Privacy notice
Last updated: 4 August 2026
Who processes your data
The data controller is Federico Michieletto, sole trader operating as My Dear Italy, registered office Via Carroceto 72, 04011 Aprilia (LT), business address Via della Lungaretta 27, Roma 00153 — Italian VAT no. 03364220594, REA LT-335062. For anything concerning your data write to info@mydearitaly.com.
What we collect
Only what you type into the contact form: your name, email address, phone number (optional), the reason you are writing and the message itself.
Along with the message our server records the IP address the submission comes from, the browser used, the date and time, and the choices you made on the two consent boxes. We are not hiding this: the IP address is what stops automated submissions, and recording your consent is how we can show you gave it.
That is all. No cookies, no profiling, no automated decisions about you.
Why, and on what legal basis
To reply to you. If you write asking for a quote or information, we process your data to answer: the legal basis is pre-contractual steps taken at your request (Art. 6.1.b GDPR).
To send you commercial messages. Only if you ticked the second box, which is optional and is not pre-ticked: the legal basis is your consent (Art. 6.1.a GDPR). You can withdraw it at any time by writing to the address above; withdrawing does not affect what we did before.
To keep the form working. The IP address and browser are processed on the basis of our legitimate interest in blocking automated submissions (Art. 6.1.f GDPR).
Who receives it
We do not sell your data and we do not pass it to anyone for their own purposes. It is handled on our behalf only by the suppliers that keep the site and the mail running:
DigitalOcean — the server hosting the site, in an EU data centre (Frankfurt).
Cloudflare — domain management and forwarding of mail sent to info@mydearitaly.com.
Google (Gmail) — the mailbox where we read your messages.
Those are the suppliers that handle what you send us. The site itself contacts nobody else: typefaces and photographs are hosted on our own server, so simply browsing it does not disclose your IP address to any third party.
Data leaving the European Union
Gmail and Cloudflare are US companies: the mail you send us and the technical data of your connection may also be processed outside the European Union. The transfer relies on the adequacy decisions and standard contractual clauses adopted by the European Commission.
The server hosting the site, and the database where we store enquiries, stay inside the European Union.
How long we keep it
We keep contact enquiries for 24 months from the last meaningful contact. After that they are deleted.
This is not a promise left to good intentions: the deletion is carried out by an automated job that runs on our server every night.
If you consented to commercial messages, the data needed to send them is kept until you withdraw that consent.
What you can ask us
At any time you can ask to access your data, have it corrected or erased, have its processing restricted, receive a machine-readable copy, and object to processing based on legitimate interest (Arts. 15-22 GDPR). An email to info@mydearitaly.com is enough.
If you believe your data is being mishandled you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Do you have to give it to us?
No. But without a name, an email and a message we cannot reply, and without ticking the box confirming you have read this notice the form will not send.