This site collects very little: it has no forms to fill in, no analytics, uses no profiling cookies and embeds no one else’s services. Nobody follows you while you read it.
Everything is set out below, as required by European Regulation 2016/679 (GDPR).
Privacy and cookies
In short
- There are no forms on the site: we collect nothing of yours, apart from the technical logs every server keeps.
- There are no profiling cookies and no analytics: that is why you don't see a consent banner.
- We embed no maps, videos, review widgets or social buttons. The links to our profiles are ordinary links: they take you elsewhere only if you click them.
- The typefaces are hosted on our own server, not called from Google.
- We do not sell, share or profile anybody's data.
Who processes your data
The data controller — who answers for this data, and whom you can contact with any request — is:
- Data controller
- Imago Cooperativa Sociale
- Via dei Palumbo 55, 73100 Lecce (LE)
- VAT no. 03060940750
- segreteria@imagocoop.it
When you write to us or call us
To get in touch, the site offers phone, WhatsApp and email. Whatever you send us that way — your name, the number or address you write from, your message — reaches us directly: the site does not collect or store it.
We use it for one thing only: replying to you. It goes on no list, we sign you up to no newsletter, and we pass it to nobody for commercial purposes.
The legal basis is Article 6(1)(b) GDPR: you are asking for information with a possible stay in mind, so the processing serves to act on your request.
WhatsApp is a Meta service, which processes its users’ data under its own privacy notice. If you prefer, you can email or call us instead.
We keep messages for 24 months from the last exchange, then delete them. If you ask us to delete them sooner, we do it straight away.
Server logs
Like every website, the server records the requests it receives: IP address, date and time, page requested, browser type. These are technical logs, and they serve to keep the site running and to notice attacks.
We do not use them to identify anyone and we do not cross-reference them with other data. The legal basis is the legitimate interest of Article 6(1)(f): keeping the site up and secure.
Who else sees your data
The site is hosted by Netlify, which processes on our behalf only the server’s technical logs, as a data processor, and solely to keep the site working.
Apart from Netlify, your data is seen by us and nobody else. If an authority required it of us by law we would have to provide it — but that is the only other case.
Does data leave the European Union?
Netlify is a United States company, so the server’s technical logs may also be processed outside the European Economic Area.
Netlify participates in the EU-U.S. Data Privacy Framework, which the European Commission has recognised as adequate: that is the basis for the transfer, under Article 45 of the GDPR.
Our agreement with them additionally provides for the European Commission's standard contractual clauses, which take over on their own should that framework be invalidated or should Netlify not renew its certification. It is the fallback safeguard, and worth knowing about: an adequacy framework between Europe and the United States has already been struck down twice.
Cookies
This site installs no profiling cookies, has no analytics tools and embeds no third-party content. That is why you see no consent banner: there is nothing to consent to.
The hosting may use strictly technical cookies, the ones needed to serve and protect the pages. For these, the Italian Data Protection Authority's guidelines require neither a banner nor prior consent.
If we ever added analytics or someone else's content, this page would change and the consent request would appear before anything was installed.
Your rights
At any time you can ask us:
- to know what data of yours we hold, and to have a copy — access and portability;
- to correct it, if it is wrong or incomplete — rectification;
- to delete it — erasure;
- to suspend its use while we check something — restriction;
- to stop using it for a given purpose — objection.
How to exercise them
Write to the controller's address above. We reply within one month, as the Regulation provides.
If you believe we are getting it wrong, you can turn to the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garante@gpdp.it — garanteprivacy.it), or to the courts.
If this notice changes
If the way we process data changes, we update this page. This version is dated 30 September 2026.