Privacy Policy

Data controller

Maison Touareg di Mourad Dakir — Via Varesina 77, 20156 Milan (MI), Italy — VAT number 12353090967.

For any request relating to the processing of data: maison.touaregmilano@gmail.com.

What data is processed

Technical browsing data. Like any website, maisontouareg.it generates technical data at each visit — IP address, browser type, pages visited, date and time — collected automatically by the hosting provider (Netlify) to ensure the operation and security of the site. The controller does not access this data individually; it remains in the provider’s technical logs according to its own notice, available at netlify.com/privacy.

Data you provide voluntarily. If you write via WhatsApp, call or send an email to Maison Touareg, you voluntarily provide a phone number, a name and any information contained in the message, so that your request or booking can be handled. These channels (WhatsApp, phone, email) are managed directly by Maison Touareg; the content of conversations is not passed on to third parties nor used for purposes other than replying.

Google Analytics — only with consent. The site uses Google Analytics 4 only if the user gives explicit consent through the cookie banner. In that case statistical and anonymised data on the use of the site is processed (pages visited, origin, interactions with contact buttons), with the IP address anonymised. If consent is not given or is refused, Google Analytics is not activated and no data is sent to Google. Full details in the Cookie Policy.

Purposes of processing

• Replying to information requests, bookings and contacts received by phone, WhatsApp or email;
• Ensuring the technical operation and security of the site;
• If enabled with consent, understanding in aggregate and anonymous form how the site is used, in order to improve it.

Legal bases

• Performance of pre-contractual or contractual measures (Art. 6.1.b GDPR): to handle booking requests and contacts received by phone, WhatsApp or email.
• Legitimate interest (Art. 6.1.f GDPR): for the technical operation and security of the site.
• Consent (Art. 6.1.a GDPR), which can be withdrawn at any time: for the activation of Google Analytics.

Data retention

Data provided voluntarily for a request or booking is kept for as long as needed to handle the request and, unless the data subject says otherwise, no longer than 24 months from the last contact.

Data collected by Google Analytics, when active, follows the default retention setting of Google Analytics 4, equal to 14 months, which the controller can change in the Google Analytics console.

The hosting provider’s technical logs follow the retention periods indicated in the provider’s own notice.

Suppliers and external processors

• Netlify, Inc. — the site’s hosting provider. It processes technical browsing data as data processor.
• Google Ireland Limited / Google LLC — provider of Google Analytics 4, enabled only with consent. It processes statistical data as data processor, under the Google Analytics Data Processing Terms.

Transfers outside the EU

Netlify and Google may also process data on servers located outside the European Economic Area, including the United States. The transfer takes place under the Standard Contractual Clauses approved by the European Commission, adopted by both providers as a safeguard for the transfer of data.

Rights of the data subject

At any time you have the right to request from the controller, under Articles 15-22 GDPR:

• access to your personal data;
• rectification of inaccurate or incomplete data;
• erasure of data, where there are no legitimate grounds for processing it;
• restriction of processing;
• portability of the data you provided voluntarily;
• objection to processing based on legitimate interest;
• withdrawal of consent to Google Analytics at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights write to maison.touaregmilano@gmail.com.

Complaint to the supervisory authority

If you believe the processing of your data violates the GDPR, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority) — www.garanteprivacy.it.