Green Magnolia S.r.l. a socio unico
Privacy notice
Updated: 2 October 2026 · 2026-10-02.2
1. Controller and contact details
Green Magnolia S.r.l. a socio unico
Viale Europa 77, 25087 Salò (BS), Italia
VAT: 04462660988
Email: privacy@greenmagnolia.it
2. Data and purposes
Browsing involves technical data needed to deliver pages and protect the service, such as IP address, date, requested resource and browser information.
The website code does not include advertising scripts, profiling tools or social widgets. The hosting infrastructure services described in this notice and the optional map, loaded only with your consent, are separate.
If you contact us, we use the details and information you choose to provide to reply and handle your enquiry. Avoid unnecessary sensitive data.
3. Forms and provision of data
The form prepares a draft on your device without sending its fields to a server. You can open your email application and complete sending there, or download the draft. Required fields help prepare a usable request; you may also email us directly. Providing data is optional, but we need contact details to reply.
4. Legal bases
Pre-contractual requests are handled under GDPR Art. 6(1)(b). Other relevant correspondence and website security rely on legitimate interests in replying, maintaining the service and preventing abuse (Art. 6(1)(f)), subject to individuals’ rights. Legal duties rely on Art. 6(1)(c). Technical preferences remember choices requested by the user. No general consent is required to contact us.
External maps are optional and only load after a positive choice, which can be withdrawn at any time without affecting access to the location cards.
5. Recipients and hosting
The website is hosted on OVHcloud Web Hosting at the Gravelines data centre in France. Technical copies of the files may also be replicated in Roubaix, France. Pages, images and scripts are served by this infrastructure; the website has no message database or form-submission system.
Enquiries are handled by the controller and the people it authorises, within their respective duties.
We use OVHcloud for hosting and Google Workspace for company email. The providers and their subprocessors may process data needed to deliver, secure and support these services. Hosting files in Gravelines does not mean that all processing, including email and remote support, takes place exclusively in the European Union. Provider agreements specify adequacy decisions or standard contractual clauses, where applicable, for international transfers. The relevant data processing agreements and subprocessor lists are available through the links shown here; you can ask the controller for information about the safeguards applied.
Provider documentation
6. Retention
Email enquiries are accessible only to authorised staff. We retain them for the time needed to handle the enquiry and any resulting relationship, then delete them, except where legal obligations or documented needs to protect rights require retention.
The website does not create an additional log archive: access and security logs are managed by the OVHcloud infrastructure. The retention criterion takes into account the time needed to provide the service, diagnose faults and handle security incidents, together with any applicable obligations. Technical log retention is separate from the retention of anonymised statistical reports and website file backups.
For website files, OVHcloud documents restore points from 1, 2, 3, 7 and 14 days earlier. These are technical copies for restoring the website; they do not contain an archive of visitor messages, because the website does not collect forms on the server.
OVHcloud provides technical statistics calculated from server logs after anonymisation and aggregation. They do not require an analytics script in the pages. Reports are available for up to 40 months; this period concerns statistical reports, not the retention of raw logs.
Preferences and the latest 20 choice records stay on your device and expire after six calendar months. They are not sent to the controller and do not form a central consent register.
7. External links
Instagram, Green Magnolia, Paeonia, SUNAWI and the other websites are external links. Card images are hosted locally: your browser contacts the destination only when you follow the link. That service’s notices then apply.
If you enable maps, your browser requests images from tile.openstreetmap.org, sharing at least your IP address, the site origin and technical request data with OpenStreetMap Foundation. This site does not request your GPS location. You may decline and use the cards or ordinary directions links.
8. Rights and complaints
Where GDPR Arts. 15–22 apply, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Where relevant, consent may be withdrawn without affecting the lawfulness of earlier processing. Write to the controller at the address above. You may complain to the Italian Data Protection Authority or the competent supervisory authority. The site makes no automated decisions with legal or similarly significant effects.
Managing and demonstrating privacy choices
On public domains hosted by OVHcloud, when you make or change a choice, the website sends a technical record to its own server: a random identifier, website, notice version, date, action, optional-service choice and expiry. The application register does not store your IP address, browser information, email or message contents. Hosting logs, described separately, may contain IP addresses and request data.
These records are used to manage and demonstrate privacy choices and withdrawals. Demonstrating consent fulfils the controller’s duties under GDPR Articles 5(2) and 7(1); the records are not used for advertising, profiling or behavioural analytics.
External maps are enabled only with consent (GDPR Article 6(1)(a)). Evidence of consent and withdrawal is retained to meet the obligation to demonstrate consent under Article 7(1), on the basis of Article 6(1)(c). Recording a refusal serves the legitimate interest in respecting the choice and keeping preferences working (Article 6(1)(f)), without enabling optional services.
Choice records expire after six calendar months. At expiry they are no longer used to manage preferences. Expired files are deleted progressively during subsequent reads of the register and recording of new choices, with cleanup split into groups of files. Until cleanup is completed, and during periods without traffic, expired data may remain in the files. This period is an operational choice for managing preferences; it is separate from the retention criteria for emails and hosting logs.
The register is stored outside the website’s public folder and is accessible only to authorised staff and technical providers authorised for the service. It is not sent to OpenStreetMap or social websites. For requests concerning your data, contact the controller identified in this notice.
OpenStreetMap map images are served through a global server network. Request data may therefore be processed outside the European Economic Area, as described in the provider’s privacy policy. This map remains optional, and you can use the written addresses without enabling it.