Privacy Policy
Last updated: 5 April 2025
This policy describes how immersive.cafe ("the Site") collects and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Italian Privacy Code (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018).
1. Data Controller
Stefano Tumminello
Email: info@immersive.cafe
2. What data we process
2.1 Server logs
The Site is hosted on OVHcloud shared hosting (OVH SAS, 2 rue Kellermann, 59100 Roubaix, France). Like all web servers, the hosting infrastructure automatically records certain technical data when you visit: IP address, date and time of access, pages requested, HTTP status codes, browser type, and referring URL. These logs are generated and retained by OVHcloud as part of its hosting service; the Data Controller does not have direct access to them on the current hosting plan.
2.2 Email correspondence
If you contact us at info@immersive.cafe, we will process the personal data you voluntarily provide (e.g. name, email address, message content) solely to respond to your enquiry.
2.3 No cookies or tracking
The Site does not set any cookies, use analytics services, embed third-party content, or employ any form of user tracking or profiling. No cookie banner is therefore required.
3. Legal basis for processing
| Processing activity | Legal basis (Art. 6 GDPR) |
|---|---|
| Server logs (security & infrastructure) | Legitimate interest of the hosting provider (Art. 6(1)(f)) |
| Responding to email enquiries | Your consent, given by contacting us (Art. 6(1)(a)) |
4. Data sharing and sub-processors
Your data is not sold, rented, or shared with third parties for marketing purposes. The only sub-processor is:
- OVHcloud (OVH SAS) — hosting provider, based in France (EU). OVHcloud processes server-log data on our behalf under its own Data Processing Agreement.
5. International data transfers
All data is stored within the European Union (OVHcloud data centres in France). No data is transferred outside the EU/EEA.
6. Data retention
- Server logs: retained by OVHcloud according to its infrastructure policies and applicable French law (typically no longer than 12 months).
- Email correspondence: kept for as long as necessary to handle your enquiry, then deleted. In any case no longer than 24 months from the last exchange.
7. Your rights
Under the GDPR you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data ("right to be forgotten") (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3))
To exercise any of these rights, email info@immersive.cafe. We will respond within 30 days.
8. Right to lodge a complaint
If you believe your rights have been infringed, you may lodge a complaint with the Italian Data Protection Authority:
Garante per la protezione dei dati personaliPiazza Venezia 11 — 00187 Roma
www.garanteprivacy.it
Email: garante@gpdp.it
PEC: protocollo@pec.gpdp.it
9. Changes to this policy
We may update this policy if the Site's features change. The "Last updated" date at the top will be revised accordingly. Continued use of the Site after changes constitutes acceptance.