Skip to content

Privacy Policy

Last updated: 5 October 2026

This notice explains which personal data the website www.casileecasile.it collects, why, for how long and what your rights are, under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003.

1. Data controller

Casileecasile srl
Via Tortona, 9 – 20144 Milan (MI), Italy
VAT no. 10281080159
Phone: +39 02466299
Email: direzione@casileecasile.it

2. What data we process and why

2.1 Browsing data

The servers hosting the website automatically record technical information on each visit (IP address, date and time, requested page, browser and operating system), only to run the website, protect it from abuse and fix technical issues.

  • Legal basis: our legitimate interest in the security and proper functioning of the website (Art. 6(1)(f) GDPR).
  • Retention: no longer than 30 days, unless needed to investigate offences.

2.2 Contact form

If you write to us using the form on the Contact page, we process your first name, last name, email address and message, only to reply and follow up on your request.

  • Legal basis: steps taken at your request before entering into a contract, or our legitimate interest in replying to general enquiries (Art. 6(1)(b) and (f) GDPR).
  • Providing data: name and email are required to reply.
  • Retention: messages are automatically deleted from the website after 24 months; email correspondence may be kept longer if it becomes part of a business relationship or if required by law.

Please do not include special categories of data (e.g. health data) in your message.

2.3 Record of cookie choices

When you choose which cookies to accept, the website stores your choice on your device and keeps an anonymous copy (random choice ID, accepted categories, date, policy version) so that we can prove we respected your preferences.

  • Legal basis: legal obligation and legitimate interest in demonstrating compliance (Art. 6(1)(c) and (f), Art. 7(1) GDPR).
  • Retention: 24 months, then automatically deleted.

2.4 Content from other platforms (only with your consent)

Some pages show content from external services. It is loaded only if you accept it in the cookie panel; until then you see an empty box in its place.

  • YouTube videos (Google Ireland Limited) on the Video page, in “privacy-enhanced mode” (youtube-nocookie.com).
  • Google Maps (Google Ireland Limited) on the Contact page.

When loaded, Google receives your IP address and usage data and may use cookies or similar tools according to its privacy policy.

  • Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of Legislative Decree 196/2003), which you can withdraw at any time.

2.5 Virtual assistant (chat) (only with your consent)

The website offers an AI-based virtual assistant provided by Chatbase (Chatbase, Inc., United States). The chat window is loaded only if you accept the “Virtual assistant” category. The messages you write are processed by the provider to generate replies. Please do not share unnecessary personal data or special categories of data in the chat. Replies are generated automatically and may contain errors: for important information please write or call us.

  • Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

3. Who receives the data

Data is processed by authorised staff of the controller and by providers acting as processors (Art. 28 GDPR):

  • the infrastructure and server provider hosting the website (Akamai Technologies / Linode, servers in Milan, European Union) and the company providing its technical management;
  • Elastic Email Inc. for sending the emails generated by the contact form;
  • Google Ireland Limited and Chatbase, Inc. for the services described in sections 2.4 and 2.5, only with your consent.

Data is never sold or disclosed to the public.

4. Transfers outside the European Union

Some providers (Google, Chatbase, Elastic Email) may process data in the United States or other non-EU countries. Such transfers take place with the safeguards set out in Articles 44 et seq. GDPR: adequacy decision (EU-U.S. Data Privacy Framework) for certified providers, or standard contractual clauses approved by the European Commission.

5. Your rights

You may at any time request access to, rectification or erasure of your data, restriction of processing, data portability, and object to processing based on legitimate interest (Articles 15-22 GDPR). You can withdraw consent at any time, without affecting processing already carried out, via the “Cookie preferences” link at the bottom of every page.

To exercise your rights write to direzione@casileecasile.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

6. Security

The website is served only over an encrypted connection (HTTPS); servers are kept up to date and protected, and access to the administration area is restricted to authorised people.

7. Cookies

For details on cookies and similar tools read the Cookie Policy.

8. Changes

This notice may be updated; the date of the last change is shown at the top. In case of significant changes we will ask for your cookie preferences again.