Privacy Policy
1. Data Controller
The Data Controller responsible for processing your personal data is:
- Davide Semprini (natural person)
- Tax code: SMPDVD70E06H657Y
- Domicile: Cecchini di Pasiano, Pordenone, Italy
- Contact email: hello@la-venice.com
No Data Protection Officer (DPO) has been appointed as the appointment is not mandatory under Art. 37 GDPR for the current scale and nature of processing.
2. Types of Data Collected
2.1 Data provided through the contact form
When you fill in the contact form, the following data may be collected:
- Name and surname
- Email address
- Company / organization (optional)
- Role / title (optional)
- Project type, location, timing (optional qualifying fields)
- Free-text message
2.2 Navigation data
The site uses Google Analytics 4 (measurement ID G-YD1J4P0V1C) with IP anonymization enabled. Analytics cookies are activated only after your explicit consent via the cookie banner (see Cookie Policy).
2.3 Technical cookies
A single technical cookie (localStorage entry cookieConsent) is used to remember your consent preference. This cookie is necessary for the functioning of the site and does not require consent.
3. Purposes of Processing and Legal Basis
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Reply to contact form submissions and pre-contractual measures | Art. 6(1)(b) — pre-contractual steps at request of the data subject |
| Google Analytics — audience insights | Art. 6(1)(a) — explicit consent |
| Legal obligations, defence of rights | Art. 6(1)(c) and 6(1)(f) |
4. Retention Period
- Contact form data: retained for the duration of the correspondence and up to 24 months from the last contact, unless a business relationship is initiated (in which case retention follows contractual obligations).
- Google Analytics data: retained for 14 months (GA4 default) in anonymized/aggregated form.
- Consent records: retained for 12 months, at which point renewal of consent is requested.
5. Recipients and Data Processors
Personal data may be shared with the following categories of recipients, appointed as Data Processors under Art. 28 GDPR:
- Netlify Inc. — hosting provider (USA, adequacy decision under EU-US Data Privacy Framework).
- Google LLC — analytics services (USA, EU-US Data Privacy Framework, IP anonymization active).
- Google (Workspace / Gmail) — inbound email for hello@la-venice.com.
Data is not sold, rented, or otherwise transferred to third parties for marketing purposes.
6. Extra-EU Transfers
Transfers to the United States (Netlify, Google) are protected under the EU-US Data Privacy Framework (Commission Decision 2023/1795) and by Standard Contractual Clauses (SCCs) where applicable.
7. Your Rights (Arts. 15-22 GDPR)
You have the right to:
- Access your data and receive a copy (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data (Art. 17)
- Restrict processing (Art. 18)
- Portability of your data (Art. 20)
- Object to processing (Art. 21)
- Withdraw consent at any time, without affecting past processing (Art. 7)
To exercise these rights, contact hello@la-venice.com. We will respond within 30 days.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it.
9. Security
Data is protected via HTTPS encryption in transit, hosting security controls by Netlify (SOC 2 Type II), and access limited to authorized personnel of the LA Venice project.
10. Automated Decision-Making
No automated decision-making, including profiling, is performed.
11. Changes to this Policy
This Policy may be updated. Substantial changes will be highlighted on this page with the revised "Last updated" date. Upon incorporation of LA Venice S.r.l., the Data Controller identity will be updated accordingly and users notified.