner present on all pages of the website. In the absence of consent, no analytical cookie is installed.

The user may withdraw consent to analytical cookies at any time by returning to this page or through the browser. To globally disable Google Analytics, the following add-on is available: tools.google.com/dlpage/gaoptout

The typographic fonts used by the website (Cormorant Garamond and Josefin Sans) are hosted directly on the server and do not involve any transmission of data to Google or third parties.

Rights of the data subject

Pursuant to Arts. 15–22 of the GDPR, the data subject has the right to:

• obtain confirmation of the existence of personal data concerning them and access to its content (right of access);
• obtain the rectification of inaccurate or incomplete data (right to rectification);
• obtain the erasure of data (right to erasure);
• obtain restriction of processing (right to restriction);
• object to processing (right to object);
• receive their data in a structured format (right to data portability).

Requests may be sent to: info@ladanteorvieto.com

The data subject also has the right to lodge a complaint with the competent supervisory authority (Garante per la protezione dei dati personali — garanteprivacy.it).

Amendments to this notice

The Data Controller reserves the right to amend this notice at any time. Amendments will be published on this page with an updated date. We invite you to consult this page periodically.