1. Who we are
The data controller for this website is ITAntiques (itantiques.com), an EU-oriented online publication of Italian antiques guides.
Privacy contact: [email protected]
2. What this site processes
If you write to [email protected], we receive your email address, the contents of your message, and any details you choose to include. We use that information only to read the message and reply.
Contact form
The contact form on this site is not connected to a server or to a form provider. Submitting it does not transmit your message to ITAntiques or to anyone else. Until the form is connected, email is the way to reach us. If we later enable it, this policy will be updated before any form data is stored.
Marketplace waitlist
On the homepage and on article pages you can leave an email address to hear when the ITAntiques marketplace opens. If you submit that form, we store your email address, the language of the page, whether you marked yourself as a collector or a dealer (optional), and the page type where you signed up (homepage or article). We use that information only to send updates about the marketplace opening and closely related product milestones — not a regular content newsletter.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by emailing [email protected]. We keep waitlist addresses until the marketplace has launched and a short follow-up period has passed, or until you ask us to delete them, and in any case no longer than 36 months from the last meaningful contact about the waitlist unless a longer period is needed for a dispute.
Waitlist data is stored in a Cloudflare D1 database on the same Cloudflare account that hosts this site.
Hosting logs
The site is hosted on Cloudflare. To deliver the site and protect it, Cloudflare processes connection data such as IP address, user agent, date and time, and the requested URL. That processing is separate from the analytics products below.
Google Analytics
We use Google Analytics, provided by Google Ireland Limited and Google LLC, to understand which guides are read, how visitors reach them, and general device and location patterns. Google Analytics 4 stores cookies in your browser, typically a cookie named _ga and a cookie named _ga_ followed by a measurement id. Those cookies distinguish browsers and keep session state, and they can remain for up to two years. Google Analytics 4 does not log or store your full IP address. Pages viewed, approximate location, device, browser, language and referring site are processed by Google.
Google’s privacy policy is at policies.google.com/privacy. How Google uses information from sites and apps that use its services is described at policies.google.com/technologies/partner-sites.
To opt out, install the Google Analytics Opt-out Browser Add-on, or block and delete cookies in your browser. Blocking cookies stops a new Analytics identifier from being stored on that browser. It does not erase measurements Google has already collected.
Cloudflare Web Analytics
We also use Cloudflare Web Analytics, provided by Cloudflare, Inc. It counts page views and measures loading performance, including Core Web Vitals. It does not use cookies or local storage, and it does not fingerprint your browser or follow you from one website to another. The beacon records the page URL, referrer, browser, operating system, device type and country. Your IP address is used only to derive the country and is not stored with the analytics record.
Cloudflare’s privacy policy is at cloudflare.com/privacypolicy. The product is described at Cloudflare Web Analytics.
Because this product does not set a cookie, cookie settings do not turn it off. You can block it with a content blocker that stops requests to Cloudflare’s analytics beacon (often served from cloudflareinsights.com), or by disabling JavaScript on this site.
3. Purposes and legal bases (GDPR)
- Replying to email — legitimate interests in corresponding with readers, dealers and press (Art. 6(1)(f)). Where a message is about a possible marketplace relationship, we may also rely on steps taken before a contract (Art. 6(1)(b)).
- Marketplace waitlist — consent (Art. 6(1)(a)), given when you tick the box on the waitlist form.
- Operating and securing the website — legitimate interests (Art. 6(1)(f)).
- Audience measurement — legitimate interests in understanding which guides are useful (Art. 6(1)(f)). Google Analytics uses cookies. You can refuse those cookies or use Google’s opt-out add-on, as described above. This site does not show a separate cookie banner.
- Legal obligations — where the law requires us to keep or disclose information (Art. 6(1)(c)).
4. How long we keep it
- Email — for as long as we need to handle the request, then deleted or reduced to the minimum if a dispute is still open. That is typically no longer than 24 months.
- Marketplace waitlist — until launch plus a short follow-up, or until you ask for deletion, and no longer than 36 months from the last waitlist contact unless a dispute requires otherwise.
- Hosting logs — for the period Cloudflare keeps security logs, unless we are investigating an incident.
- Google Analytics — for the retention period set on the Google Analytics property, and otherwise as described in Google’s policies. We do not copy Analytics reports into our own database.
- Cloudflare Web Analytics — as aggregated statistics in Cloudflare’s reporting, not as a profile of you.
5. Who else processes data
- Cloudflare, Inc. — hosting, security logs and Cloudflare Web Analytics.
- Google — Google Analytics. The privacy policy is linked above.
The contact form is not sent to a form vendor. Waitlist emails are stored in Cloudflare D1; we do not use a separate newsletter provider for that list yet.
6. International transfers
Google and Cloudflare may process data in the United States and in other countries outside the European Economic Area and the United Kingdom. Where they do, they rely on the safeguards they offer for those transfers, such as the EU-US Data Privacy Framework where the recipient is certified, or Standard Contractual Clauses.
7. Your rights
If GDPR or UK GDPR applies to you, you may ask for access, correction, deletion, restriction or a copy of your personal data, and you may object to processing based on legitimate interests. You may also complain to your local supervisory authority.
To use these rights, email [email protected]. We may need to confirm that the request comes from you.
8. Children
The site is written for adults interested in antiques. We do not knowingly collect personal data from children under 16.
9. Changes
We may update this policy. The date above will change when we do. If we connect the contact form, change how the marketplace waitlist is run, or change the analytics tools, we will update this page first.