Privacy Policy

This document describes how personal data is processed by the website Tavola Savorista (https://tavolasavorista.com), in accordance with Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”).

1. Data Controller

The Data Controller is:
Giulio Lombardelli
Address: Via Pian delle Noci, 13 – 53045 Montepulciano (SI) – IT
Contact email: info@tavolasavorista.com
VAT number: 01629220524

2. Types of data collected

a) Data voluntarily provided via forms

The following personal data may be collected through WPForms:

• first name

• last name

• email address

• message (inquiry, project idea, question, or request for consultancy or external services)

An optional newsletter subscription is also available and collects:

• first name

• last name

• email address

b) Automatically collected data

The website uses only strictly necessary technical cookies, essential for its operation.

c) Anti-spam protection: Google reCAPTCHA

We use Google reCAPTCHA to protect forms from spam.
This service may collect the user’s IP address and technical information.

More information: https://policies.google.com/privacy

d) Google Fonts

The website uses external fonts provided by Google, including:

• Sora

• Host Grotesk

Google may process technical data related to font loading.

3. Purposes and legal bases

4. Processing methods

Data is processed using electronic tools and appropriate security measures.
No profiling or automated marketing activities are performed.

5. Hosting

The website is hosted by Hostinger International Ltd.
Privacy policy: https://www.hostinger.com/legal/privacy-policy

6. Third-party services

Brevo (Sendinblue)

Handles newsletter communications.
Policy: https://www.brevo.com/legal/privacypolicy/

Google (reCAPTCHA and Fonts)

May process IP addresses and technical information.
Policy: https://policies.google.com/privacy

7. Data retention periods (standard clause)

Personal data is retained only for the time strictly necessary to achieve the purposes for which it was collected.

Specifically:

• Contact form submissions: retained for up to 12 months after the last interaction, unless longer retention is required by law.

• Consultancy or service requests: retained for the time necessary to manage the request and in any case no longer than 24 months.

• Newsletter subscriptions: retained until consent is withdrawn using the unsubscribe link.

• Technical cookies: retained only for the duration of the session or for limited periods necessary for the website’s operation.

8. User rights

Users may exercise the rights granted by Articles 15–22 GDPR:

• access

• rectification

• erasure

• restriction

• objection

• data portability

Requests must be submitted to: [Privacy email]

9. Data transfers outside the EU

Some providers (Google, Brevo, Hostinger) may transfer data outside the EU.
Such transfers rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Changes to this Privacy Policy

This policy may be updated over time.
Last update: [Date]