it | en | de

Privacy Policy

This Website collects certain Personal Data from its Users.

1. INTRODUCTION
We respect your privacy in accordance with Regulation (EU) 2016/679 (GDPR). Our objective is to protect and safeguard your personal data when you interact with our website.

2. WHO WE ARE

  • Data Controller: the entity that determines the purposes and means of the processing of personal data.
  • Data Processor: the entity that processes personal data on behalf of the Data Controller.

Data Controller

Data Processor

3. WHICH PERSONAL DATA DO WE COLLECT?

Personal Data means any information that identifies or makes an individual identifiable. We do not collect personal data during simple anonymous browsing of the website.

(A) Online sales / booking services

  • first and last name
  • email address
  • phone number
  • payment data (processed via external payment gateway)

(B) Contact form

  • first and last name
  • email address and/or phone number
  • any information voluntarily provided in the message

QUOVAI S.r.l. does not collect or process special categories of personal data pursuant to Art. 9 GDPR, unless such data is voluntarily provided by the user in free-text fields.

For technical and security purposes, the website may collect system logs including IP addresses.

4. LEGAL BASIS FOR PROCESSING

  • Performance of a contract or pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR)
  • Consent of the data subject for optional purposes, such as subscription to the newsletter and the sending of promotional and informational communications (Art. 6(1)(a) GDPR 
  • Legitimate interest for sending communications relating to services similar to those already purchased by the user (Art. 6(1)(f) GDPR – soft spam, Art. 130(4) Italian Privacy Code)

5. PLACE OF DATA PROCESSING

Data is processed at the Data Controller’s premises and on Hetzner data centers located in Germany. No transfer of data outside the European Union is envisaged.

The website uses Google Analytics 4 (Google Ireland Ltd.) for aggregated statistical analysis. IP addresses are anonymized prior to storage.

6. DISCLOSURE OF DATA TO THIRD PARTIES

Personal data is neither sold nor transferred to third parties. It may only be disclosed to:

  • technical service providers
  • legal, tax and accounting consultants
  • competent authorities, where required by law

7. COOKIES

For detailed information on the use of cookies, please refer to the dedicated Cookie Policy.

8. DATA RETENTION

Personal data is retained for as long as necessary to fulfill the purposes for which it was collected and in compliance with legal obligations.

Tax and accounting data is retained for 10 years, after which it is deleted or anonymised.

Data collected for newsletter purposes will be stored until consent is withdrawn.

9. DATA SECURITY

We adopt appropriate technical and organizational measures to ensure data security. The website uses HTTPS protocol and SSL technology.

10. MINORS

This website is not intended for individuals under the age of 18. Minors must not provide personal data.

11. DATA SUBJECT RIGHTS

  • access to personal data
  • rectification or erasure
  • restriction or objection to processing
  • data portability
  • withdrawal of consent
  • lodging a complaint with the Supervisory Authority

Italian Data Protection Authority – www.garanteprivacy.it

12. CONTACT DETAILS

13. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated at any time. Any changes will be published on this page.

Privacy Policy updated on 28/12/2025