Privacy Policy | Vortex Play

1. Data Controller

Virtual Zone Italia Srl, VAT IT03339540597 — [email protected]

2. Data Collected

We collect name, email, phone (optional) and venue details when you submit the contact form. We collect anonymous browsing data via Google Analytics (only with your consent).

3. Purpose and Legal Basis

Contact form data is processed to respond to your commercial inquiry (legitimate interest / pre-contractual measures). Analytics data is processed based on your consent.

4. Retention

Contact data is retained for up to 24 months from collection, unless required by law. Analytics data is retained per Google Analytics settings (default 14 months).

5. Data Recipients

Data may be processed by providers acting as data processors under Art. 28 GDPR: Vercel Inc. (hosting), Google LLC (Analytics, Tag Manager, Ads), Meta Platforms Ireland Ltd. (Pixel and Conversions API for campaign measurement), Twilio Inc. (WhatsApp Business API), Resend (email delivery), and our internal CRM. We do not sell or share data for purposes other than those listed.

6. Transfers Outside the EU

Some providers (Google, Meta, Vercel, Twilio) are based in the United States or transfer data outside the EEA. Transfers occur under Art. 46 GDPR based on Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, on Data Privacy Framework (DPF) certifications.

7. Your Rights

You have the right to access, rectify, erase, restrict, port, and object to processing (Arts. 15-22 GDPR). To exercise your rights write to [email protected]. We will respond within 30 days. You may also withdraw consent for analytics and marketing cookies at any time via the cookie banner (re-openable from the footer) or from our Cookie Policy.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if you believe processing of your data violates the GDPR.

9. Automated Decision-Making

We do not carry out solely automated decision-making producing legal effects on the data subject (Art. 22 GDPR). Phone contact with you may also be made using automated calling systems; the legal basis is the consent collected in the contact form, and it can be withdrawn at any time.

10. Cookies

See our Cookie Policy for details.