Privacy Policy

Data Controller
The website contrabbandu.it is owned by Enrico Piga, who acts as the Data Controller of your personal data.

Controller details:
Piga Enrico – Via Muto di Gallura 3 – 07020 Aggius (SS), Italy – VAT 02840950907
Email: contrabbandu@gmail.com

We have adopted this Privacy Policy to explain how we process the information collected through contrabbandu.it and for what purposes. Please read this Privacy Policy carefully before using the site.

We are committed to protecting the confidentiality and security of your personal data.

Types of Data Processed

Browsing Data (Device Information)
When you visit contrabbandu.it, we automatically collect certain information about your device and browsing, including:

browser, IP address, time zone, installed cookies;
pages visited and products/content viewed;
referring site/search term;
how you interact with the site.

This information is collected for statistical and security purposes.

Data Voluntarily Provided
If you use site features (e.g., contact form, newsletter subscription if available), we may process the following data: name, surname, email, city/organization, telephone number, message content. In case of orders or future contractual relationships, we may process additional data (e.g., billing/shipping address, payment details managed through external providers).

Purposes and Legal Bases of Processing (Art. 6 GDPR)

We process personal data for the following purposes:

Site management and security (technical logs, abuse prevention) – legitimate interest of the Controller (Art. 6.1.f GDPR).
Responding to requests sent via form – pre-contractual or contractual measures (Art. 6.1.b GDPR).
Sending promotional communications/newsletters (if enabled and with consent) – consent (Art. 6.1.a GDPR).

Automatically collected data is also used for anonymous statistics and to detect potential abuse; it is not aggregated in a way that would identify individual users.

Provision of Data

You may visit the site without revealing your identity. However, if you wish to use the contact form or similar services, you will be asked to provide some personal data (at least email and message). Failure to provide such data may prevent us from delivering the requested service (e.g., we cannot reply to you).

Recipients and Service Providers (Data Processors)

For technical and organizational needs, we may rely on providers who process data on our behalf (Art. 28 GDPR), including:

Google (Google Sites / Google Apps Script / Google Workspace) for page hosting, form execution, and email forwarding;
Hosting provider (e.g., Hostinger), if applicable.

These providers process data under specific agreements and Standard Contractual Clauses (SCCs) when data is transferred outside the EEA.

Extra-EU Data Transfers

Some services (e.g., Google) may involve data transfers to non-EU countries (such as the USA or Canada). These transfers are based on SCCs or other appropriate safeguards required by EU law.

Data Retention

Contact data: as long as necessary to respond and manage your request and, if a contractual relationship arises, for the duration of the relationship and legal obligations.
Technical/log data: for limited periods compatible with security and maintenance purposes.
Newsletter/marketing: until consent is withdrawn.

Information Security

We implement appropriate technical and organizational measures to protect data against unauthorized access, use, or disclosure. However, no transmission over the Internet or wireless networks can be guaranteed to be completely secure.

Links to Third-Party Websites

Our site may contain links to third-party websites not operated by us. We are not responsible for the privacy practices of such websites. We encourage you to read the privacy statements of any website that may collect personal information.

Data Subject Rights (Chapter III GDPR)

You have the right to: be informed, access your data, rectify it, request erasure, request restriction, object to processing, obtain data portability, and not be subject to automated decision-making (including profiling), where applicable by law. To exercise these rights, please contact us at the details below. Rights are governed by Articles 15–22 GDPR.

Legal Basis Reference

The legal bases for processing are defined by Art. 6 GDPR (consent, contract, legal obligation, vital interests, public task, legitimate interest).
For extra-EU transfers, the EU provides the use of Standard Contractual Clauses (SCCs) as adequate safeguards.

Changes to this Policy

We may update this Privacy Policy periodically. Updates will be published on this page with a new “last updated” date.

Contacts

For any request concerning this Privacy Policy or to exercise your rights, you can write to:
contrabbandu@gmail.com

Data Controller:
Piga Enrico – Via Muto di Gallura 3 – 07020 Aggius (SS), Italy – VAT 02840950907

Cookies

This site may use technical cookies and, where applicable, analytical/profiling cookies. More details are available (or will be available) in the dedicated Cookie Policy.