1. Controller and contact details
The controller for personal data received through business enquiries is DITTA DI NICOLINI DEBORAH, the sole proprietorship of Deborah Nicolini, Viale Vittorio Veneto 25, 51100 Pistoia (PT), Italy. VAT no. 02131350478.
For personal data enquiries: nicolinisrl2026@gmail.com. Telephone: +39 324 220 5219. Certified email (PEC): nicolideborah@pec.it.
2. Data and purposes
If you email or telephone us, we may receive your name, email address, telephone number, the content of your enquiry and information in documents you choose to send. This information is used to reply, manage correspondence and consider business enquiries. Please do not send sensitive data or identity documents unless necessary.
Providing contact information is optional, but we may be unable to reply without the details needed for your request. This website has no data submission forms, customer accounts, newsletter, shopping cart or payment tools.
3. Legal grounds
Enquiries about a possible purchase or business relationship are handled to take steps at your request before entering a contract (GDPR Article 6(1)(b)). Other correspondence is handled on the basis of the legitimate interest in responding and maintaining relevant communications (Article 6(1)(f)). Administrative or statutory requirements rely on Article 6(1)(c). General consent is not requested simply to reply to an enquiry, and contacting us does not subscribe you to marketing.
4. Technical services and recipients
The listed email address uses Gmail: messages pass through the sender’s and recipient’s email providers. This website is hosted through OpenAI Sites and its delivery and security infrastructure, which may process technical information such as IP address, browser, network requests, date and time. Any platform account sign-in is handled by the platform provider.
Data may be accessible to technical providers and authorised parties assisting the business where necessary, or to authorities when required by law. The business does not publish or sell enquiry data.
The providers’ own processing, log retention and safeguards for any transfers outside the EEA are described in their privacy notices: OpenAI, Cloudflare and Google. Contact the controller for information about the handling of a specific enquiry.
5. Retention
Correspondence is kept for as long as necessary to handle the enquiry and relevant follow-up. The period depends on the subject, the ongoing relationship and any need to document agreements, meet legal obligations or establish or defend rights. When these needs end, data should be deleted or anonymised. You may ask about the retention of data relating to your enquiry. Platform technical logs follow the relevant provider’s terms.
6. Cookies and tracking
This website’s code does not set its own cookies, use localStorage or integrate traffic analytics, advertising, profiling, third-party maps or video embeds. Language is selected through links between pages, without saving a preference on your device. Images, styles and scripts are served with the website.
The hosting or authentication platform may use technical tools required for security and access, as described in its own notice. This website offers no optional cookies to accept. If non-essential tools are introduced later, the notice and consent choices must be updated before activation. You can manage cookies through your browser settings.
7. Your rights
Where provided by the GDPR, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may complain to the Italian Garante per la protezione dei dati personali or another competent supervisory authority.
Write to the controller’s email address. Requests are normally handled within one month; any legally permitted extension must be communicated. Proportionate information may be needed to confirm the requester’s identity.
8. Automated decisions and updates
The website does not carry out profiling or automated decisions producing legal effects. Email and telephone links open external applications, which have their own terms. This notice covers the current functionality and is updated when processing changes.
References: European Commission information on GDPR rights and the Italian authority’s cookie information.