DATA PROTECTION

1. Controller responsible for data processing
The controller responsible for the collection, processing, and use of your personal data in accordance with the GDPR and the Italian Data Protection Act (Codice della Privacy) is:
Norbert Merler, Mühlenweg 1A, I-39040 Waidbruck, Email: gardenaliving@gmail.com

2. Legal bases for processing
Your data is processed on the basis of your consent (Art. 6(1)(a) GDPR), for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), and for the purposes of our legitimate interests (Art. 6(1)(f) GDPR), in particular to ensure the security and optimization of our online services.

3. Collection and storage of personal data

• Contact: If you contact us by email or telephone, we store your data solely for the purpose of handling your request.

• Newsletter: If you subscribe, we use your email address to send you information. You may unsubscribe at any time (right of withdrawal).

• Server log files: Our provider Hostinger automatically collects data (IP address, browser type) that is technically necessary to ensure the secure operation of the website.
  

4. Analysis and advertising tools (tracking)
Provided that you have given your consent via our cookie banner, we use:

• Google Analytics (GA4): to analyze website usage. IP addresses are anonymized.

• Meta Pixel: to measure advertising effectiveness and display relevant advertisements on Facebook/Instagram. You may deactivate these services at any time via the cookie settings.
  

5. Your rights as a data subject
You have the right to access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and withdrawal of consent at any time. To exercise these rights, please contact us at gardenaliving@gmail.com. You also have the right to lodge a complaint with the competent supervisory authority (Garante per la protezione dei dati personali).

6. Data security
We implement technical security measures to protect your data against accidental or intentional manipulation, loss, or unauthorized access by third parties.