Last updated: October 2026
This Privacy Policy explains how Maedo Srls collects, uses and protects the personal data of users who visit maedosrl.com and use its services, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. The Italian version of this policy prevails in case of discrepancy.
1. Data controller
Maedo Srls
Via della Tecnica 2b — 27010 Cura Carpignano (PV), Italy
VAT IT03547250989
Email: info@maedosrl.com
Phone: +39 0382 1726094
The controller has not appointed a Data Protection Officer (DPO), as it does not fall within the cases where one is required under Art. 37 GDPR.
2. Data collected
2.1 Data provided by the user
Through the “Request an Audit Flash” form, users may provide:
- First and last name
- Email address
- Phone number (optional)
- Name, type (hotel or golf club), location and size of the property
- Role within the property (optional)
- Information about the request (free text, optional)
The same applies to data shared by writing to info@maedosrl.com or by phone.
2.2 Browsing data
While the site is in use, its systems collect technical data such as IP address, browser type, operating system and pages visited. This data is used to keep the site running and secure and, only with the user’s consent, for aggregate statistics through Google Analytics (section 5).
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to Audit Flash and contact requests | Pre-contractual measures at the data subject’s request (Art. 6.1.b GDPR) |
| Contacting the data subject about the request and related Maedo services | Consent given in the form (Art. 6.1.a GDPR) |
| Aggregate statistics on site usage (Google Analytics) | Consent through the cookie banner (Art. 6.1.a GDPR) |
| Site security and abuse prevention | Legitimate interest of the controller (Art. 6.1.f GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
Providing the data marked as mandatory in the form is necessary to process the request.
4. Retention
- Form requests and business contacts: 24 months from the last contact, unless a contractual relationship arises or the data subject requests deletion earlier.
- Browsing data (Google Analytics): according to the retention period set in Google Analytics, up to 14 months.
- Server logs: for the period set by the hosting provider for security purposes.
5. Providers and data transfers
Data is processed by the controller and by the providers listed below, appointed as data processors under Art. 28 GDPR. Data is not disclosed or transferred to third parties for their own purposes.
5.1 Aruba S.p.A. (hosting and email)
The site and the info@maedosrl.com mailbox are hosted on Aruba S.p.A. infrastructure in Italy. Requests sent through the form reach the controller by email. Privacy notice: aruba.it
5.2 Brevo (contact management)
Data sent through the form is stored in the controller’s contact database on Brevo (Sendinblue SAS, France) to manage the request and any follow-up. Data is stored in the European Union. Privacy notice: brevo.com
5.3 Google Analytics (statistics)
The site uses Google Analytics 4 (Google Ireland Ltd.), integrated through Site Kit by Google, only after consent is given in the cookie banner. Data may be transferred to the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses. Privacy notice: policies.google.com/privacy
5.4 Cookie consent management
Choices made in the cookie banner are recorded through the Cookie Compliance platform (Hu-manity.co), so that consent can be demonstrated. More details in the Cookie Policy.
6. Your rights
Under Arts. 15–22 GDPR, data subjects have the right to:
- Access: obtain confirmation of processing and a copy of the data
- Rectification: correct inaccurate or incomplete data
- Erasure: have the data deleted
- Restriction: restrict processing where provided by law
- Portability: receive the data in a structured, readable format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing
To exercise these rights, write to info@maedosrl.com. Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (garanteprivacy.it).
7. Cookies
The site uses technical cookies required for it to work and, only with consent, analytics cookies. Types, duration and how to manage them are described in the Cookie Policy.
8. Changes
The controller may update this Privacy Policy at any time. Changes are published on this page and the date at the top is updated.
Maedo Srls — Via della Tecnica 2b, 27010 Cura Carpignano (PV), Italy — VAT IT03547250989 — info@maedosrl.com