Privacy Policy

1. Who is responsible for your data?

The data controller is Dijana Akrapovic, sole trader, trading as Ardiel’s - Letter Desk, Via Nicola Fabrizi 101, 98123 Messina, Italy. You can contact the controller at hello@ardiel.it.

2. What information do we collect?

If you send an inquiry, we may process your name, email address, club or publication name, and the information you include in your message. Please do not include sensitive personal information in the form.

The website’s hosting and security infrastructure may also process technical request data such as IP address, browser and device details, timestamps, and error or security logs to deliver and protect the site.

3. Why do we use it, and on what legal basis?

• To read and reply to inquiries and, if requested, discuss services before a contract. This is necessary to take steps at your request before entering into a contract.
• To operate, maintain, and secure the website. This is based on the controller’s legitimate interests in providing a reliable and secure site.
• If you become a client, information needed to perform the agreement and meet legal obligations may be processed separately under the applicable contractual or legal basis.

We do not use inquiry information for newsletters or promotional mailing lists.

4. How long do we keep inquiry information?

Inquiry details and related correspondence are kept for up to 12 months from the inquiry so we can respond and follow up. They are then deleted or anonymised, unless a longer period is required to meet a legal obligation or establish, exercise, or defend a legal claim. Client records may be kept for different periods where a contract or law requires it.

5. Who may receive the information?

Access is limited to the controller and people authorised to help manage inquiries. Inquiry records are stored in a Supabase-hosted database. Resend is used to deliver the confirmation email to you and a brief notification to hello@ardiel.it; the notification does not contain your inquiry details. Website hosting and email providers may also process technical data needed to deliver and secure their services. These providers process information to supply their services to the controller and under appropriate confidentiality and security arrangements.

Your inquiry is handled by the controller in Italy. The Supabase project should be configured in an EU region where available. If Supabase, Resend, or another provider processes personal data outside the European Economic Area, the controller will use an adequacy decision or other transfer safeguards required by applicable data-protection law.

6. Your rights

Subject to the conditions in data-protection law, you may ask to access, correct, erase, or restrict the use of your personal data, and you may object to processing based on legitimate interests. Where the right applies, you may also request data portability. Contact hello@ardiel.it to make a request.

You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority. You can also contact the controller first so the issue can be addressed.

7. Changes and contact

This policy may be updated when the site or its data practices change. The latest version will be published on this page. For questions about this policy, write to hello@ardiel.it.