Privacy Policy
Last updated: Giugno 2026
This policy describes how the personal data of users who browse the website masseriatrepizzi.it and use the contact form is processed, pursuant to EU Regulation 2016/679 (“GDPR”).
1. Data controller
The data controller is EMA S.r.l.
(VAT no. 08602391214), located at Via Aldo Moro, 235 — 80049 Somma Vesuviana (NA), Italia.
Contact email: info@masseriatrepizzi.it — Tel. 081 893 1330.
2. Types of data collected
Through the contact form, the following data may be collected, voluntarily provided by the user:
- first and last name;
- email address;
- phone number;
- event details (type, date, number of guests) and any message.
The website does not collect special category data and does not carry out profiling.
3. Purposes and legal basis
The data provided through the form is processed solely to:
- respond to requests for information and quotes;
- manage contacts preliminary to the possible organisation of an event.
The legal basis is the consent of the data subject (art. 6(1)(a) GDPR), given via the dedicated checkbox in the form, and the performance of pre-contractual measures taken at the data subject's request (art. 6(1)(b) GDPR).
4. Method of processing
Data is processed using IT and electronic tools, applying security measures adequate to prevent its loss, misuse and unauthorised access. The data entered in the form is stored in a database managed through the Supabase platform (with servers located in the European Union) and an email notification is sent to the controller through the Resend service. Access to the data is restricted to the controller's authorised staff, via a credential-protected area.
5. Retention period
Data collected through the form is kept for a maximum period of 24 months from the last contact, unless otherwise required by legal obligations, after which it is deleted. The data subject may request earlier deletion at any time.
6. Third-party services
The following third-party services are used to operate the website:
- Supabase — storage of the form data in a database (servers in the European Union);
- Resend — sending of the email notification to the controller;
- Vercel — website hosting and delivery.
Some providers (in particular Resend and Vercel) may process data outside the European Union, applying adequate safeguards pursuant to articles 44 et seq. of the GDPR.
7. Rights of the data subject
At any time the data subject may exercise the rights set out in articles 15-22 GDPR, including:
- access to their personal data;
- rectification or erasure of data;
- restriction of or objection to processing;
- data portability;
- withdrawal of consent;
- lodging a complaint with the supervisory authority.
To exercise these rights, simply write to info@masseriatrepizzi.it.
8. Changes to this policy
The controller reserves the right to update this policy. Any changes will be published on this page together with the update date.