Skip to content
Contact me

Privacy policy

Last updated: 8 October 2026

This notice explains how the personal data of visitors to malza.it and of people who contact me is processed, under Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003.

Data controller

Malzani Gianfranco, sole proprietorship trading as “Malza”, VAT no. 03072570991, Genoa (Italy).
Email: info@malza.it · Phone/WhatsApp: +39 346 124 2412

What data I process

  • Browsing data: to run the website, the hosting provider logs technical data such as IP address, browser type, date and time of the request.
  • Data you send me: through the contact form (name, phone, optional email, reason, night, date, number of people, message) or by messaging me on WhatsApp, email or Instagram.
  • Images: photos taken during the nights and published on the website and my social profiles.

Why I process it and on what legal basis

  • Answering your requests (bookings, information, tickets, partnerships): pre-contractual measures taken at your request and your consent (Art. 6.1.b and 6.1.a GDPR).
  • Running the website securely: legitimate interest (Art. 6.1.f GDPR).
  • Complying with legal obligations, e.g. tax: Art. 6.1.c GDPR.
  • Publishing photos of the nights: based on consent and signed releases (Art. 6.1.a GDPR).

I don’t use your data for profiling or automated decision-making, and I don’t sell it to anyone.

Minors

Gold and Middle House are parties for minors. Published photos are covered by a signed release. If you, or your son or daughter, appear in a photo and want it removed, message me on WhatsApp at +39 346 124 2412 or email info@malza.it: requests are handled right away.

The contact form is meant for adults and parents. If you are under 14, please ask a parent to contact me.

Who I share data with

  • Netlify, Inc. (website hosting and contact form), acting as data processor. Netlify is based in the United States: transfers rely on the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission.
  • Aruba S.p.A., provider of the info@malza.it mailbox.
  • The venues where the nights take place, only as strictly necessary to handle your booking (e.g. your name for the guest list or table).
  • Authorities and advisers (e.g. accountant) where required by law.

If you message me on WhatsApp or Instagram, those services are run by Meta Platforms as an independent controller, under their own privacy policies.

How long I keep it

  • Form requests and messages: as long as needed to handle the request and no longer than 24 months, unless the law requires otherwise.
  • Browsing data: for the period set by the hosting provider for technical and security purposes.
  • Photos: as long as they are published or until you ask for removal.

Your rights

You can ask at any time to access, correct or delete your data, restrict or object to processing, receive it in a portable format and withdraw your consent (Arts. 15–22 GDPR) by emailing info@malza.it. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Cookies

The website uses no profiling or analytics cookies. Full details are in the cookie policy.

Changes

This notice may be updated. The date of the last update is shown at the top.