Privacy and cookies
This page explains which personal data we process when you visit this site, write to us or use the client area, why we do it and what your rights are (art. 13 of EU Regulation 2016/679, "GDPR").
1. Data controller
Manoel Zanon, Roma (Italy), for the brands Vivaio and Bosco. For any question about your data: info@boscoagriturismo.com.
2. Which data we process and why
| Who | Data | Why | Legal basis |
|---|---|---|---|
| Site visitors | Technical browsing data: IP address, browser, pages requested, date and time | Running the site and protecting it from abuse and attacks | Legitimate interest (art. 6.1.f) |
| People who write to us (WhatsApp or e-mail) | Name, number or address, content of the message, address of the site visit | Answering, carrying out the site visit and the quote | Request of the data subject and pre-contractual measures (art. 6.1.b) |
| Clients and invited family members | Name, e-mail, password (stored only as an encrypted fingerprint), two-step verification code of the owner, location of the garden | Giving access to the client area, sending alerts, providing support | Contract (art. 6.1.b) |
| Clients' gardens | Device readings (temperature, humidity, irrigation, consumption) and camera images, if there is a camera | Automating the garden and showing it on the phone | Contract (art. 6.1.b) |
| Clients | Invoicing data | Tax and accounting obligations | Legal obligation (art. 6.1.c) |
We do not use the data for advertising, we do not sell it and we do not carry out profiling or automated decisions about you. The public demo shows only simulated gardens, with no data of real people.
3. Who sees the data
Each family sees only its own garden. The data is processed by us and by a few providers who help us deliver the service, only for that purpose:
- Hosting of the site and the data: servers at Contabo GmbH, in Germany (EU).
- Garden devices: the Shelly sensors and plugs send their readings to the Shelly Cloud (Shelly Group, Bulgaria, EU), where our server reads them.
- E-mail: the provider of the mailbox info@boscoagriturismo.com and the service that sends the invitation and alert e-mails.
- Messages: if you write to us on WhatsApp, or choose to receive the alerts on Telegram, the messages go through those services, which process them according to their own privacy notices. Telegram is based outside the EU.
- Camera: the images of the Tapo camera stay in the Tapo app (TP-Link), with the client's account.
When a provider processes data outside the European Union, the transfer takes place only with the safeguards required by the GDPR (adequacy decision or standard contractual clauses).
4. For how long
- Technical browsing data: for the time needed for the security of the site, normally no longer than 12 months.
- Requests for information without a contract: up to 12 months from the last contact.
- Client accounts and garden readings: for the whole duration of the service; when it ends, access is disabled and the data deleted within 12 months, except what the law requires us to keep.
- Invoicing data: 10 years, as required by law.
5. Cookies
The site uses only technical cookies, needed to make it work. We do not use analytics, profiling or third-party cookies, which is why we do not ask for your consent with a banner.
| Name | What it is for | Duration |
|---|---|---|
| SERRA_SID | Session: keeps you logged in to the client area and protects the forms | Until the browser is closed |
| SERRA_LANG | Remembers the language chosen for the site and the client area | 12 months |
| SERRA_TD | Remembers this device after two-step verification, only if you choose so | Up to 30 days |
The language of the site is chosen from the language of your device, which the browser sends at every visit; we do not store it, apart from the SERRA_LANG cookie.
The WhatsApp buttons are simple links: no data goes to WhatsApp until you click them. You can delete or block cookies in your browser settings at any time; without the session cookie the client area does not work.
6. Your rights
You can ask at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) or object to processing based on legitimate interest (arts. 15–22 GDPR). Just write to info@boscoagriturismo.com; we answer within one month.
If you believe the processing is not correct, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it.
7. Security
The site uses only encrypted connections (HTTPS). Passwords are never stored in plain text, only as an encrypted fingerprint (hash); the owner of each garden logs in with two-step verification; each family sees only its own data.
8. Changes
If we change the way we process data, we update this page and the date at the top.