Privacy notice
This notice explains how Vivai Pomili Maria Pia processes personal data collected through vivaipomili.it, under Regulation (EU) 2016/679 (GDPR). Last updated: October 2026.
Data controller
Vivai Pomili Maria Pia, Strada Comunale Bore Tesino 35, 63066 Grottammare (AP), Italy. VAT no. 01531370441. Email: vivaio@vivaipomili.it — Phone: +39 347 5706 207. No data protection officer has been appointed: the controller answers requests directly.
What data we process
Through the contact form we collect your name, email address, optional phone number and company, the subject and content of your message, and the date of consent. We do not ask for special categories of data (Art. 9 GDPR) and ask you not to include them in your message.
While you browse, the hosting provider records the technical data needed to serve and protect the site (IP address, date and time, requested page, browser type). The IP address linked to form submissions is stored only as a non-reversible hash, to detect automated submissions and abuse.
Purposes and legal bases
- Answering your request and managing the commercial relationship: Art. 6(1)(b) GDPR, pre-contractual measures and performance of a contract.
- Complying with legal obligations (tax, accounting, security): Art. 6(1)(c) GDPR.
- Site security and abuse prevention (IP hash, technical logs, anti-spam): Art. 6(1)(f) GDPR, legitimate interest.
- Google map: the map is embedded in our pages and loads automatically (Art. 6(1)(f) GDPR, legitimate interest in showing where we are); if you turn external content off in the cookie preferences it is no longer loaded.
We do not use your data for automated decisions or profiling. We do not send marketing communications without specific consent, which the site does not currently request.
Providing data
Fields marked with an asterisk are required to send your request: without them we cannot reply. Other fields are optional and simply help us answer better. You can always contact us directly by email or phone.
How long we keep data
- Form requests: 24 months from the last contact, unless legal obligations or a dispute require longer. After that they are deleted automatically.
- Cookie consent log: 24 months, to prove consent was given and to manage withdrawals.
- Hosting technical logs: for the period set by the provider, usually days or weeks, for security purposes.
- Consent cookie: 180 days, after which we ask for your preferences again.
Recipients and transfers
Data is processed by nursery staff and by technical providers appointed as processors under Art. 28 GDPR: hosting provider, email service and, where necessary, tax consultants. We do not sell or share data with third parties for marketing.
If a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision or on the European Commission’s standard contractual clauses, with the necessary supplementary measures.
Your rights
You may request access, rectification, erasure, restriction, portability, object to processing based on legitimate interest, and withdraw consent at any time. Write to vivaio@vivaipomili.it: we reply within one month, extendable by two months for complex requests.
If you believe the processing breaches the GDPR you may lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of your country.
Cookies and external content
The site uses necessary technical cookies. Statistics and marketing cookies are not active: those categories exist in the banner only to make the choice explicit. The Google map is embedded and loads automatically; via “Cookie preferences” in the footer you can turn external content off, and from then on the map is no longer loaded. Details in the cookie policy.
Security
The site is served over HTTPS, limits login attempts, does not store plain IP addresses for form requests and keeps the CMS, theme and server updated. In the event of a data breach the controller assesses the impact and, if required, notifies the authority within 72 hours and informs data subjects.
Changes
If purposes or tools change we update this notice and the consent version: in that case the banner asks for your preferences again. The current version is 2026-10.