The purpose of this Privacy Policy is to describe how this website is managed with regard to the processing of the personal data of users who visit it. This notice is provided in accordance with Article 13 of EU Regulation 2016/679 (GDPR).
1. Data Controller
The Data Controller is:
Name/Company Name: Bottega Luci di Occhiodoro Gabriele
Registered Office/Residence: Via Raffaello Sanzio 19
VAT No. / Tax Code: IT 02961720428 – CCHGRL88R28A271N
Contact email: bottegaluci.multilab@gmail.com
2. Types of Data Collected
Using the WordPress platform, the website may collect, either independently or through third parties, the following data:
Browsing data: IP addresses, browser used, date and time of access, navigation within the website.
Data provided voluntarily by the user: Name, email address, or other data entered in contact forms, comments or during registration.
Cookies: this website does not use cookies.
3. Place of Processing and Hosting (OVH)
Data is processed primarily at the Data Controller’s premises and at the locations where the parties involved in the processing are situated.
Hosting Provider: The website is hosted on OVH Cloud servers (OVH SAS).
Server Location: Data is stored within the European Economic Area (EEA), in accordance with the GDPR’s guidelines on data security and localisation.
4. Purposes of Processing
Your data is collected and processed for the following purposes:
Technical operation: To ensure the correct display and security of the WordPress website (e.g. protection against hacker attacks via security plugins).
User contact: To respond to enquiries submitted via contact forms.
Interaction and comments: To allow users to leave comments on content (a native WordPress feature).
[Optional] Statistics and marketing: Traffic analysis (e.g. Google Analytics) or sending newsletters.
5. Legal Basis for Processing
The Data Controller processes the User’s Personal Data where one of the following conditions applies:
The user has given consent for one or more specific purposes (e.g. newsletter subscription).
Processing is necessary for the performance of a contract or pre-contractual measures.
Processing is necessary to comply with a legal obligation or to pursue the Data Controller’s legitimate interests (e.g. website security).
6. Retention Period
Data is processed and retained for as long as is necessary for the purposes for which it was collected:
Data collected for security or browsing purposes is deleted or anonymised within a few months.
Data from contact forms is retained only for as long as is necessary to deal with the enquiry.
Comments and their associated metadata are retained indefinitely whilst the website or article remains active, or until the user requests their removal.
7. User Rights (GDPR)
At any time, users may exercise the rights set out in Articles 15–22 of the GDPR, including:
Access: To know what data is being processed.
Rectification: To request the correction of inaccurate or incomplete data.
Erasure (Right to be forgotten): To request the erasure of their personal data.
Restriction and Objection: To object to the processing or request that it be restricted.
Portability: To receive their data in a structured format.
To exercise these rights, the user may send a written request to the email address: [Your Email]. Users also have the right to lodge a complaint with the Data Protection Authority.
8. Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this privacy policy at any time, informing users of such changes on this page. Please therefore check this page regularly, referring to the date of the last update shown at the bottom.
Last updated: 19/06/2026