# Privacy policy

> How Vi.Da Affila handles data collected through the website, contact form and virtual assistant: legal bases, retention and your rights.

Last updated: 13 November 2026.

## Data controller

The controller is Vida Affila di D'Amore Vincenzo, located at Via Benedetto Croce 4, 80014 Giugliano in Campania (NA), VAT number IT08928721219. For any privacy request write to vidaaffila@libero.it.

## What data we handle and why

### Contact form

If you fill in the form you give us your name, email, phone number (optional) and your message. We use them only to reply. Legal basis: steps taken at your request before a contract, and our legitimate interest in answering your request (Art. 6(1)(b) and (f) GDPR). Emails are sent through Resend. You receive an automatic reply with fixed text: it does not repeat what you wrote.

### Virtual assistant

The site has an assistant based on artificial intelligence. It tells you at the start that you are talking to an automated system and not to a person. It uses these models through Vercel AI Gateway: Claude by Anthropic and, if that fails, GPT by OpenAI. We ask the providers not to retain data (zero data retention). The chat uses no cookies. The conversation stays only in your browser tab (sessionStorage) and disappears when you close it: we do not store it on our servers. With the "Personalized assistant" consent, each message also sends the pages you saw in this tab, the sections you reached and the links you opened, so the assistant can answer in context (legal basis: consent, Art. 6(1)(a)). You can withdraw it at any time in "Privacy settings". What you type in the chat goes to the model to generate the answer, also your name and email if you ask to be contacted. Before the contact request reaches us, we show you the data, then we handle it as we do the contact form. Legal basis: legitimate interest in giving information about the site (Art. 6(1)(f)). Do not type sensitive data in the chat.

### Videos and maps

YouTube videos and Google Maps load only after you consent to the "experience" category and click the content. Before that, no third-party server is contacted.

### Bot protection

On forms we use Vercel BotID to block automated requests. It handles technical request data for security (legitimate interest, Art. 6(1)(f)).

### Technical browsing data

Our hosting provider, Vercel, logs technical data such as IP address and server requests to run and protect the site.

## Recipients and processors

- Vercel Inc. (hosting, AI Gateway, BotID)
- Resend (sending form emails)
- Anthropic and OpenAI (assistant models, through Vercel AI Gateway)
- Google (only if you consent to YouTube or Maps)

Some providers are outside the European Economic Area. Transfers rely on the safeguards required by the GDPR: standard contractual clauses or the provider's Data Privacy Framework certification.

## How long we keep data

- Form messages and contact requests: 24 months, then we delete them.
- Assistant conversation: not kept by us.
- Your cookie choice: 12 months (the default of the consent tool) unless configured otherwise, or until you change it.

## Your rights

You can ask for access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), and object to processing (21). You can withdraw consent at any time, without affecting processing already done. We make no decisions based solely on automated processing with legal effects on you (Art. 22). To exercise your rights write to vidaaffila@libero.it: we reply within one month.

## Complaint to the supervisory authority

If you think the processing breaks the law, you can complain to the Italian data protection authority, the Garante (www.garanteprivacy.it), or to the authority of your country.

## Updates

We may update this policy. The date above shows the last change.