Privacy notice

1. Controller and scope

The data controller is Mascarello S.r.l., with registered office at Via Nicolò Tartaglia, 11/C, 25024 Porzano di Leno (BS), Italy. This notice covers the DeckNest showcase and enquiries sent to support@decknest.net. For privacy matters, use that address or the certified email listed in the Legal notice linked from the footer. No Data Protection Officer (DPO) has been appointed.

The website has no accounts, registration forms, newsletter or internal payments. Purchases take place exclusively on Etsy: processing by that platform is described in its own privacy policy.

2. Data processed

When you browse, the hosting service may record technical data such as IP address, date and time, requested resource, browser information and response codes needed to operate and protect the service.

If you email us, we process your email address, any name provided, the message and attachments you choose to send. Order support may require the relevant order reference. Please do not send identity documents, payment details or sensitive information that has not been requested.

3. Purposes and legal bases

We use product and order communications to respond and provide assistance, on the basis of steps requested before a contract or performance of a contract where applicable (GDPR Article 6(1)(b)). For other communications, the proposed basis is the legitimate interest in handling incoming enquiries (Article 6(1)(f)), to be assessed against the individual's rights.

Website operation, abuse prevention and security rely on the legitimate interest in protecting the service (Article 6(1)(f)). Mandatory compliance is based on applicable legal obligations (Article 6(1)(c)). Support enquiries are not used to send newsletters or advertising.

4. Providing data and retention

Contacting us is optional. Without a reply address and the necessary information, we may be unable to respond or handle your enquiry.

Customer enquiries and conversations are kept for no longer than 2 years after the enquiry is closed, then deleted from operational mailboxes and any local copies through a periodic review. Records subject to legal obligations or needed to establish, exercise or defend a legal claim follow their specific periods, without extending retention indiscriminately to all correspondence.

The two-year period does not automatically apply to technical logs. Aruba manages logs and backups needed to provide and secure the services in accordance with the contract, settings and notices applicable to the active service.

5. Access and providers

Emails are read internally by Mascarello S.r.l.. The mailbox remains on Aruba without forwarding to external services, as confirmed by the controller. The technical provider may process data necessary to supply hosting and email: internal handling does not mean there is no external provider.

Aruba S.p.A. supplies hosting and email; its role as processor for processing on the customer's behalf is governed by its contractual terms. Any processing for the provider's own purposes is covered by its notices. Data may be disclosed to authorities where required by law.

6. External services and transfers

Etsy, Instagram, Facebook and TikTok are external links, not embedded feeds. Opening them takes you to services with their own privacy rules. Using Etsy to buy a product is not necessary to visit this showcase.

For current information about subprocessors, processing locations and any transfers outside the European Economic Area, the contractual documentation and Aruba notices for the active services apply. The website contains no profiling tools or automated decision-making.

7. Your rights

In the circumstances and subject to the limits set by the GDPR, you can request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You can lodge a complaint with a competent data protection authority, including the Italian Garante. Withdrawing any consent does not affect the lawfulness of earlier processing; the support contact described here is not based on advertising consent.

Send requests to support@decknest.net. We will respond within the GDPR time limits, normally one month; any permitted extension will be communicated with the reasons. We may ask only for information needed to verify your identity.

8. Updates

This version describes the current showcase. Adding newsletters, analytics, forms or new providers will require a further assessment and updated information before the related processing is activated.