Privacy policy

From the contact form: your name, email address, phone number if you choose to leave one, and the text of your message. Name, email and message are required, because without them we cannot reply; the phone number is optional. We also record the date it was sent and the language of the site, so we know which language to answer in.

From the server's technical logs: IP address, browser type and requested page. Our hosting provider keeps these for the security of the site and to defend it against attacks. We do not use them to profile you and we do not link them to your identity.

We do not process special categories of data, such as health, political opinions or religious beliefs: please do not include any in your message. We do not make automated decisions about you and we do not carry out profiling.

To answer a commercial enquiry, the basis is the performance of pre-contractual steps taken at your request: Article 6(1)(b) GDPR. If your enquiry is not commercial, the basis is our legitimate interest in replying to people who write to us: point (f).

For technical logs and site security: legitimate interest, point (f).

For third-party content and for any traffic measurement: your consent, point (a). You can withdraw it whenever you like from the "Cookie preferences" link at the foot of every page, and withdrawing it does not affect what was done beforehand.

Giving us your data is entirely your choice, but without a name, an email address and a message we have no way of replying.

Enquiries received through the form: 24 months from our last contact, then we delete them. If an enquiry leads to a business relationship, the related documents are kept for the ten years Italian law requires for accounting records.

The server's technical logs: a few days, according to the hosting provider's security settings.

The cookie that remembers your choices: six months, after which we ask you again.

To run the site we rely on three suppliers, which process data on our behalf as processors under Article 28 GDPR:

Cloudflare, Inc. — delivery, hosting and security of the site. Supabase, Inc. — the database where enquiries sent through the form are stored. Resend (Plus Five Five, Inc.) — sending the confirmation email to you and the notification to us.

Some of these suppliers are based, or hold infrastructure, outside the European Economic Area. Where that is the case the transfer relies on the Standard Contractual Clauses approved by the European Commission, as provided for by Article 46 GDPR.

Apart from them, only we see your data. We do not sell it, we do not pass it on and we do not use it to send you advertising.

The site sets a single cookie of its own, a technical one: it is called "dansifruit-consenso", it lasts six months and its only job is to remember the choices you make on this page, so that we do not have to ask you every time. It does not require your consent, because without it we would have no way of honouring a refusal.

We use no profiling or advertising cookies, and we share no data with advertising networks.

Google Maps, if and when you choose to load it, may set cookies of its own: see below.

The site loads nothing from third parties unless you ask for it. The "Contact" and "Our land" pages carry a Google Maps map that appears only once you have clicked "Load the map": until then no request is sent to Google. When you do load it, Google Ireland Limited receives your IP address and may use its own cookies, under its own terms.

The "Open in Google Maps" link is an ordinary link and loads nothing until you click it. Instagram and Facebook are plain links too: no like buttons, no embedded content, no tracking pixels.

No traffic analysis tool is currently active: we do not count visits and we do not know which pages you read. If we ever turn one on, we will ask you first with a notice and it will start only after you have accepted.

You may exercise the rights under Articles 15 to 22 GDPR at any time: to access the data concerning you and ask for a copy, to have it corrected if it is wrong, to have it erased, to ask for its restriction, to object to processing based on legitimate interest, and to receive the data you gave us in a machine-readable format in order to take it elsewhere.

Where processing is based on consent, you may withdraw it at any time without having to explain why.

To exercise them, write to the controller's email address given above: we will reply within one month, as Article 12 GDPR requires.

Do write to us first, it is usually the quickest route. But you have every right to go straight to the supervisory authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy — garante@gpdp.it — www.garanteprivacy.it. You may also apply to the courts.

If we change the way we process data, we update this page and change the date below. Last updated: 13 August 2026.