Sainte Sve — saintesve.com

Last updated: June 2026

This Privacy Policy is issued pursuant to EU Regulation 2016/679 (GDPR) and the Italian Privacy Code (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018).

Data Controller

The data controller for saintesve.com is:

ERHA s.r.l

Via Luigi Carlo Farini 15

50121 Florence (FI), Italy

VAT: 07496540480

Email: maison@saintesve.com

ERHA s.r.l has not appointed a Data Protection Officer (DPO), as the conditions set out in Art. 37 GDPR do not apply to its processing activities. For any data protection enquiries, please contact us directly at maison@saintesve.com.

What Data We Collect

Data you provide directly

When you use the contact form on saintesve.com, we collect:

Your name

Your email address

The content of your message

Data collected automatically

When you visit saintesve.com, the following data may be collected automatically:

IP address (anonymised where possible)

Browser type and version

Device type and operating system

Pages visited and time spent on each

Referring URL

Date and time of visit

This data is collected through Squarespace (our website platform) and Google Analytics.

How We Use Your Data

Responding to your enquiries — Name, email, message — Legitimate interest (Art. 6(1)(f) GDPR)

Understanding how the website is used — Browsing and device data — Consent (Art. 6(1)(a) GDPR)

Ensuring website security and functionality — Technical data — Legitimate interest (Art. 6(1)(f) GDPR)

Compliance with legal obligations — As required by applicable law — Legal obligation (Art. 6(1)© GDPR)

We do not use your data for marketing, profiling, or behavioural targeting purposes.

Automated Decision-Making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on individuals, as referred to in Art. 22 GDPR.

Third Parties

Squarespace

Our website is hosted on Squarespace Inc. (225 Varick Street, New York, NY 10014, USA). Squarespace processes technical and analytics data as part of providing the hosting service and acts as a data processor on our behalf under a Data Processing Agreement. Personal data may be transferred to the United States under Standard Contractual Clauses (SCCs) approved by the European Commission.

Privacy policy: squarespace.com/privacy

Google Analytics

We use Google Analytics (a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to understand how visitors use our website. Google Analytics collects anonymised browsing data. Personal data may be transferred to the United States under Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework.

Analytics cookies are only placed with your prior consent. You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout

Google’s privacy policy: policies.google.com/privacy

Data Retention

Contact form enquiries — 24 months from the date of last contact

Analytics data (Google Analytics) — 26 months (Google Analytics default setting)

Analytics data (Squarespace) — As per Squarespace’s data retention policy

Data required for legal compliance — As required by applicable Italian and EU law

At the end of each retention period, data is deleted or anonymised.

International Data Transfers

Squarespace and Google Analytics may transfer personal data outside the European Economic Area (EEA), specifically to the United States. Such transfers are carried out under Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Art. 46 GDPR, and where applicable under the EU–US Data Privacy Framework.

Your Rights

Under the GDPR and the Italian Privacy Code, you have the right to:

Access (Art. 15) — request a copy of the personal data we hold about you

Rectification (Art. 16) — request correction of inaccurate or incomplete data

Erasure (Art. 17) — request deletion of your personal data (“right to be forgotten”)

Restriction (Art. 18) — request that we limit how we process your data

Portability (Art. 20) — receive your data in a structured, machine-readable format

Object (Art. 21) — object to processing based on legitimate interest

Withdraw consent (Art. 7(3)) — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at: maison@saintesve.com

We will respond within 30 days of receiving your request (extendable by a further two months for complex requests, with prior notice).

Right to Lodge a Complaint

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with a data protection supervisory authority without prejudice to any other administrative or judicial remedy.

The competent supervisory authority for ERHA s.r.l is:

Garante per la protezione dei dati personali

Piazza Venezia 11, 00187 Rome (Italy)

Website: garante.privacy.it

Email: garante@gpdp.it

You may also contact the supervisory authority in your country of residence or place of work within the EU.

Cookies

We use cookies on saintesve.com. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, in accordance with Art. 32 GDPR.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

For any questions regarding this Privacy Policy, contact us at maison@saintesve.com