This page explains what happens to personal data when you visit booknooklane.com or sign up for one of our events. We have tried to write it in plain language rather than legal boilerplate.
Who is responsible for your data
Book Nook Lane, Corso XXV Aprile 44, 21026 Gavirate (VA), Italy, is the data controller. You can reach us at booknooklane@gmail.com for anything on this page.
This website does not use cookies. It sets no cookies, stores nothing in your browser, and contains no analytics, advertising or tracking of any kind. That is also why you will not see a cookie banner — there is nothing to consent to.
What we collect, and when
When you simply browse the site
We do not ask you for anything and we do not build a profile of you. However, like any website, loading a page involves your device talking to servers, and those servers keep short-lived technical records:
- Your IP address, browser type and the page requested are recorded in our hosting provider's server logs. This is unavoidable for a website to function, and it is used to keep the site online and protect it from abuse.
- Event information is fetched from our database provider when the page loads, which involves the same technical connection details.
- The typefaces are served by Bunny Fonts, a European font service we chose specifically because it does not log IP addresses, set cookies or track visitors. We deliberately do not use Google Fonts.
We do not have access to these logs in a form that identifies you, and we do not attempt to identify visitors.
When you sign up for an event
Where an event offers online sign-up, the form is provided by Jotform and we ask only for what we need to run the session:
- the name and email address of the parent or guardian booking
- how many children are coming, and their age range
We use this to hold your place, to tell you if the event changes or is cancelled, and to know how many children to prepare for. We do not use it for marketing unless you separately ask us to.
A note about children. Sign-ups are made by a parent or guardian, not by children. We ask for an age range rather than dates of birth, and we do not ask for children's surnames, photographs or any other detail we do not need. If you believe a child has given us information directly, email us and we will delete it.
Why we are allowed to process it
| What | Why we may process it |
|---|---|
| Server logs and security records | Our legitimate interest in keeping the website available and secure. |
| Event sign-up details | To take the steps you have asked for before and during the event you booked. |
| Emails you send us | Our legitimate interest in replying to you. |
Who else sees it
We do not sell personal data and we do not share it for anyone else's marketing. We rely on a small number of service providers who process data on our behalf:
| Provider | What it does |
|---|---|
| Netlify | Hosts the website and keeps server logs. |
| Supabase | Stores the event listings and shop information shown on the site. Hosted in the EU (Frankfurt). |
| Jotform | Runs event sign-up forms and holds the responses, where sign-up is offered. |
| Bunny Fonts | Serves the typefaces used on the site. EU-based, and states that it does not log requests or track visitors. |
Some of these providers are based outside the European Economic Area. Where that is the case, transfers are made under the safeguards those providers put in place, such as the European Commission's Standard Contractual Clauses.
How long we keep it
- Server logs: retained for a short period by our hosting provider, then discarded.
- Event sign-ups: kept until the event has happened and then for a short period afterwards, normally no more than twelve months.
- Emails: kept for as long as we need them to deal with what you wrote about.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to us processing it. You can also ask us to send it to someone else in a portable format. Just email us — we will not ask you to justify the request.
If you think we have handled your data badly, you are entitled to complain to the Italian supervisory authority, the Garante per la protezione dei dati personali.
Changes to this policy
If we change how we handle data — for example when we start using sign-up forms — we will update this page and change the date at the top.