Privacy and cookies
Draft — legal review required
This notice is provisional. Before launch, the outstanding information listed below must be completed and the notice must undergo legal review.
Controller and privacy contact
The controller identified for this website is Tenuta Troiano di Schiavone Mattia, with its registered office at via Cabiria 5, 65129 Pescara, VAT number 02464760681. These details were declared by the business owner and await documentary verification.
A working, confirmed contact channel for exercising your data rights is still missing. Use of the registered office to receive these requests must also be confirmed. Whether a representative or data protection officer (DPO) is required and appointed, with their contact details, remains to be verified.
Browsing and display
The website offers no submission forms, accounts or online ordering and integrates no active visitor analytics tools.
Browsing can still involve personal-data processing: to deliver pages, the hosting service handles requests that may include your IP address and technical information about traffic and your device. Depending on the configuration, some data may be recorded in logs. Cloudflare is the planned provider for page delivery and protection against abuse and technical problems.
Within your browser, the homepage uses motion preferences, certain device capabilities and rendering performance to adapt the 3D display or show a static image. The current code does not send this information to analytics services or create a persistent visitor identifier.
Cookies and external resources
The current code does not set cookies or store visitor information in localStorage, sessionStorage or IndexedDB. The page address determines the language. Fonts and resources are hosted with the website; advertising, profiling tools, and maps, videos or widgets from external services are not integrated.
The website is designed without tracking tools that require consent and without a cookie banner. Using only technical cookies does not require a consent banner, but their use must be explained in the notice. The deployed configuration needs verification: Cloudflare can add cookies or scripts through platform settings even when these are absent from the website code.
If you contact us by email or WhatsApp
If you contact the business by email or WhatsApp, your name, contact details and message contents may be processed to handle and answer your request. This correspondence takes place outside the website; service providers may carry out additional processing under their own privacy notices.
Sending a message is your choice. Without the necessary information, the business may be unable to respond. Sending an enquiry does not constitute consent to promotional communications.
Information still to be confirmed
Before launch, the following must be established and included in the notice:
- Hosting: enabled services, data and logs processed, access, security checks and their effects; any cookies, with their names, purposes and lifetimes, and platform-injected scripts.
- Legal bases: the basis for each processing activity, including any correspondence; where legitimate interests are relied upon, the interests pursued and their assessment.
- Recipients: Cloudflare’s role, agreements and further providers; for any correspondence, the services used and staff who handle the correspondence.
- Transfers: processing locations and any transfers outside the European Economic Area, applicable adequacy decisions or other safeguards, and how to obtain a copy. It is not confirmed that data remains in the European Union.
- Retention: periods or criteria for technical data and logs, and separately for any correspondence, archives and backups. No periods have yet been established.
Your rights
Where the GDPR provides for them, you may request access, rectification, erasure or restriction of processing, object to processing and exercise data portability. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority. Instructions for contacting the controller will be completed in the “Controller and privacy contact” section.
Necessary data and automated decisions
You do not need to complete a form to read the website; the exchange of technical network data is necessary to receive pages. Any legal or contractual requirements to provide data for other services, and the consequences of withholding it, must be explained before those services are enabled.
The current code does not provide for profiling or automated decisions producing legal or similarly significant effects on individuals. Graphics adaptation serves display purposes; hosting security checks still need verification. Where applicable, the logic, significance and envisaged consequences of automated decisions will be described.
When this notice must be updated
This notice must be completed and legally reviewed before launch. It must also be updated before enabling Cloudflare Web Analytics or Phase 2 services such as accounts and online ordering, and before introducing other purposes or services that change how personal data is processed.