PRIVACY POLICY

In this section, you will find information regarding the processing of personal data that I carry out through this website. If you would like information about cookies, please consult the dedicated page, which can be found by clicking here

The reason for this section
In compliance with EU Regulation 2016/679 (hereinafter GDPR), containing rules relating to the protection of individuals with regard to the processing of personal data and their free movement, I provide you with all the information necessary to understand how and what personal data I process through the website, assuring you that I will take care to respect the principles of fairness, lawfulness, transparency, and protection of your privacy and your rights.

Who I am
Supventura di Arianna Soldani (VAT number 07195810481) is the name of my business, which has its registered office in Via Sicilia n.20, Alghero (SS). I am the owner and Data Controller of this website and of the personal data processing carried out through it.

How to contact me
If you have any questions, need information, clarification, and/or wish to ask questions in relation to the following, you can contact me by writing to the email address info@supventura.it or by calling or writing on WhatsApp to the number: +39 347 193 4086.

Preliminary warnings
What you are about to read applies only to my website, not to other websites, pages, or online services accessible via hyperlinks (e.g., to Facebook and Instagram) or via embedded content (e.g., social widgets) that you may encounter while browsing. With regard to the aforementioned third parties, you can consult their respective privacy policies, which are linked below: Facebook https://www.facebook.com/privacy/policy/?locale=it_IT; Instagram https://help.instagram.com/155833707900388.

Details on processing
I may process your personal data as follows:

I. Website browsing

Data processed Reasons why we process your data
Data retention period
IP address, logs, device and browser identifiers, technical information relating to server requests and use of the Website. Purpose: proper functioning of the website and services, technical management, security, prevention of abuse/attacks, determination of liability in the event of illegal activities. Legal basis: Art. 6.1(f) GDPR (legitimate interest in security and proper functioning); Art. 6.1(c) GDPR where necessary for legal obligations/orders from the Authority.
Security/browsing logs for a limited and proportionate period (1 month), except for extensions in the event of incidents/investigations

II. Contacts and management of requests for information, clarifications, and reservations

Data processed Reasons why we process your data
Data retention period
First and last name, telephone number, email address, message content, and information related to the request. Purpose: to respond to requests for information, manage necessary communications, and organize/book the requested activities. Legal basis: Article 6.1(b) GDPR (response to requests and implementation of pre-contractual measures/business organization); Article 6.1(f) GDPR for strictly related activities (organization/limited archiving of correspondence, prevention of spam/abuse and technical checks, protection of rights and management of disputes). For the time necessary to process the request and, in any case, up to 6 months, unless further storage is necessary in the event of a dispute.

III. Cookies and tracking tools

Data processed Reasons why we process your data
Data retention period
Online identifiers and information collected through cookies or similar technologies. Purposes: technical functionality, preferences, and statistical analysis; additional purposes (if any) are described in the Cookie Policy. Legal basis: Art. 6.1(a) GDPR (consent) for non-technical cookies/tools; for technical/necessary cookies, technical necessity/legitimate interest.
The types, duration, and characteristics of cookies are indicated in the website’s Cookie Policy, which can be found by clicking here, and can also be managed through your browser settings.

Notes on legitimate interest and consent
When processing is based on Article 6.1(f) GDPR (legitimate interest), this means that I act for reasons related to the security of the site and the proper management of communications, adopting minimization and limited storage measures. You may exercise your right to object at any time (Article 21 GDPR).
When processing is based on consent (e.g., non-technical cookies), consent may be withdrawn at any time without prejudice to the lawfulness of the processing carried out prior to withdrawal.

Methods of processing
I protect your personal data by adopting security measures and complying with the principles set out in the GDPR. I process the data collected only for the time necessary to achieve the purposes described above, with or without the aid of electronic tools and automated systems.
I use hosting providers that comply with the highest security standards and have the most advanced certifications.
I do not implement automated decision-making processes, including profiling, that may produce legal effects concerning you or similarly significantly affect you.

Nature of the provision of your data
Pursuant to Article 13(2)(e) of the GDPR, the provision of personal data for the processing activities described in point II is always optional, but if you do not provide such data, we will not be able to carry out the activities described above.

Recipients
For the purposes indicated in this policy, without prejudice to compliance with the principles of purpose limitation and minimization, your personal data may be disclosed to third parties, who will process it as external data processors pursuant to Article 28 of the GDPR. You may request a complete list of external data processors by sending an email to: info@supventura.it.
If I need to process your data to comply with legal obligations, I may have to transfer it to entities and/or authorities (e.g., the Internal Revenue Service, administrative authorities, police forces) who will process it as independent data controllers. I will not disclose or disseminate your data to unspecified parties.

Transfers outside the EU
If certain suppliers (e.g., IT/hosting services or communication tools) involve data transfers to countries outside the EEA, I will adopt the safeguards provided for by the GDPR (e.g., adequacy decisions, Standard Contractual Clauses, additional measures where necessary).

The rights granted to you by law and how to exercise them
As the data subject, you may always contact me to exercise your rights under the GDPR, which are relevant to the type of processing described in this policy and in particular: Art. 15 – Right of access: to request confirmation of the existence of personal data processing and obtain access to it; Art. 16 – Right to rectification: request and obtain rectification if the data subject considers that the data processed is inaccurate, in accordance with the law; Art. 17 – Right to erasure (right to be forgotten): request the erasure of data without undue delay if it is no longer necessary for the purposes of processing, if the data subject has withdrawn consent, if he or she has objected to processing, or in the case of unlawful processing, or if the data must be erased to comply with a legal obligation; Art. 18 – Right to restriction of processing: if the data subject contests the accuracy of the data, if the processing is unlawful, or if, although the controller no longer needs the data for the purposes of the processing, the data are required by the data subject for the establishment, exercise, or defense of legal claims, Art. 20 – Right to portability, i.e., the right to receive data concerning a data subject that he or she has provided to the controller, in a structured, commonly used, machine-readable format, or the right to request that the controller transfer the data directly to another controller. Art. 21 – Right to object: the right to object to processing at any time, for reasons related to the particular situation of the data subject, based on Art. 6, par. 1, letters e) and f), Art.22 – Right not to be subject to decisions based on automated processing.
You can contact me at the following email address: info@supventura.it, or on my mobile number +39 347 193 4086. Finally, you have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates your rights. For more information, please visit the following web page: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.

This policy may be subject to changes and/or revisions. The updated version will be published in this section and will contain the date of its last update.
Version February 2026.