Privacy Policy

The data controller is:

The Site is informational in nature: it does not offer account creation or contact forms. The personal data processed is limited to:

• Browsing data — IP addresses, browser type, operating system, pages visited and access times, collected automatically by the servers hosting the Site. This data is necessary for the proper functioning of the service and is not associated with identified users.
• Data provided voluntarily — should the user contact the controller using the email address or telephone number shown on the Site, the data provided (e.g. name, email address, content of the message) will be processed solely in order to respond to the request.

The Site installs no cookies at all and uses no analytics, measurement, profiling or advertising tools. The only item stored on the device is a technical preference recording that the language notice has been dismissed. As this is a strictly necessary tool no consent is required, and the Site shows no banner. For further details, please see the Cookie Policy.

The Site is hosted on Vercel Inc. infrastructure, which acts as a processor on the controller's behalf. It is the only provider processing data for the Site, and does so only for the technical data needed to serve the pages: system and security logs generated automatically by every web request. No traffic analysis or measurement tool is active. Its own notice is available in the provider's privacy policy.

The Site includes a link to the catalogue of works hosted on the Visme platform (visme.co), operated by Visme Inc. Access to that external content is subject to Visme Inc.'s privacy policy. The Site does not transmit users' personal data to Visme; the interaction is voluntary and takes place at the user's initiative.

Typefaces are loaded through Next.js, which serves them directly from the Site's own servers without transferring any data to Google's servers.

The Site is distributed through the server network of the hosting provider Vercel Inc.: pages are served from the node geographically closest to the visitor, which may therefore lie outside the European Economic Area. The provider is established in the United States and, as a processor, may access the data processed on the controller's behalf from there.

Such transfers take place under the safeguards of Chapter V GDPR: the provider states that it adheres to the EU–U.S. Data Privacy Framework, covered by the European Commission's adequacy decision (art. 45 GDPR). Details are set out in the provider's privacy policy.

No other transfer of data to third countries takes place, and no personal data is sold or disclosed to anyone other than the parties identified here.

Browsing data is retained for as long as strictly necessary to operate the Site, as a rule for no longer than 12 months. Data provided voluntarily through direct contact is retained for as long as necessary to handle the request and thereafter for a maximum of 24 months, subject to legal obligations.

Under articles 15–22 of the GDPR, users have the right to:

• Access — obtain confirmation of processing and a copy of the data;
• Rectification — request the correction of inaccurate data;
• Erasure (the "right to be forgotten") — request the deletion of the data;
• Restriction — request the restriction of processing in certain cases;
• Portability — receive the data in a structured format and transfer it to another controller;
• Objection — object to processing based on legitimate interest;
• Complaint — lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise these rights, simply write to info@torredeicapocci.com.

The controller reserves the right to update this notice at any time. Changes will be published on this page together with the date of the update. Users are invited to consult this page periodically.

This English text is provided for convenience only. In the event of any discrepancy between this translation and the Italian version, the Italian version shall prevail.