Privacy and Cookie Notice

This notice explains how picnicinthecity.com processes personal data, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Data controller

Wom Services Srls, Via Pietro Gobetti 9, 37138 Verona, Italy
Email: gdpr@womservices.com

What data we process and why

Messages sent through the contact form

• Data: name, email address, message; optional: profile ("I am writing as") and city or area
• Purpose: replying to your request
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b)) and legitimate interest in answering enquiries (Art. 6(1)(f))
• Retention: the site does not store messages: they arrive by email in the controller's mailbox and remain there for 24 months from the last contact, unless needed for an ongoing relationship
• Whether you must provide it: name, email and message are needed in order to reply; profile and city are optional

Browsing and security

• Data: IP address, date and time, requested page, browser; a counter tied to a hashed version of the IP limits form submissions
• Purpose: running the site, protecting it from abuse and investigating any breaches
• Legal basis: legitimate interest in keeping the site secure (Art. 6(1)(f))
• Retention: logs for 90 days and counters for 30 days, unless needed to investigate an ongoing breach; they may remain in backup copies for up to 65 further days
• Whether you must provide it: needed in order to visit the site

Visit statistics (Google Analytics)

• Data: online identifiers, pages viewed, session and device data
• Purpose: measuring how the site is used
• Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time from the cookie preferences
• Retention: cookies for up to 400 days; data in Google Analytics for 14 months
• Whether you must provide it: optional: without consent the site works normally and the tool is not loaded

Record of cookie choices

• Data: random identifier, choice made, date and time; no IP address
• Purpose: demonstrating the consent received
• Legal basis: obligation to be able to demonstrate consent (Art. 6(1)(c) and Art. 7(1))
• Retention: 24 months; it may remain in backup copies for up to 65 further days
• Whether you must provide it: needed to record the choice

Who receives the data

Data is handled by authorised people and by the suppliers listed below. It is not sold or used for automated decisions or profiling.

• Aruba: infrastructure of the server hosting the site. Processing location: Italy.
• Backblaze: storage of encrypted backup copies. Processing location: Netherlands (European Union).
• Zoho: delivery of contact form messages and the mailbox receiving them. Processing location: European Union (zoho.eu servers).
• Google (Analytics): visit statistics, only with consent. Processing location: Ireland, United States and other countries.

Transfers outside the European Economic Area

• Google (United States): EU-U.S. adequacy decision (EU-U.S. Data Privacy Framework), under which Google LLC is certified.

Cookies and tracking tools

We classify as technical the tools needed to run the site or provide a service the visitor has asked for, and as subject to consent all the others. Only technical tools do not require consent.

You can change your choices at any time: open cookie preferences.

Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it: this does not affect what happened before. To do so, write to gdpr@womservices.com: we reply within one month, free of charge.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante) or with the authority of the country where you live or work.

Security

We take appropriate measures to protect data, including encrypted connections (HTTPS) and access limited to authorised people.

Changes

Last updated: 2026-11-07. Any changes will be published on this page.