1. Scope and publisher identity
This policy describes the static website at scenegardenfreshsgn.rest. The displayed publisher, Scenegardenfreshsgn Studio S.r.l., company reference SGN-2026-001, and Via Brera 28, 20121 Milano, Italy, are illustrative identity details supplied for this website design. They are not evidence of an incorporated company, a verified registered office or an operating mailbox. A live operator must replace these details and confirm its actual processing arrangements before relying on this notice.
The designated privacy and DPO enquiry channel is [email protected]. This is a role-based contact address, not a claim that a statutory Data Protection Officer has been appointed. General enquiries can use the contact page.
2. Information handled by the site
The website has no accounts, checkout, newsletter service, advertising pixels or embedded third-party maps. Its own JavaScript does not transmit contact form fields to a server. Name, email, topic and message are processed in your browser to validate input and prepare an email link. They are not placed in local storage. If you open and send the prepared email, your email application and provider process that correspondence under their own arrangements.
Like other websites, a deployed version necessarily involves network requests. A hosting provider may process IP addresses, requested paths, timestamps, browser information and security logs. No particular hosting provider or log retention period can be identified from these static files alone. The live operator must disclose relevant deployment-specific details.
Homepage photographs load directly from images.unsplash.com. When your browser requests a photograph, the image provider receives your IP address and technical request information, such as the requested image URL and browser headers. Image requests use a no-referrer policy so the page URL is not sent in the Referer header. These requests occur as images load and are not controlled by the optional analytics or functional preference switches.
3. Purposes and legal bases
Remembering a privacy selection supports the essential function of respecting that selection. If an operator receives an enquiry, responding may rely on legitimate interests in correspondence or on steps requested before a contract, depending on the message. Security logging may rely on legitimate interests in protecting the service, subject to necessity and balancing. Processing required by law uses the applicable legal obligation.
Externally hosted image requests deliver the photographs used in the editorial layout. The live operator must assess and document an appropriate legal basis for this delivery, including any reliance on legitimate interests and any applicable consent requirements. The image provider’s current handling of request data must also be reviewed before launch.
Optional analytics or functional services would require appropriate assessment and, where required, prior consent. None is installed in this build. Selecting “Accept All” does not activate an undisclosed service. A materially different future use requires an updated notice and any necessary fresh consent.
4. Cookies, processors and international transfers
The site stores one local browser preference record, described in the cookie policy. Its own code does not set tracking cookies. Fonts, styles, scripts and the schematic map are supplied by the site; homepage photographs are delivered by Unsplash’s image service. External links take you to other sites only when you choose to follow them, but embedded photograph requests happen automatically as those images load.
For the image provider’s practices, consult the Unsplash privacy policy. This site does not establish the provider’s request-log retention period or all locations where image-request information may be processed.
Potential processors for a live deployment include hosting and email providers. No provider is represented here as contracted or approved. The operator must establish suitable processing terms, identify relevant recipients, assess the role of its image-delivery provider and assess any transfers outside the European Economic Area. Where required, transfers need an adequacy decision or appropriate safeguards, such as applicable standard contractual clauses.
5. Retention and security
The consent record is treated as valid for 180 days. Expired records are removed on a subsequent visit; browser data may remain until then or until you clear it. Unsent form values are not intentionally persisted by this site, although your browser may offer autofill or restore a page. For an operating mailbox, ordinary enquiries should be deleted when no longer needed, with a proposed review at twelve months after closure unless law or a dispute justifies longer retention. That is an intended policy, not a verified description of an external provider.
6. Your rights and complaints
Where GDPR applies, you may request access, correction, erasure, restriction, portability where applicable, and object to processing based on legitimate interests. Consent can be withdrawn through footer preferences without affecting prior lawful processing. You may complain to the Garante per la protezione dei dati personali or your competent supervisory authority; see garanteprivacy.it.
Where the CCPA or CPRA applies, eligible California residents may have rights to know, access, correct and delete personal information, and to opt out of sale or sharing without discriminatory treatment. This static build neither sells nor shares personal information for cross-context behavioural advertising. Applicable requests should be handled within statutory deadlines, with proportionate identity checks. Do not send identity documents in an initial enquiry. This site is not directed to children and does not intentionally solicit their personal information.