Privacy Policy

Last updated: 15 September 2026

This notice explains how ECOWASH handles the personal data of people who visit this website or contact us through it. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).

1. Who is responsible for your data

The data controller is ECOWASH. For any question about your personal data, or to exercise your rights, write to ecowashlavanderia001@gmail.com.

We have not appointed a Data Protection Officer, because our activity does not require one. Privacy requests are handled directly by the controller.

2. What data we collect

When you send us an enquiry

The contact form, the consultation request and the cost calculator ask for:

• your name and the name of your business or property;
• an email address and/or a telephone number;
• if you choose to give them: the type of business, the city, your weekly linen volume and a message;
• the estimate produced by the cost calculator, if you used it before sending the form.

With each enquiry we also record the page it was sent from, the language of the site, the date and time, your IP address, the browser identifier (user agent) and the page that led you to ours. If you have allowed the Marketing category in the cookie settings, we also record the campaign parameters and the first page of your visit.

Your name and at least one way to reach you — email or phone — are needed for us to reply. Without them we cannot handle the enquiry. Everything else is optional.

When you browse the site

Like any web server, ours keeps a technical log of each request: IP address, date and time, the address requested, the response code and the browser identifier. We use it only to keep the site secure and working.

To protect the forms from automated abuse, we keep a one-way encoded version of your IP address together with a count of submissions, for one hour.

What the site stores on your device is described in the Cookie Policy.

When you contact us directly

If you call us, email us or message us on WhatsApp, we use the details you share in order to reply.

What we do not do

We do not ask for health data or any other special category of data, and we ask you not to include it in your messages. We do not use analytics or advertising trackers, we do not build profiles and we do not take automated decisions about you. We never sell or rent personal data.

3. Why we use it and on what legal basis

Where we rely on legitimate interest, we have weighed it against your rights, and you can object at any time (see section 7).

4. Who can see your data

Your data is seen only by the ECOWASH staff who need it to deal with your enquiry, and by the service providers we use to run the site and our correspondence:

• GoDaddy — hosting of the website, of the database in which enquiries are stored and of the server that sends enquiry notifications by email, located in Germany (European Union). GoDaddy acts as our data processor under Article 28 GDPR.
• Google — our Gmail mailbox, which receives a copy of each enquiry and through which we correspond with you.

Two further services come into play only if you choose to use them:

• Google Maps — the map on the Contact page loads only when you click “Show map”. From that moment Google receives your IP address and may set its own cookies, under the Google Privacy Policy.
• WhatsApp — the WhatsApp buttons open a conversation with us in WhatsApp, a service of WhatsApp Ireland Limited, which handles your data under its own privacy policy.

We disclose data to public authorities only when the law requires it. We do not pass it to anyone else.

5. Transfers outside the European Union

The website, its database and the server that sends notifications are located in the European Union. GoDaddy belongs to a group based in the United States; any access to data from outside the EU, for example for technical support, is covered by the Standard Contractual Clauses approved by the European Commission. Gmail and Google Maps may involve a transfer of data to the United States. Google LLC participates in the EU–U.S. Data Privacy Framework, which the European Commission recognised as providing an adequate level of protection in its decision of 10 July 2023, and also uses the Standard Contractual Clauses approved by the Commission.

6. How long we keep it

• Enquiries sent through the website: 24 months from the day we receive them. After that they are deleted automatically from the website database, and we apply the same period to the copies received by email.
• If the enquiry leads to a contract: for as long as the contract lasts, then for ten years after it ends, as Italian law requires for accounting and tax records (Article 2220 of the Civil Code).
• Server logs: up to 30 days, unless they are needed to investigate a specific security incident.
• Form protection data: one hour.
• Your cookie choice: 6 months, as explained in the Cookie Policy.

7. Your rights

Under Articles 15 to 22 of the GDPR you have the right to:

• know whether we hold data about you and obtain a copy of it (access);
• have inaccurate data corrected or incomplete data completed (rectification);
• have your data deleted, where there is no longer a reason to keep it (erasure);
• have its use limited while a question about it is being resolved (restriction);
• receive the data you gave us in a structured, commonly used format, or have it sent to another organisation (portability);
• object at any time to processing based on our legitimate interest (objection);
• withdraw consent at any time, without affecting what was done before you withdrew it.

To exercise any of these rights, write to ecowashlavanderia001@gmail.com. It costs nothing. We reply without undue delay and in any case within one month; for particularly complex requests that period can be extended by two further months, and we will tell you if it is. We may ask you to confirm your identity before acting on a request.

If you believe your data is being handled unlawfully, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.

8. How we protect it

The site is served over an encrypted connection (HTTPS). Enquiries can be read only by authorised staff with personal credentials. The forms are protected by a security token, an anti-spam check and a limit on the number of submissions. The server is located in the European Union and its software is kept up to date.

9. Minors

This website is intended for businesses and is not directed at people under 18. We do not knowingly collect data about minors.

10. Changes to this notice

We update this notice whenever the way we handle data changes. The date at the top shows when it was last revised.