Privacy Policy EN

Privacy Policy – EN

Last updated: 13/08/2025

1. Data Controller

Tuscany Stone Lab
Via Caldareccia, 437 – 55041 Montemagno Camaiore (LU) – Italy
Email: info@tuscanystonelab.com 

2. Data we process

  • Contact data sent via forms or email (first/last name, email, phone if provided, message, preferred date).

  • Booking data (selected services/experiences, number of participants, notes).

  • Technical browsing data (IP address, logs, user agent).

  • Cookies and similar tools (see “Cookies and third-party tools”).

  • Media/content you voluntarily provide.

3. Purposes and legal bases (Art. 6 GDPR)

  • Handling enquiries and bookings → contract / pre-contractual steps (Art. 6.1.b).

  • Administrative and tax compliance → legal obligation (Art. 6.1.c).

  • Site security and abuse prevention → legitimate interest (Art. 6.1.f).

  • Marketing communications only with explicit consent (Art. 6.1.a).
    (Remove if you do not send newsletters.)

4. How we process data

Electronic tools with appropriate security measures; access is restricted to authorised personnel/processors.

5. Retention

  • Enquiries via forms/email: 12 months.

  • Booking/invoicing data: 10 years (legal/accounting).

  • Security/technical logs: up to 12 months.

  • Cookies: as per the Cookie Policy.

6. Recipients & transfers

  • Technical providers (hosting, site management, booking/forms tools) acting as Processors under Art. 28 GDPR.

  • Some services may be located outside the EEA; we adopt adequate safeguards (e.g., Standard Contractual Clauses).
    (Typical on your site: WordPress/Elementor, Amelia booking, WPForms, Google Maps, WhatsApp link.)

7. Cookies and third-party tools

We use strictly necessary cookies and, upon consent, functional/analytics/marketing cookies.
Third parties that may set cookies or collect data:

  • Google Maps (map embed)

  • YouTube/Vimeo (if videos embedded)

  • Amelia (catalogue/booking)

  • WPForms (contact/booking forms)

  • WhatsApp (click-to-chat)

For details and preference management, see the Cookie Policy.

8. Your rights

You can exercise your rights under Arts. 15–22 GDPR (access, rectification, erasure, restriction, portability, objection, consent withdrawal) by writing to info@tuscanystonelab.com.
You may lodge a complaint with your Data Protection Authority.

9. Minors

Services are intended for adults; any activity involving minors is done with parental/guardian consent and supervision.

10. Changes

This Policy may be updated. The current version is published on this page.