Privacy
On this page I explain what personal data I receive when you visit the site or write to me, what I use it for, how long I keep it and how you can exercise your rights. What the site saves in your browser is listed on the cookies page.
Data controller
The controller of the data collected through this website is Stefano Inversini. For any question about your data you can write to me at info@inversiniluxuryservices.com or call me on +39 345 332 6555.
Requests sent through the forms
When you write to me through a form on the site, I receive the details you enter: name, email, telephone, how you prefer to be contacted, the details of the service and any notes. With the request I also record the page you write from, the site you came from (domain name only), the language of the page, the type of device, browser and operating system, the time taken to fill in the form, the date and time it was sent and the version of this notice.
I use this data only to reply to you, prepare a proposal and organise the service you ask for: the processing is necessary to act on your request before a possible contract (Art. 6(1)(b) of Regulation (EU) 2016/679, GDPR). The box you tick in the form confirms that you have read this notice. Name, email and telephone are needed to reply to you: without them I cannot act on your request.
The time taken to fill in the form and the type of browser are also used to recognise automated submissions, in my legitimate interest in protecting the site from spam (Art. 6(1)(f) GDPR).
Who sees the request and for how long
The request reaches me by email, in the mailbox info@inversiniluxuryservices.com, and is kept in a protected archive on the site’s server. I access it myself and, only for technical maintenance, [name of the technician], who looks after the site on my behalf and is bound to confidentiality; every access to the archive requires a password and a second verification factor, or face or fingerprint recognition.
I keep the request for 24 months from receipt, both in the archive and in my mailbox, and then delete it, unless it is needed longer for a booked service or a legal obligation. The server’s backup copies, made by the hosting provider, may still contain it for [n] days.
Optional updates
If you tick the optional box, I write to you from time to time about availability and new destinations. The legal basis is your consent (Art. 6(1)(a) GDPR). I record the date and time you give it, the wording you accepted and the page where you gave it. You can withdraw it at any time, simply by replying to one of my messages or by writing to info@inversiniluxuryservices.com; withdrawal does not affect what was done before. After withdrawal I keep only a code that allows me not to write to you again.
WhatsApp, telephone and direct email
If you choose WhatsApp, a message is prepared with what you entered in the form: it leaves your device for my number only when you send it, and you can change it first. WhatsApp is a service of WhatsApp Ireland Limited, which for this part processes the data as an independent controller under its own terms, including transfers to the United States. The site only counts clicks on the WhatsApp, telephone and email buttons, without recording their content or linking them to a visitor: I only note the time, the page and the button used.
I use the messages you send me directly on WhatsApp or by email for the same purposes and keep them for as long as requests sent through the forms.
Visit statistics, without cookies
To know how many people visit the site and which pages they read, I use an internal count, without cookies, without external services and without storing anything on your device. For each page opened I record the page, the language, the referring site (domain name only), any campaign (utm_source), the type of device, browser and operating system, and the language set in the browser. I also record clicks on the contact buttons and the use of the forms (started, sent, error), never their content.
To tell visitors apart, the server calculates from your IP address and browser type a pseudonymous code that changes every day: the count does not store the IP address, and the code with the detailed lines is normally deleted within 48 hours. After that only daily totals remain, together with a list of clicks on the contact buttons (date, time, button and page) without any visitor code, kept for 25 months. I do this in my legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).
You can object at any time with the button below: the choice applies to the browser you are using, which remembers it until you clear it. Some browsers clear this choice on their own after a few days without visits to the site: in that case simply make it again. If your browser sends the Global Privacy Control or Do Not Track signal, the visit is not counted.
Server logs and security
Like every web server, the one hosting the site records the IP address, the browser and the requested page in access logs for technical and security reasons, including the requests of the visit count; the hosting provider keeps them for [n] days. To protect the forms and access to the management panel from abuse, the site keeps for no more than 24 hours a code derived from the IP address, which changes every day. I do this in my legitimate interest in the security of the site (Art. 6(1)(f) GDPR).
For the page animations your browser downloads a code library from a public file distribution service (CDN) based in the United States. As with any file downloaded from the internet, that service receives the IP address, the browser type and the address of the site, and processes them under its own privacy policy; it does not receive form data and stores no cookies on your device.
Who processes data on my behalf
The site and its email are hosted by a hosting provider based in the European Union, acting on my behalf as a processor, on servers located in [country]; on request I will tell you its name and registered office. [name of the technician] looks after the site and the panel on my behalf, as a processor. I do not pass your data to anyone and I do not use it for advertising.
Your rights
You can ask me at any time to see your data, correct it, delete it, restrict its use or receive it in a readable format; you can object to processing based on my legitimate interest and withdraw your consent to updates. Just write to info@inversiniluxuryservices.com: I reply myself, directly, within one month at the latest. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it), the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch) or the authority of your country.