Privacy Policy

The Data Controller is [Company name to be inserted], located at [Address to be inserted], Milan — email: progettonavigli@yahoo.com.

Through the forms on this site we collect the following personal data:

• First and last name
• Email address
• Phone number
• Nationality and country of residence
• Social profile (optional)
• Notes and additional information provided voluntarily
• Identity documents (only in the booking request flow)

Data is processed for the following purposes:

• Managing visit and booking requests — legal basis: pre-contractual measures (Art. 6(1)(b) GDPR)
• Marketing communications (only with explicit consent) — legal basis: consent (Art. 6(1)(a) GDPR)

Data relating to visit and booking requests is retained for a maximum of 24 months from the date of receipt. Uploaded documents are accessible for 7 days via signed links, after which access expires automatically.

Data is processed by our internal team and the following technical service providers:

• Supabase Inc. — data storage (EU servers)
• Sanity AS — content management
• Resend Inc. — transactional email delivery
• Vercel Inc. — website hosting

Data is not shared with third parties for marketing purposes.

Under GDPR (Arts. 15–22), you have the right to access, rectify, erase, restrict, object to processing and request portability of your data. You may exercise these rights by writing to progettonavigli@yahoo.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

This site uses only technical cookies necessary for navigation. No profiling or third-party advertising cookies are used.

This policy may be updated periodically. The current version is always available on this page. Last updated: May 2026.