Privacy notice

Who handles the data

The data controller is Currà Vincenzo, Corso Umberto I, 59 – 89852 Mileto (VV), VAT 03338120797.

To use the rights described below you can write to that address, come to the shop during opening hours, call the landline +39 0963 33 82 06 or the mobile +39 338 56 21 646, write on WhatsApp, or use the contact form and say what you are asking.

What data I collect

Only what you write in the contact form or in the form to ask for a visit:

• your name;
• the contact details you give – email address and/or phone number (at least one is needed for a reply; a visit at your address needs the phone);
• the address of the visit (street, town, postcode), if you give it;
• whether you are already a customer, the kind of visit, the stove make or model and a description of the problem, if you give them;
• the kind of request and the text of the message;
• the page of the site you sent the form from;
• the date and time it was sent.

The site does not use profiling cookies and has no third-party analytics: no browsing data leaves this server. To send the contact form the browser receives a technical cookie: it only checks that the request comes from this site, it does not follow your browsing, and it is not shared.

To see which pages are useful and how much the site is read, the server keeps a count of pages opened. It is built here and stays here: it sets no cookie, uses no JavaScript and does not keep your IP address. Of each visit we keep the page opened, the time, the browser, the site you came from if any, and the country – the country only, not the town and not the address.

Instead of the IP address we store a code that changes every day. It stops the same person being counted ten times on the same day; tomorrow the same person gets a different code, so we cannot tell who comes back or follow anyone over time. That is on purpose: I give up knowing how many visitors return, and in exchange I do not build a record of who browses here. The counts delete themselves after 14 months, 3 months for bots.

The legal basis is my legitimate interest in knowing whether the site works and in keeping it secure (art. 6.1.f GDPR). With no cookies and no data that identifies you, your consent is not needed and there is no banner to accept. The country comes from the DB-IP IP to Country Lite database (CC BY 4.0 licence), read here on the server: no information about you is sent to them or to anyone else.

The “Open in Google Maps” link opens Google Maps in another tab. It loads nothing here.

For security the server temporarily records the IP address of someone who sends the form or a review, to stop mass automatic submissions.

If you use the chat, the text you write and the reply stay in the site database. The browser does not keep a copy of the chat. If in the chat you leave a name and a way to reach you, that becomes a request in the queue, like the contact form, and we handle it the same way. The legal basis is the legitimate interest in running the chat (art. 6.1.f GDPR) and, if you leave contact details, consent and pre-contractual steps at your request.

Reviews

If you leave a review on the site, I collect the name you write, the town if you give it, the rating, the text, and the date and time it was sent. I do not ask for a phone or an email.

The legal basis is consent, which you give by ticking the box: you accept that the name, the town if given, the rating and the text may be published on the site. I read it before publishing. I may correct an obvious typo, or not publish it. It stays on the site until you ask me to remove it, or until I remove it.

The chat

The chat is an artificial intelligence system, not a person. The EU AI regulation says so: if you talk to a program, we have to tell you.

It is an AI system, not a person, and it can be wrong. For up-to-date and correct information, ask the team.

To produce the reply, the text of the message is sent to Mistral AI (France, European Union). It does not leave the European Economic Area. The browser does not talk to Mistral: our server does.

Copies of the chat stay in the site archive (Conversations, in the admin). If you left contact details, there is also a row among the requests, which is the work queue. You can ask us to delete them as with the other data.

Why I handle them

To reply to your request and, if needed, to give you the quote or the visit you asked for. The legal basis is pre-contractual steps taken at your request and your consent, which you give by ticking the box on the form.

I do not use your data to send you advertising, and I do not pass them on or sell them.

How long I keep them

Requests are kept for 24 months from when they are sent, long enough to follow the job and any later warranty visits. After that they are deleted.

If a request becomes a business relationship, the tax documents that follow are kept for the period the law requires, regardless of this notice.

Where they go and who sees them

Messages are saved in the site database, hosted on a server in Europe provided by OVH SAS, which acts as processor. There is no transfer of data outside the European Economic Area, except when the Telegram notice is on: an alert when a request, a chat or a review arrives goes through the servers of Telegram Messenger Inc. If you open Google Maps, the browser talks to Google, not to this site.

Only I read them. Access is protected by a password and the connection to the site is encrypted (HTTPS).

Your rights

At any time you can ask me to:

• know which of your data I have and receive a copy;
• correct them, if they are wrong;
• delete them;
• limit or object to the processing;
• withdraw consent, without undoing what was done before.

Just ask in one of the ways above: deletion is immediate and costs you nothing. If you think your data is handled wrongly, you can contact the Italian data protection authority (garanteprivacy.it).