Data controller
The data controller is IL C’ERA S.R.L., VAT and tax number 04421060619, based at Via Nazionale Appia, 81, 81028 Santa Maria a Vico (CE), Italy, operator of YOLO. The venue is located at Viale Enrico Mattei 3, Caserta (CE) 81100, Italy.
For information about your personal data or to exercise your rights, write to info@yolocaserta.it. The venue’s contacts are 338 503 5082 (Angelo Rivetti) and 347 727 0997 (Modesto Bottone).
Data collected and how it is obtained
When you contact us, we process the information you choose to provide: first name, last name, email, phone number and, if you write one, your message. Please do not include health information, identity documents or other information unnecessary for your enquiry.
When you submit the form, the enquiry is stored in Cloudflare D1 before Brevo sends a staff notification and a confirmation in your chosen language. Cloudflare Turnstile checks the request to prevent abuse.
During browsing, connection address, access date and time, requested pages and device information may be processed to the extent necessary to display the website and protect it against abuse.
Purposes and legal bases
We answer enquiries, availability requests and quotations and handle event-related communications to take steps at your request before a contract or perform a contract (Article 6(1)(b), GDPR). For general, non-contractual correspondence, the basis is our legitimate interest in responding to incoming enquiries (Article 6(1)(f)).
Compliance with legal obligations is based on Article 6(1)(c). Website security and establishing, exercising or defending legal claims are based on the controller’s legitimate interests (Article 6(1)(f)), respecting individuals’ rights and freedoms.
Making an enquiry does not subscribe you to a newsletter or give consent to promotional communications. This website does not carry out profiling or automated decisions producing legal or similarly significant effects.
Providing your information
Contacting us is optional. In the form, first name, last name, email and phone number are required, while the message is optional; without necessary details, we may be unable to prepare your enquiry or respond. You may instead use the venue’s direct contact details. Marketing consent is not required to receive a response.
Retention
Enquiries currently have no automatic expiry. They remain in the restricted Studio until staff permanently deletes them, including following a data subject request. Any contractual data follows applicable administrative and tax requirements.
Any further retention is limited to legal duties or protecting rights within applicable limitation periods and, where a dispute arises, until it is resolved. Browsing data is limited to operational and security needs and investigating abuse. Retention is governed by necessity, relevance and proportionality to the purpose; when these cease, data must be deleted or anonymised.
Recipients and protection
Data may be accessed by people authorised to handle enquiries and, within their assigned tasks, communication, support and website service providers, advisers and parties entitled to receive information by law. Providers processing data on the controller’s behalf must be appointed as processors under Article 28 GDPR. Competent authorities may receive data as required by law. Enquiry data is not intended for public disclosure.
Processing must be protected by appropriate measures against unauthorised access, loss and misuse, limiting access to people who need it for their duties.
International transfers and external links
Any transfer of data outside the European Economic Area is permitted only under Articles 44 et seq. GDPR, based on an adequacy decision or appropriate safeguards, such as standard contractual clauses and any necessary additional measures. You can ask the controller about recipients and request a copy or details of applicable safeguards.
Links to social networks, maps and other websites open external services. Opening them is your choice, and processing on those services is described in their own privacy notices. This notice concerns the YOLO website and enquiries addressed to the venue.
Browsing preferences and cookies
The website uses cookie-free Cloudflare Web Analytics to measure visits, page views and Core Web Vitals. Social, map, phone and email clicks are stored in D1 only as daily aggregate counters by language, without IP addresses, user agents, fingerprints or visitor identifiers. Custom images are held in a private R2 bucket.
This function serves the personalisation you request and does not require consent under Article 122 of the Italian Privacy Code. You can change it with the language selector or remove it through your browsing application’s settings; clearing it restores the default language.
Your rights
Under the conditions in Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability of data you provided where automated processing is based on consent or contract. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
Send your request to info@yolocaserta.it. A response is normally provided within one month; for complex or numerous requests this may be extended by two further months, with notice within the first month. Where there are reasonable doubts about your identity, only information necessary to verify it may be requested.
You may lodge a complaint with the Italian data protection authority at www.garanteprivacy.it, or the authority where you habitually reside, work or where the alleged infringement occurred. Your right to seek a judicial remedy remains unaffected.
Updates
This notice concerns the processing described and is provided under Article 13 of Regulation (EU) 2016/679 and Italian Legislative Decree 196/2003, as amended. Any new purposes require further information before the relevant processing begins. The revision date is shown at the start of this page.