Privacy Policy

Information under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 14 November 2026. This is a translation; in case of doubt the Italian version prevails.

1. Data controller

DOMA S.r.l., Via B. Cairoli 12, 63100 Ascoli Piceno (AP), Italy, VAT IT02555300447, REA AP277678.
Email: info@doma.casa

The controller has not appointed a Data Protection Officer (DPO), as it is not required to do so.

2. What data we process, why and for how long

This website has no contact forms, requires no registration and sells nothing online. The only data processed is described below.

2.1 Browsing and technical logs (hosting)

  • Data: IP address, date and time of the request, page requested, browser and operating system type, server response code.
  • Purpose: delivering the website, keeping it secure (e.g. against abuse and attacks) and fixing faults.
  • Legal basis: the controller's legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR).
  • Who processes it: the website is hosted by Vercel Inc. (United States), acting as processor.
  • Retention: for a limited period, according to the hosting provider's settings, unless needed to investigate offences or abuse.

2.2 Contact via WhatsApp, Instagram and email

The website only contains links to write to us on WhatsApp, on Instagram or by email. Clicking a link sends no data to the controller: data reaches the controller only if you choose to send a message.

  • Data: name, phone number or username, email address, profile picture and the content of the messages you decide to send.
  • Purpose: answering your requests for information or quotes and managing any relationship that follows.
  • Legal basis: steps taken at your request before entering into a contract, or performance of a contract (Art. 6(1)(b) GDPR); for general enquiries, the controller's legitimate interest in replying (Art. 6(1)(f) GDPR).
  • Retention: as long as needed to handle the request; if a contract follows, for its duration and then for the periods required by law (e.g. 10 years for accounting and tax records).
  • Platforms: WhatsApp and Instagram are Meta services (WhatsApp Ireland Limited and Meta Platforms Ireland Limited, Dublin, Ireland), which process data as independent controllers under their own policies: WhatsApp, Instagram.

2.3 Visitor statistics (Google Analytics)

Only if you accept it in the cookie banner, the website loads the Google tag (Google Analytics) to measure, in aggregate form, how the site is used (pages viewed, source, device). Without consent the tag is not loaded and no statistics cookie is set. The website uses Google Consent Mode v2 to pass your choice on to Google.

  • Data: online identifiers (cookies), IP address (not logged by Google Analytics 4), device, browser and on-site browsing data.
  • Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time.
  • Who processes it: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), as processor.
  • Retention: for the retention period set in the controller's Google Analytics account, no longer than 14 months; cookies last as shown in the Cookie Policy.

2.4 Cookie choice

To remember your cookie choice the website stores a technical cookie (cc_cookie) in your browser, which needs no consent. Details in the Cookie Policy.

2.5 Fonts and external resources

Fonts are served from the website's own server: visiting the site makes no calls to Google Fonts or other third-party services, except as described above.

3. Whether you must provide data

Browsing the website requires no data. Writing to us is optional, but without your contact details we cannot reply.

4. Recipients

Data may be processed by people authorised by the controller and by the providers listed above (Vercel, Google), acting as processors under agreements pursuant to Art. 28 GDPR. It may also be disclosed to advisers (e.g. accountant) or authorities where required by law. Data is not published or sold.

5. Transfers outside the European Union

Vercel Inc. and Google LLC (part of Google Ireland's group) are based in the United States. Transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, in which both companies participate, and on the Standard Contractual Clauses approved by the European Commission.

6. Automated decision-making

Data is not used for decisions based solely on automated processing, nor for profiling.

7. Your rights

Within the limits of Articles 15–22 GDPR you may at any time:

  • access your data and receive a copy;
  • have it corrected or updated;
  • have it erased or its processing restricted;
  • object to processing based on legitimate interest;
  • receive the data you provided in a structured, machine-readable format (portability);
  • withdraw consent, without affecting the lawfulness of processing before withdrawal. For cookies you can do so via change cookie preferences.

To exercise your rights write to info@doma.casa. Requests are free of charge; we will reply within one month.

8. Complaints

If you believe the processing infringes the GDPR you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work, or take legal action.

9. Changes

This policy may be updated, for example if the services used by the website change. The current version is always published on this page, with the date of the last update.