Privacy Policy

This policy describes how personal data of users who browse pablothegarden.com and interact with its services is processed, pursuant to Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended.

Data Controller

The Data Controller is GO BANANAS Associazione Culturale, with registered office at C.da Palombaretta 45, 62010 Morrovalle (MC), Italy, VAT 02111990434, Tax Code 93070680439.

Contact email: pablothegarden@gmail.com

Data we process

• Contact form data: name, email address, optional company/organization, request type and the content of the message you send us via the Contact page.
• Browsing data: technical data automatically collected by IT systems (e.g. IP address, browser and device type, date and time of the request) through the hosting provider's logs, necessary for the operation and security of the site.
• Cookies: the site uses technical cookies necessary for functioning (always active) and, only with your prior consent given via the banner, Google Analytics 4 analytics cookies to measure visits in aggregate. Without consent, no analytics cookie is installed; you can change your choice by clearing the site's cookies. Fonts are hosted directly on our site, with no requests to external CDNs. The interactive venue map (Google Maps) loads only if you press the "Load the map" button: until then no request or cookie is sent to Google. Your choice is stored on your device and is revoked by rejecting cookies in the banner.

Purposes and legal basis

• Responding to requests sent via the contact form (partnerships, press, vendors, information). Legal basis: performance of pre-contractual measures and/or legitimate interest in responding; where the request is not necessary, the consent given by submitting the form.
• Security and proper functioning of the site. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
• Aggregate statistical analysis of visits via Google Analytics 4, active only if you give consent. Legal basis: your consent (Art. 6(1)(a) GDPR), revocable at any time.

Recipients of the data

Data may be processed on our behalf, as Data Processors, by service providers such as:

• Vercel Inc. — site hosting and delivery;
• Formspree, Inc. — handling of contact form submissions;
• Google Ireland Ltd. / Google LLC — statistical analysis of visits (Google Analytics 4), active only with prior consent;
• Google Ireland Ltd. / Google LLC — display of the interactive venue map (Google Maps), loaded only with your explicit prior consent via the "Load the map" button.

Data is not disseminated or sold to third parties for commercial purposes.

Transfers outside the EU

Some providers (Vercel, Formspree, Google) may also process data in the United States. Any transfer of data outside the European Economic Area takes place in compliance with the GDPR, on the basis of Standard Contractual Clauses approved by the European Commission or other adequate safeguards.

Retention period

• Contact form messages: kept for the time needed to handle the request and, in any case, for a maximum of 24 months, unless otherwise required by law.
• Technical logs: kept only for the time strictly necessary for security and functioning purposes.

Your rights

As a data subject you may exercise at any time the rights set out in Articles 15-22 GDPR:

• access to your personal data;
• rectification of inaccurate data;
• erasure ("right to be forgotten");
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to pablothegarden@gmail.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

Nature of the provision

Providing data via the contact form is optional, but necessary for us to respond: without it we cannot follow up on your request.

Automated decision-making

We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.

Changes to this policy

We reserve the right to update this policy. The current version is always published on this page, with the date of the last update indicated.