Privacy policy

Salonia determines the purposes and the means of the processing described here, and is therefore the data controller. Any question about this notice, and any request to exercise the rights set out below, can be sent to the address published on this site; it is read by us and answered by us.

The site is static. It sets no cookies, stores nothing in your browser, embeds nothing from a third party, and serves its fonts from its own domain. What remains is what any web server has to handle in order to respond at all: our hosting provider's logs record the address the request came from, the page requested, the time, and the browser's user agent. Nothing further about your visit is recorded, and none of it is combined with any other source.

Those logs are processed for the security and the continuity of the service: diagnosing faults, and recognising abuse such as automated scanning. The legal basis is our legitimate interest under Article 6(1)(f) GDPR in operating the site safely; given how little is recorded and how briefly it is held, we do not consider that interest to override your rights. The logs are not used to profile visitors and are never used for marketing.

The address published on this site is a mailbox we read. If you write to us we keep your message and our reply, in order to respond and to manage whatever follows from it: on the basis of Article 6(1)(b) GDPR where you are contacting us about work, and of our legitimate interest under Article 6(1)(f) otherwise. Correspondence is not disclosed to anyone else, is not added to a marketing list, and is not used for any purpose other than the one you wrote about.

The contact page carries a form. What you enter (your name, your email address, your telephone number, the area you selected, a company if you give one, and the text of the message) is posted to our own server, which forwards it by email to the address published on this site and stores it nowhere else: there is no archive of enquiries separate from our mailbox. From that point the message is correspondence like any other and everything said above applies to it, including the legal bases and the retention periods. The form sets no cookies, calls no third-party service and uses no external anti-spam system: to limit automated submissions the server keeps a short-lived count in memory of the requests coming from one IP address, written to no disk and tied to no message.

Visits are counted by software we run on our own infrastructure: nothing is sent to a third party. No cookies are set and nothing is stored in your browser. What a visit records is the page, where the visit came from, an approximate country, the browser and screen size, and how quickly the page loaded. None of it identifies you, and it is not combined with anything else. The legal basis is our legitimate interest in understanding which parts of the site are useful.

Server logs are held for a short period and then deleted. Correspondence is kept for as long as the matter is live, and afterwards for the period needed to answer questions arising from it or to meet a legal obligation. Our hosting provider processes the logs on our instructions and under contract, as a data processor. No other party receives personal data from this site, and nothing is sold or disclosed for advertising.

Under Articles 15 to 22 GDPR you may ask us for access to the personal data concerning you, for its rectification or erasure, for the restriction of its processing or for its portability, and you may object to processing carried out on the basis of legitimate interest. Write to the address above and we will respond within one month. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali, or with the supervisory authority of the country in which you live.