1. Privacy notice
This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and applicable Italian law, to anyone browsing the website medenagan.eu and anyone who contacts us through the channels indicated.
1.1 Data controller
The data controller is Medèn Àgan (proprietor: Vincenzo Raia), with registered address at Via Spirito Santo, 49 — 80049 Somma Vesuviana (NA).
Email: info@medenagan.eu · Tel.
+39 335 5277 248
1.2 Types of data processed
- Browsing data: IP address, date/time of the request, page visited, browser user agent and similar technical data, which may be recorded in the hosting server logs for security and site operation.
- Data provided voluntarily: if you use the Contact form or write to us by email/phone, we process the data you enter (e.g. name, email, company, phone, message).
- Third-party fonts: the site loads typefaces from Google Fonts; the request may involve transmission of technical data (IP, user agent) to Google Ireland Ltd / Google LLC under their respective notices.
1.3 Purposes and legal bases
- Provide and protect the site (Art. 6(1)(f) GDPR — legitimate interest in security and proper operation).
- Respond to requests sent via form, email or phone (Art. 6(1)(b) GDPR — pre-contractual steps / handling of the data subject’s request; Art. 6(1)(f) where applicable).
- Comply with legal obligations, if and when necessary (Art. 6(1)(c) GDPR).
We do not use data collected through this site for advertising profiling or unsolicited automated marketing.
1.4 Processing methods and retention periods
Data are processed with electronic tools and appropriate organisational measures. Browsing logs, if present, are retained for the time strictly necessary for security and technical administration (as a rule no more than 12 months, unless needed for defence or legal obligations). Contact messages are retained for the time useful to handle the request and any ensuing relationship, and in any case no longer than required by applicable law.
1.5 Recipients and transfers
Data may be accessed by authorised staff of the Controller and, where necessary, by providers of technical services (hosting, email, fonts), appointed as processors where required. Any transfers outside the EU take place only with adequate safeguards under the GDPR (e.g. adequacy decisions or standard contractual clauses).
1.6 Nature of provision
Browsing the public site does not require registration. Providing data in the Contact form is optional, but necessary for us to reply: without an email address (or other contact detail) we cannot handle the request.