Privacy Policy

1. Data Controller Identification

Showzawonderhive S.r.l., an Italian limited liability company registered with the Milan Chamber of Commerce under Partita IVA / Codice Fiscale IT-09841280963 and REA MI-2541890, having its registered operational atelier at Via Fiori Chiari 18, 20121 Milano (MI), Italy ("Showzawonderhive", "Atelier", "we", "us", or "our"), is the Data Controller responsible for the processing of personal information collected through showzawonderhive.lifestyle.

2. Scope and Categories of Personal Data Collected

We strictly limit the collection of personal data to what is directly necessary to execute luxury floristry services, provide quotations for destination events, process atelier masterclass registrations, and maintain site functionality. The categories of information processed include:

• Identification & Contact Data: Full name, professional title, corporate affiliation, billing address, delivery venue, electronic mail address, and telephone number when voluntarily submitted via our consultation request forms.
• Event & Commission Specifications: Wedding dates, spatial venue blueprints, floral color preferences, guest counts, and budgetary expectations provided during pre-production dialogues.
• Technical & Connection Telemetry: Anonymized Internet Protocol (IP) addresses, device architecture, operating system version, browser user agent, referral URLs, and session timestamps gathered through secure server logs and technical cookies.

3. Legal Grounds and Processing Objectives

In adherence to Article 6 of Regulation (EU) 2016/679 (General Data Protection Regulation or "GDPR"), our processing operations are grounded in the following lawful bases:

• Contractual Performance (Art. 6(1)(b) GDPR): To draft bespoke floral commission proposals, organize destination logistical transports to Lake Como and Lombardy venues, deliver couture bouquet orders, and confirm reservations for our Brera masterclass benches.
• Legal Compliance (Art. 6(1)(c) GDPR): To satisfy Italian statutory fiscal obligations, VAT reporting under Agenzia delle Entrate rules, and invoicing record-keeping mandates.
• Legitimate Interests (Art. 6(1)(f) GDPR): To secure our technical infrastructure, prevent digital abuse, evaluate aggregate site engagement, and protect our proprietary floral intellectual designs.
• Explicit Consent (Art. 6(1)(a) GDPR): To deploy non-essential analytical cookies as authorized through our interactive cookie consent banner.

4. Third-Party Sub-Processors and International Transfers

Showzawonderhive does not sell, lease, or monetize client personal data to brokers or advertising networks. We transmit data strictly to vetted sub-processors essential to our operations:

• Hosting Infrastructure: Cloud hosting nodes located within the European Economic Area (EEA) adhering to ISO/IEC 27001 standards.
• Logistical Couriers: Climate-controlled courier services based in Milan, provided only with recipient names and delivery addresses for the sole purpose of transporting living floral arrangements.
• Accounting & Auditing: Certified Italian commercialisti (accountants) bound by statutory legal confidentiality rules.

Where technical data must be processed outside the EEA, transfers are governed by European Commission Standard Contractual Clauses (SCCs) to ensure an equivalent standard of protection.

5. Data Retention Schedules

Personal data is retained only for the duration required to achieve the purpose for which it was gathered. Specifically: (a) General inquiry data without an ensuing contractual agreement is permanently purged after 180 days; (b) Contractual, billing, and tax documentation is maintained for ten (10) years in accordance with Article 2220 of the Italian Civil Code; (c) Masterclass student registration logs are held for 24 months post-course completion to support certificate validation and alumni invitations.

6. Your Rights Under GDPR and CCPA/CPRA

As a data subject resident in the European Union or applicable United States jurisdictions (such as California under CCPA/CPRA), you possess comprehensive rights regarding your personal information:

• Right of Access & Portability: Obtain confirmation regarding whether your data is being processed and receive a structured machine-readable export.
• Right of Rectification & Erasure: Request the correction of inaccurate details or the absolute deletion of your records ("Right to be Forgotten"), subject to statutory record-retention laws.
• Right to Restrict or Object: Limit the scope of data processing or object entirely to processing carried out under legitimate interest grounds.
• Right to Withdraw Consent: Revoke cookie or communication consent at any time without retroactive effect.
• Right to Lodge a Complaint: File a formal grievance with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it) or your local territorial supervisory body.

7. Data Protection Officer (DPO) and Inquiries

To exercise any of the statutory rights above or submit questions regarding this policy, contact our compliance office at: Showzawonderhive S.r.l., Attn: Data Protection Officer, Via Fiori Chiari 18, 20121 Milano (MI), Italy, or via electronic mail at: [email protected]. Inquiries are resolved within thirty (30) calendar days free of charge.