Privacy and cookies
Privacy and cookie notice
Here we explain in plain words what data this site collects, why, who sees it and how long we keep it. This is the notice required by Articles 13 and 14 of the EU General Data Protection Regulation 2016/679 (GDPR). The Italian version is the reference text.
Last updated: 5 November 2026
Who handles your data
The data controller is Casa Martino ODV, a volunteer organisation listed in the Italian Third Sector Register (RUNTS), tax code 93131570611, based at Via San Carlo 125, 81100 Caserta (CE).
For any privacy question, or to exercise your rights, write to eudemoniafelicita.2022@gmail.com or call 0823 170 3238.
Casa Martino has not appointed a Data Protection Officer (DPO).
What data we collect
When you use the contact form:
- who you want to write to (Office or President);
- your name, if you choose to give it (optional);
- your email, if you choose to give it (optional: without it we cannot reply);
- the text of your message;
- the two consents you give by ticking the boxes, with the date and time you gave them.
In your message you may choose to tell us about your health, for example your relationship with food, your body or your weight. By law these are "special categories of data" (Article 9 GDPR): we only process them with your explicit consent, which you give with the second box in the form.
If you contact us outside the site (email, phone, WhatsApp), we handle what you send us under the same rules as this page. WhatsApp is a Meta service that processes data under its own rules.
Like every website, the service hosting it automatically records some technical data: IP address, date and time, page requested, browser type. This keeps the site working and protects it from abuse. For example, to stop the form being used to flood us with messages, we count how many messages come from the same IP address: the count stays only in the server memory for 10 minutes and is never saved. We do not use this data to find out who you are.
There are no accounts, online payments, profiling or advertising on this site.
Why we use it and on what legal basis
- To read your message, reply if you left a contact and, if you ask, offer listening and guidance. Legal basis: your consent (Article 6(1)(a) GDPR) and, for health data, your explicit consent (Article 9(2)(a)).
- To keep the site working and protect it from abuse (technical data). Legal basis: our legitimate interest in keeping the site secure (Article 6(1)(f)).
- To comply with legal obligations or requests from the authorities (Article 6(1)(c)).
Giving us your data is your choice. Without the two consents the form cannot be sent, but you can always phone us. We do not use your data for automated decisions or to send you advertising.
Who sees your data
Your message is read only by authorised people at Casa Martino: if you write to the Office, whoever manages the Office mailbox; if you write to the President, only the President. We do not sell your data or give it to anyone for advertising.
To run the site and the email we rely on these technical providers:
- Netlify, Inc. (United States): hosts the site and records technical browsing data;
- Resend, Inc. (United States): delivers form messages by email;
- Google (Gmail): the mailbox that receives messages for the Office;
- Italiaonline S.p.A. (Libero Mail): the mailbox that receives messages for the President.
Data may be disclosed to the authorities only when required by law.
Data transferred outside the European Union
Netlify, Resend and Google are based in the United States. Data is transferred on the basis of the European Commission adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), for the companies that take part in it, and of the standard contractual clauses approved by the European Commission (Article 46 GDPR).
How long we keep it
- Messages: we check the mailboxes once a month. Messages that do not lead to an ongoing path are deleted within 12 months of receipt.
- If a message leads to a path of listening and support, we keep only what is needed while the path is ongoing, and then for at most 2 years after the last contact. After that, everything is deleted.
- Technical copy kept by the sending service (Resend): at most 30 days.
- Technical browsing data: for the limited time set by the hosting provider.
- Anti-abuse message count: 10 minutes, in memory only.
The site does not store messages: they only arrive in the email mailboxes.
If you are under 14
If you are under 14, ask a parent or the person who looks after you to help you write to us: under Italian law, below the age of 14 consent is given by whoever holds parental responsibility (Article 2-quinquies of the Italian Privacy Code). From 14 upwards you can write to us on your own.
Your rights
At any time you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct or complete it;
- delete it;
- restrict or object to its use;
- give it to you in a readable format so you can take it elsewhere;
- withdraw your consent: this applies from then on and does not make earlier processing unlawful.
Just write to eudemoniafelicita.2022@gmail.com. We reply within one month.
If you think your data is being handled incorrectly, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
How we protect data
The site uses an encrypted connection (HTTPS), so your message travels protected to the sending service. The site does not store messages, the recipient is chosen by our server and cannot be changed from outside, and only authorised people can access the mailboxes.
A tip: write only what you feel like sharing, and avoid writing other people's data without their permission. There is time, and there is a way, for the rest.
Changes to this page
If anything changes in how we handle data, we update this page and the date at the top.