Privacy Policy

1. Data Controller

The Data Controller of personal data collected through this website is the company managing the Damai Event Garden venue:

Note: The registered corporate office of Fiordacqua S.r.l. in Naples is distinct from the Damai Event Garden event venue in Castel Volturno.

2. Types of Data Processed and Collection Methods

The Controller processes the following categories of personal data:

A. Inquiries submitted via website form and WhatsApp

By filling in the contact form or using the direct WhatsApp buttons, the user voluntarily provides identification details including: first name, last name, phone number, email address, event type, estimated date, expected guest count, and message notes. Such details are processed exclusively to prepare custom proposals and respond to inquiries.

B. Telephone, email and messaging contacts

Voluntary messages or phone calls to our numbers entail the acquisition of caller numbers or sender addresses required to reply and manage the request.

C. Booking and site-visit arrangements

When scheduling venue visits or confirming event reservations, data necessary for agreement formalization and statutory tax/accounting compliance is processed.

D. Technical browsing data and security logs

During normal operation, web hosting and CDN infrastructure (Vercel Inc.) collect essential connection telemetry (e.g. IP address, browser type, timestamp, requested URI, firewall logs) solely for performance monitoring, network diagnostics, and cybersecurity threat mitigation.

E. Google Tag Manager and Google Analytics 4 (GA4)

The website implements the Google Tag Manager container (GTM-W789XZLJ) integrated with Google Consent Mode v2.

• Default status: upon arrival, all advertising tags (ad_storage, ad_user_data, ad_personalization) and analytical storage (analytics_storage) are strictly initialized in denied mode.
• Conditional activation: Google Analytics 4 tracking and measurement cookies (_ga, _ga_*) fire only if the visitor gives explicit consent by clicking "Accept all" on our cookie banner.

3. Legal Bases for Processing

• Pre-contractual and contractual measures (Art. 6.1.b GDPR): handling inquiries, quotes, event planning, and date availability.
• Legal compliance (Art. 6.1.c GDPR): accounting, billing, and mandatory statutory record-keeping.
• Legitimate interest (Art. 6.1.f GDPR): ensuring website infrastructure security and preventing malicious activity.
• Explicit consent (Art. 6.1.a GDPR): activating analytical or marketing cookies via GA4. Consent may be updated or withdrawn at any time.

4. Data Retention Periods

• Inquiry and quote data: stored for the time needed to process your request, up to 24 months from last interaction unless a contract is executed.
• Contractual and accounting records: retained for 10 years in compliance with Italian statutory provisions.
• Server security logs: retained for up to 30 days by hosting providers unless required for incident investigation.
• Google Analytics data: retained for up to 14 months under standard Google Analytics data retention policies.

5. Recipients and International Data Transfers

Personal data is not sold or publicly disclosed. It may be shared exclusively with designated Data Processors (Art. 28 GDPR) or authorized personnel, including:

• Cloud hosting and content delivery providers (Vercel Inc.);
• Accountants, legal advisors, and IT support services;
• Messaging providers (WhatsApp / Meta Platforms) when the user initiates a conversation on that platform.

Any transfer outside the EU/EEA is conducted under European Commission adequacy decisions (such as the EU-US Data Privacy Framework) or Standard Contractual Clauses (SCCs).

6. Data Subject Rights

Under Articles 15–22 of the GDPR, you have the right to:

• Access your personal data and verify processing details;
• Request rectification of inaccurate data or completion of incomplete information;
• Request deletion ("right to be forgotten");
• Request restriction of processing or object to processing on legitimate grounds;
• Request data portability in a structured, machine-readable format;
• Withdraw consent at any time for analytical and tracking technologies.

To exercise your rights, you can send a written request to:

7. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with your local supervisory authority or the Italian Data Protection Authority: