Privacy Policy
This Privacy Policy explains how personal data are processed when you browse and use the Medi Garden Resort website.
Last update: 2026-02-15
Data controller
MEGA s.r.l.s (Medi Garden Resort)
Via Firenze, 4 – 64011 Alba Adriatica (TE) – Italy
Email: info@medigarden.it – Phone: (+39) 0861 712418
No DPO (Data Protection Officer) has been appointed, unless otherwise communicated.
Categories of personal data
- Browsing data: IP address, user-agent, technical logs, visited pages, date/time, diagnostic and security information.
- Data you provide: name, email, phone number and message content submitted via forms or email.
- Cookies and similar technologies: technical and statistical information. See our Cookie Policy.
Purposes, legal basis and whether data are mandatory
| Purpose | Legal basis | Mandatory |
|---|---|---|
| Reply to enquiries/quotes and manage contacts | GDPR Art. 6(1)(b) (pre-contract/contract) and/or Art. 6(1)(f) (legitimate interest) | Required to reply |
| Prevent abuse and spam on forms (Google reCAPTCHA) | GDPR Art. 6(1)(f) (security and fraud prevention) | Required for some forms |
| Traffic measurement and aggregated statistics (Google Analytics via gtag.js) | GDPR Art. 6(1)(a) (consent), where required by cookie regulations | Optional |
| Technical operation, security and legal defence | GDPR Art. 6(1)(f) (legitimate interest) | Required |
Recipients and third-party services
Your data may be processed by authorized staff and by service providers acting as processors (e.g. hosting, technical maintenance, email services) only to the extent necessary for the above purposes.
Some pages load third-party services (Google LLC), which may process data as independent controllers under their own policies:
- Google Analytics (gtag.js; ID used on the website: G-HYWTS28E9S).
- Google reCAPTCHA (anti-spam and abuse prevention).
Google Privacy Policy: https://policies.google.com/privacy
Google Terms: https://policies.google.com/terms
International data transfers
When Google services are used, data may be processed outside the European Economic Area. Any such processing is subject to the provider’s safeguards and applicable legal framework.
Data retention
- Enquiries and contacts: as long as needed to handle the request and, unless otherwise necessary, up to 24 months.
- Technical/security logs: for the time strictly required for operational and security needs (typically a few months).
- Cookies: as described in the Cookie Policy and/or your browser settings.
Your rights
You may exercise your GDPR rights (access, rectification, deletion, restriction, objection and portability where applicable) and withdraw any consent by writing to info@medigarden.it.
You also have the right to lodge a complaint with your competent supervisory authority (Italy: Garante per la Protezione dei Dati Personali – www.garanteprivacy.it).
Changes to this policy
We may update this policy from time to time. The latest version is always published on this page.