Privacy Policy

INFORMATIVA SUL TRATTAMENTO DEI DATI PERSONALI
(pursuant to Articles 13-14 of EU Regulation 2016/679 – GDPR)

1. Data Controller

Paola Michieli
Ca’ delle Spezie
Calle Mazor 1600 – Cannaregio – 30121 Venezia (VE)
Tel.: +39 349 646 6209
E-mail: [email protected]
Sito web: https://www.cadellespezie.com

2. Types of Data Collected

The Data Controller collects the following categories of personal data:

a) Data voluntarily provided by the user
Through the contact form on the website, the following data are collected: first name, last name, and email address, along with the content of the message submitted.

b) Navigation data
The computer systems and software procedures used to operate this website automatically acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This includes: IP addresses, browser type, operating system, domain name of the service provider, pages visited, and visit timestamps.

c) Cookies and tracking technologies
This website uses technical cookies necessary for its operation, as well as third-party cookies. For detailed information, please refer to our Cookie Policy.

3. Purposes and Legal Bases for Processing

4. Processing Methods

Personal data are processed using digital and manual tools, in compliance with the security measures required by the GDPR. Data are not disclosed to the public and are not transferred outside the European Economic Area, unless otherwise specified.

5. Recipients of Data

Data may be shared with:

• Technical service providers (hosting, email platform, website management);
• Professionals and collaborators for accounting and tax compliance;
• Competent authorities, where required by law.

These parties act as Data Processors pursuant to Art. 28 GDPR, or as independent controllers for obligations of their own.

6. Retention Period

Data are retained for the period strictly necessary for the stated purposes:

• Contact requests: until the request has been handled, and in any case no longer than 12 months;
• Course and booking data: for the duration of the contractual relationship and up to 10 years thereafter, for fiscal and accounting obligations;
• Navigation data: up to 12 months from collection;
• Promotional communications: until consent is withdrawn.

7. Rights of the Data Subject

Pursuant to Articles 15–22 of the GDPR, data subjects have the right to:

• Access: obtain confirmation of processing and a copy of the data;
• Rectification: correct inaccurate or incomplete data;
• Erasure: request the deletion of data (“right to be forgotten”);
• Restriction: restrict processing in certain circumstances;
• Portability: receive data in a structured, machine-readable format;
• Objection: object to processing based on legitimate interest;
• Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact: [email protected]

8. Right to Lodge a Complaint

Data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it, Piazza Venezia 11 – 00187 Rome, Italy.

9. Embedded Third-Party Content

This website may include embedded content (e.g. videos, maps). Such content behaves as if the visitor had navigated directly to the third-party website, which may independently collect data and use cookies.

10. Changes to This Privacy Policy

The Data Controller reserves the right to update this Privacy Policy at any time. The updated version will always be available on this page, with the date of the most recent revision indicated.

Last updated: June 2026