Transparency

Privacy policy

What data we process, for which purposes and with which providers, and how to exercise your rights.

Last updated: 29 September 2026.

1. Data controller

The data controller is Stefano Compagnone (Contrada Marrigo snc — 94014 Nicosia (Enna), Italy). For any request about your data, write to info@vivinicosia.it.

2. What data we collect

  • Browsing data: IP address (anonymised), device and browser type, pages visited, visit duration and referrer. Collected only in aggregate and only after analytics consent.
  • Contact form data: name, email and message content, provided voluntarily when you write to us or request an experience.
  • Newsletter email: the address alone, provided by ticking the consent box in the subscription form. It stays on the list until you unsubscribe from the link at the bottom of every email.
  • Preferences: site language and cookie choice, stored locally in your browser.

We do not collect special categories of data and we do not perform automated profiling.

3. Purposes and legal bases

  • Provide the service (site operation, answering requests): art. 6(1)(b) GDPR.
  • Measure traffic anonymously to improve content: art. 6(1)(a) GDPR (consent).
  • Comply with legal obligations where applicable: art. 6(1)(c) GDPR.

4. Processors, sub-processors and data processing agreements (DPA)

To run the service we rely on the following providers (sub-processors), who process data as processors or sub-processors under a Data Processing Agreement (DPA) pursuant to art. 28 GDPR:

  • Vercel Inc. — site hosting and content delivery (CDN). Data may transit EU and US servers under standard contractual clauses.
  • Umami Analytics (servers in the US and EU, GDPR and CCPA compliant) — privacy-friendly analytics with no cookies at all, enabled only with consent. This is the statistics tool currently in use.
  • Google Ireland Ltd. — Google Analytics 4 (anonymised statistics): wired up but currently not enabled; if turned on in the future, it would load only with consent.
  • OpenStreetMap Foundation and unpkg.com — map tiles and the Leaflet library: when you open a page with a map, your browser requests them from their servers, which receive your IP address. No cookies, no consent required.
  • Resend Inc. (United States) — newsletter list management and email delivery. It processes only the email address of those who subscribe with explicit consent; every email carries an unsubscribe link.

We never sell or share your data with third parties for marketing purposes.

5. Retention

Contact-form messages are kept for 24 months and then deleted. Aggregate statistics cannot be traced back to your identity. Cookie consent is stored for 12 months.

6. Transfers outside the EU

Some providers (notably Vercel, Umami and Resend, plus Google should GA4 ever be enabled) may process data outside the European Union. In those cases the transfer is based on standard contractual clauses approved by the European Commission.

7. Your rights

At any time you can exercise the rights under arts. 15–22 GDPR: access, rectification, erasure (right to be forgotten), restriction, portability and objection. To do so, write to info@vivinicosia.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

8. Cookies

Cookie use is described in detail in our cookie notice, where you can also withdraw consent.

9. Changes

This policy may be updated; material changes will be announced on the site. The version published on this page always prevails.