Privacy Notice

Last updated: 2026-06-23.

Data controller

The data controller is Madia (sole proprietorship), VAT no. 02809420066, registered office at Viale Rimembranza 6, 15061 Arquata Scrivia (AL), Italy. You can reach us at hello@withmadia.com.

What we collect

• Contact and booking data you provide voluntarily (name, email, phone, number of guests, preferred date, free-text notes).
• Payment metadata via Stripe (we never see or store your card numbers).
• A language-preference cookie and an essential session cookie (admin only).

Why and on what legal basis

• To deliver and confirm your booking and coordinate with the partner who runs the experience — performance of our contract with you (Art. 6(1)(b) GDPR).
• To issue invoices and meet tax/accounting duties — legal obligation (Art. 6(1)(c) GDPR).
• To keep the service secure and improve it — our legitimate interest (Art. 6(1)(f) GDPR).

Who processes your data

We share your data only with providers that help us run the service, acting as data processors or independent controllers under their own terms:

• Vercel & Neon — website hosting and database.
• Stripe — payment processing.
• Resend — transactional emails (booking confirmation, receipts).
• Fatture in Cloud — electronic invoicing.

Some of these providers may process data outside the EEA; where they do, appropriate safeguards (e.g. EU Standard Contractual Clauses) apply. We do not sell your data. Automatic translation services receive only experience descriptions — never your personal data.

Cookies

We use only two first-party cookies: a strictly-necessary session cookie (for admin login) and a functional cookie that remembers your language choice (set when you pick a language). We use no advertising, profiling or third-party tracking cookies, so no consent banner is required.

How long we keep it

Booking and contact data are kept for the time needed to provide the service and handle requests; invoicing data are kept for the period required by Italian tax law (10 years). After that, data are deleted or anonymised.

Your rights

You can ask for access, rectification, erasure, restriction or portability of your data, and object to processing. To exercise a right, email us with the subject “Data Request” (and your booking reference, if any) at hello@withmadia.com. We respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).