This website is operated by Vana and Nuovo OÜ, a company registered in Estonia, European Union, trading as Vana & Nuovo.

Vana & Nuovo connects European heritage producers and specialist makers with hospitality and interior design projects in Europe and internationally.

For the purposes of EU data protection law, including the General Data Protection Regulation, Vana and Nuovo OÜ is the data controller responsible for your personal data.

You can contact us at hello@vanaandnuovo.com.

We collect only the personal data necessary for the purposes described in this Privacy Policy.

• Contact enquiries: We collect your name, email address and any information you choose to include when you contact us or submit an enquiry through our website.

• Usage data: If you consent to analytics cookies, we collect information about how you use our website. This may include the pages you visit, time spent on pages, referring source, browser and device type, and approximate location at country or regional level.

• Technical data: Our website hosting provider may process limited technical information, including IP address, browser type, device information and access logs, to operate, secure and maintain the website.

• Cookie data: We use cookies and similar technologies to remember your preferences and, where you consent, to collect website analytics data.

We do not intentionally collect special category personal data through this website, such as health information or information about religious beliefs. Please do not send this type of information through the website.

Our website is intended for adults and professional users. We do not knowingly collect personal data from children under the age of 16.

We use personal data only for the following purposes:

• to respond to your enquiry and manage related correspondence;

• to understand how visitors use our website and improve its content, performance and usability;

• to operate, maintain and protect the website; and

• to comply with legal obligations or establish, exercise or defend legal claims where necessary.

We do not make decisions about you solely through automated processing, including profiling, that would have legal or similarly significant effects on you.

We do not sell your personal data.

Under the GDPR, we must have a valid legal basis for processing your personal data.

• Contact enquiries and potential work: We rely on our legitimate interests in responding to enquiries, managing professional relationships and developing our business. Where you ask us to take steps before entering into an agreement with us, we may also process relevant information on that basis.

• Website operation and security: We rely on our legitimate interests in operating a secure, reliable and functional website.

• Analytics and browsing behaviour: We rely on your consent. We collect analytics data only if you accept optional analytics cookies through our cookie banner.

• Strictly necessary cookies: We use these cookies where necessary to ensure that the website functions correctly, remains secure and remembers your privacy choices. These cookies do not require consent.

Where we rely on consent, you may withdraw it at any time through the Cookie Settings on our website. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Our website uses cookies and similar technologies. Cookies are small text files stored on your device when you visit a website.

Some cookies are strictly necessary for the website to function correctly. Other cookies, including analytics cookies, are optional.

When you first visit our website, our cookie banner asks for your consent before optional analytics cookies are placed on your device. You can change or withdraw your consent at any time through the Cookie Settings.

Google Analytics

With your consent, we use Google Analytics 4 to understand how visitors use our website and to help us improve its content, performance and usability.

Google Analytics collects pseudonymous information about your use of the website. This may include pages viewed, time spent on the website, interactions with website content, browser and device information, referring source and approximate location.

We do not use Google Analytics to identify visitors by name, and we do not knowingly send Google Analytics information that directly identifies you, such as your name, email address or telephone number.

For users in the European Economic Area, Google Analytics does not log or store individual IP addresses. Google may use IP information briefly to derive approximate location information before it is discarded.

Google Analytics is provided by Google Ireland Limited and other Google entities, including Google LLC in the United States. This may involve the transfer of personal data outside the European Economic Area. Where this occurs, Google applies appropriate safeguards for international transfers, including standard contractual clauses where relevant.

You can find further information in Google’s Privacy Policy. You can also opt out of Google Analytics through Cookie Settings or by using the Google Analytics Opt-out Browser Add-on.

We use a limited number of third-party service providers to operate our website, manage enquiries and communicate with prospective clients and partners. These providers may process personal data in connection with the services they provide to us.

Squarespace: We use Squarespace to build, host and deliver our website. Squarespace also provides the website’s cookie-banner functionality and, where used, contact-form functionality. Squarespace may process technical information required to operate, secure and maintain the website, as well as information submitted through website forms.

Google Workspace: We use Google Workspace, provided by Google Ireland Limited, Google LLC and their affiliated entities, to receive, store and respond to emails and enquiries. Where you contact us through our website or by email, your name, email address and message may be processed through Google Workspace.

Google Analytics: With your consent, we use Google Analytics to understand how visitors use our website. Google Analytics is provided by Google Ireland Limited and associated Google entities, including Google LLC. Further information is provided in Section on Cookies and analytics.

Porkbun LLC: We use Porkbun LLC for domain registration and, where applicable, DNS management for the vanaandnuovo.com domain. Porkbun does not host this website.

Some of these service providers may process personal data outside the European Economic Area. Where this occurs, we take appropriate steps to ensure that suitable safeguards are in place, including standard contractual clauses where relevant.

We do not sell, rent or trade personal data. We do not share personal data with advertising networks, data brokers or behavioural advertising providers.

We retain personal data only for as long as necessary for the purpose for which it was collected.

• Contact enquiry data: Retained for up to 24 months from the date of your last meaningful interaction with us, unless you ask us to delete it sooner or we need to retain it for legal reasons.

• Analytics data: User-level and event-level Google Analytics data are retained for 14 months, in line with our Google Analytics retention settings. Aggregated analytics reports may be retained for longer.

• Technical data: Website access logs are retained for the period set by our hosting provider, unless longer retention is necessary to investigate a security incident or comply with a legal obligation.

• Cookie data: Cookies remain on your device for the period set for each cookie, unless you delete them earlier through your browser settings. If you withdraw consent, we will stop using optional cookies.

After the applicable retention period, we will securely delete or anonymise the data.

Under the GDPR, you have the following rights in relation to your personal data. You may exercise these rights by contacting us at hello@vanaandnuovo.com.

• Right of access: You may request a copy of the personal data we hold about you.

• Right to rectification: You may ask us to correct inaccurate or incomplete personal data.

• Right to erasure: You may request that we delete your personal data in certain circumstances.

• Right to restriction: You may ask us to restrict how we use your personal data in certain circumstances.

• Right to data portability: Where applicable, you may request personal data that you have provided to us in a structured, commonly used and machine-readable format.

• Right to object: You may object to our processing of your personal data where we rely on legitimate interests as our legal basis.

• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

We will respond to requests without undue delay and normally within one month. Where a request is particularly complex or numerous, we may extend this period by up to a further two months. If this applies, we will let you know within the initial one-month period.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or with the data protection authority in the EU country where you live, work or believe an infringement has occurred.

For questions, requests or concerns about this Privacy Policy or how we handle personal data, please contact us at:

Vana and Nuovo OÜ
Kaheküla tee 1, 13516
Estonia, European Union

hello@vanaandnuovo.com

We may update this Privacy Policy from time to time. The most recent version will always be available on this page, together with its effective date. Where changes are material, we will take reasonable steps to notify you directly where appropriate.