This notice explains what personal data we collect through this website, why, for how long and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Data controller
The controller is Mappamondo S.r.l., Via Vittorio Veneto 17, 30031 Dolo (VE), VAT no. 03083980270, operator of Garage Duomo, Via Bonporti 19, Padua.
For any request about your data, write to garageduomopadova@gmail.com or call 049 656020.
What data we process and why
Contact requests
If you fill in the form on the Contact page, you send us your name, phone number and the text of your message; if you email or call us, we receive whatever data you choose to share. We use it only to reply to you and get back in touch.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Retention: as long as needed to handle the request and in any case no longer than 12 months; if a business relationship follows, the necessary data are kept for the period required by tax law (10 years).
Spam protection for the form (Cloudflare Turnstile)
To block automated submissions, the Contact page loads Cloudflare Turnstile, which checks that the form is being filled in by a person. To do so, Cloudflare receives your IP address and some characteristics of your browser and device, as described in its Turnstile privacy notice. It does not use them for advertising or to profile you. Turnstile is not loaded on any other page of the site.
Legal basis: the controller’s legitimate interest in protecting the form and the mailbox from spam (Art. 6(1)(f) GDPR). Retention: according to Cloudflare’s retention periods, for security purposes only.
Browsing data
Like any web server, the server hosting this site logs IP address, date and time, the page requested and browser type. These are needed for the site to work and stay secure (for example to detect attacks) and are not used to identify you.
Legal basis: the controller’s legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR). Retention: for the period strictly necessary, according to the hosting provider’s settings.
Visitor statistics (Google Analytics 4)
Only if you accept, we measure in aggregate form how many people visit the site, which pages they come from and which devices they use. Google Analytics 4 does not log the full IP address.
Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Retention: 14 months at most.
Advertising campaign measurement (Google Ads)
Only if you accept, we record whether a visit that came from one of our Google ads ends in a call or a request for directions, to see which ads work.
Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Retention: according to Google Ads timescales, normally no more than 90 days for conversion cookies.
Map (Google Maps)
The interactive map is loaded only if you accept the “Maps” category or click “Show the map”. Until then, no data is sent to Google.
Legal basis: consent (Art. 6(1)(a) GDPR).
Consent log
When you make a choice in the cookie banner, we keep proof of it: a random code that identifies the browser (not you), the categories accepted or rejected, date and time, the version of this notice, language, page and browser type. We do not log your IP address or any other data that identifies you.
Legal basis: legal obligation to be able to demonstrate consent (Art. 6(1)(c) and Art. 7(1) GDPR). Retention: 5 years from the choice. The log cannot be edited: every change of preference is a new entry.
What happens without consent
The site works fully even if you reject everything. The tag manager (Google Tag Manager) still loads but does not set cookies; with consent denied, Google services can only receive cookieless signals without identifiers (for example that a page was viewed), which Google uses in aggregate form. Details in the Cookie Policy.
Who receives the data
The data are not disclosed to the public or sold. They are processed on our behalf, as processors (Art. 28 GDPR), by:
- VHosting Solution S.r.l. (Via San Vito 18, 20123 Milano, Italy), the website and email hosting provider, with servers in Italy and Germany, which stores the site, the consent log and the server logs;
- Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, United States), only on the Contact page, for the form’s spam check (Turnstile);
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), for the mailbox that receives requests and, only with your consent, for Google Analytics, Google Ads and Google Maps.
The data may also be accessed by people authorised by Mappamondo S.r.l. to run the garage and the website, who are bound by confidentiality.
Transfers outside the European Union
Google may also process data in the United States. The transfer is based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (10 July 2023), in which Google participates, and on standard contractual clauses.
Cloudflare, Inc. also participates in the EU-U.S. Data Privacy Framework: data from the spam check may be processed in the United States with the same safeguards.
Your rights
You can ask at any time to access your data, correct it, erase it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. You can withdraw your cookie consent at any time via the “Cookie preferences” link at the bottom of every page, without affecting anything done before the withdrawal.
Write to garageduomopadova@gmail.com: we reply within one month. If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of the country where you live.
Other information
Providing data in the contact form is optional, but without a name and phone number we cannot call you back. Non-technical cookies are always optional. We do not make automated decisions and do not profile users. The site is not aimed at children under 14.
If this notice changes, the new version is published here with the updated date; if the services that require consent change, the banner will ask you again.
Last updated: 26 September 2026 · version 2026-09