Privacy & Cookie Policy

This page explains what personal data we collect through lincantodiiman.it, why, who sees it and what your rights are. We have tried to write it plainly. If anything is unclear, write to us at info@lincantodiiman.it.

Who we are

The data controller is MARIEN BEAUTY S.R.L., which runs the studio L’Incanto Di Iman.

• Registered office: Strada Cartigliana 62, 36061 Bassano del Grappa (VI), Italy
• P.IVA / Codice Fiscale: 04652300247 · REA VI-419975
• Email: info@lincantodiiman.it · Phone / WhatsApp: +39 329 198 3699

We have not appointed a Data Protection Officer, because the law does not require one for a studio of our size. Privacy questions go to the email above.

What we collect, and why

When you book a night (the booking page). You give us your name, email address, phone or WhatsApp number, the night you chose, the day and hour, and an optional note. If you redeem a gift code, we also record the code. We use this to manage your appointment, keep the room free for you and contact you about it. Legal basis: performing the booking you asked for (Art. 6(1)(b) GDPR). Without these details we cannot take your booking.

When you join the list (the invitation form). You give us your name and your email address or WhatsApp number. We use it to send you the invitation when the doors open and, if you agree, news from the studio. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time by writing to us or using the unsubscribe link in any email.

When you write to us by email, WhatsApp or phone. We use what you send to answer you. Legal basis: our legitimate interest in replying to you, or the steps you ask us to take before a booking (Art. 6(1)(b) and (f)).

When you buy or redeem a gift card. The same details as a booking, plus the name of the person you are giving it to and your optional message. Online card payment is not switched on yet; when it is, this policy will be updated before it starts.

Technical data when you visit. Like any website, our host receives your IP address, browser type and the pages requested, so the site can be delivered and kept secure. We do not use this to identify you. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f)).

Visit statistics, only if you accept. With your permission we use Google Analytics to count visits and see which pages are read, so we can improve the site. See “Cookies” below. Legal basis: your consent (Art. 6(1)(a)).

The map. The location map on the home page loads map tiles from OpenStreetMap, so your IP address is sent to the OpenStreetMap servers when the map appears.

We do not sell your data and we do not use it for advertising or automated decision-making.

A note on health information

The “anything Iman should know?” box in the booking form is optional. Please do not write health details there unless they matter for your comfort or safety, for example pregnancy, allergies, an injury or a skin condition. If you do, you are giving us your explicit consent (Art. 9(2)(a) GDPR) to use that information only to adapt your treatment. You can withdraw that consent at any time and we will delete the note.

Who receives your data

We use a small number of service providers who process data on our behalf:

• Google — Google Calendar (where bookings are stored) and our Google account and email.
• Vercel Inc. — hosts the website.
• MailerLite — sends the invitation emails to the list.
• Google Analytics — visit statistics, only if you accept (see Cookies).
• WhatsApp (Meta) — only if you choose to message us there.
• OpenStreetMap — the map tiles, as described above.

Our accountant and advisers may also see data where needed for tax and legal obligations, and we may disclose data to authorities when the law requires it. Nobody else receives it.

Transfers outside the EU

Some of these providers (Google, Vercel, Meta) are based in, or may process data in, the United States. Where that happens, the transfer relies on the EU–US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.

How long we keep it

• Bookings: for up to 24 months after your visit, so we can handle follow-up and remember your preferences, then deleted. Invoices and accounting records are kept for 10 years, as Italian law requires.
• The list: until you unsubscribe or ask us to remove you.
• Messages: for as long as needed to deal with your request, and no longer than 24 months afterwards.
• Website logs: for a short period set by our host, normally days.
• Google Analytics: event data is kept for up to 14 months.

Your rights

You have the right to ask us for access to your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, without affecting what we did before. To use any of these rights, write to info@lincantodiiman.it; we answer within one month.

You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority in your own country.

Cookies

Our site sets no cookies of its own and no advertising or tracking cookies. The only cookies come from Google Analytics, and only after you press Accept on the banner:

• _ga — tells visits apart, so we can count visitors. Lasts up to 2 years.
• _ga_ followed by an ID — keeps the state of a visit. Lasts up to 2 years.

We also save your cookie choice in your browser’s local storage under the name lin-analytics-consent. It never leaves your device and is not a cookie.

If you press “No, thanks”, or ignore the banner, no Analytics script is loaded and no cookie is set. You can change your mind at any time with Cookie settings in the footer, and you can delete cookies in your browser settings. Our fonts are hosted on our own site, not by Google.

Children

The site is not aimed at children, and we do not knowingly collect data from anyone under 16.

Changes to this policy

If we change how we handle data, for example when online payments start, we will update this page and the date at the top.