Last updated: June 2026

Data Controller

The Data Controller of the personal data collected through the website milordflorence.com is:

Tommaso Capozzoli
Website: milordflorence.com
Contact email: info@milordflorence.com
Privacy contact: Tommaso Capozzoli

This Privacy Policy explains how personal data is collected and processed when users visit the website and use the services available online, in particular the contact forms.

Types of Personal Data Collected

The website may collect and process the following categories of personal data:

• personal data voluntarily provided by the user through the contact forms, such as name, surname, email address, telephone number and message content;
• any additional personal data that the user may freely include in the message field;
• technical navigation data necessary for the proper functioning, security and maintenance of the website, such as IP address, browser information, operating system, date and time of access and technical data relating to the connection.

The website does not use tracking tools, advertising pixels, profiling systems, analytics services, Google Fonts, embedded maps, embedded videos or other third-party tools aimed at monitoring user behaviour for commercial or statistical purposes.

Purposes of Processing

Personal data collected through the website is processed for the following purposes:

1. to respond to requests sent by users through the contact forms;
2. to provide information requested by the user regarding services, activities or communications;
3. to manage any further communication related to the request received;
4. to ensure the proper technical functioning, security and maintenance of the website;
5. to comply with any legal obligations, where applicable.

Personal data is not used for automated marketing, profiling or unsolicited promotional communications.

Legal Basis for Processing

The processing of personal data is based on one or more of the following legal bases:

• the performance of pre-contractual or contractual measures requested by the user, when the data is necessary to respond to a request sent through the website;
• the user’s consent, where specifically required;
• the legitimate interest in ensuring the security, maintenance and proper functioning of the website;
• compliance with legal obligations, where applicable.

Methods of Processing

Personal data is processed using electronic and digital tools, with appropriate technical and organisational measures designed to protect the data against unauthorised access, loss, misuse, disclosure or alteration.

Personal data is processed only for the time necessary to achieve the purposes for which it was collected and in accordance with the principles of lawfulness, fairness, transparency, data minimisation and confidentiality.

Data Retention

Personal data sent through the contact forms is retained for the time necessary to manage the user’s request and any related communication.

If the request leads to a contractual relationship or to administrative, tax or legal obligations, the data may be retained for the period required by applicable law.

Technical navigation data is retained only for the time strictly necessary to ensure the functioning, security and maintenance of the website, unless longer retention is required to investigate unlawful activities or to comply with requests from competent authorities.

Communication of Data to Third Parties

Personal data is not publicly disclosed.

Personal data may be communicated, within the limits strictly necessary, to parties involved in the technical and operational management of the website, such as hosting providers, IT maintenance providers, email service providers or other technical suppliers connected to the ordinary functioning of the website.

These parties process personal data according to specific instructions and, where required, act as data processors under the applicable data protection legislation.

Personal data may also be communicated to public authorities or other authorised parties where required by law.

Transfer of Data Outside the European Union

The website does not use external tracking, profiling, marketing, analytics, font, map, video or embedded third-party services that, to the best of the Data Controller’s knowledge, involve a direct transfer of personal data outside the European Union.

Any technical processing related to the ordinary functioning of the website, such as hosting, email services and maintenance, is carried out through the providers used for the management of the website and in accordance with the applicable data protection rules.

Cookies and Tracking Tools

The website uses only technical cookies that are necessary for the proper functioning of the pages, the security of browsing and the management of the user’s cookie preferences.

The website uses the Moove GDPR plugin to manage cookie information and user preferences.

No profiling cookies, marketing tools, advertising pixels, analytics systems, Google Fonts, embedded maps, embedded videos or other third-party tracking tools are used.

Users may manage or disable cookies at any time through their browser settings. Disabling technical cookies may affect the proper functioning of some parts of the website.

Automated Decision-Making and Profiling

The website does not carry out automated decision-making processes and does not perform user profiling.

Rights of the User

Under the applicable data protection legislation, users may exercise the following rights, where applicable:

• the right to access their personal data;
• the right to request the correction of inaccurate data or the completion of incomplete data;
• the right to request the deletion of personal data;
• the right to request the restriction of processing;
• the right to object to the processing of personal data;
• the right to data portability, where applicable;
• the right to withdraw consent at any time, where processing is based on consent;
• the right to lodge a complaint with the competent Data Protection Authority.

Requests concerning the exercise of these rights may be sent to the contact details indicated at the beginning of this Privacy Policy.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time, including as a result of legal, technical or organisational changes.

Users are encouraged to review this page periodically in order to stay informed about any updates.