Privacy Policy
This policy explains what personal data Zhosie ("we", "us") collects when you visit zhosie, why we collect it, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is:
Zhosie
Via de' Tornabuoni 12, Florence, Italy
hello@zhosie.com
legal.entity_name (and legal.vat)
in data/site.json, then regenerate the site.
2. What we collect
| Data | When | Why | Legal basis |
|---|---|---|---|
| Email address | You submit the newsletter form | To send you collection updates | Consent (Art. 6(1)(a)) |
| IP address & timestamp | Subscribing, or hitting a rate limit | Abuse prevention — max 3 submissions per minute per IP | Legitimate interest (Art. 6(1)(f)) |
| Technical access data (IP, user agent, requested URL) | Every request | Keeping the server running and secure | Legitimate interest (Art. 6(1)(f)) |
We do not: sell your data, run a shopping cart or payment processing, build advertising profiles, or use fingerprinting.
3. Cookies
We use a small number of cookies. Essential ones are required for the site to work; analytics cookies load only if you accept them. Full details are in our Cookie Policy.
4. Who we share data with
Your subscription data stays on our own server; it is never sent to a third party.
Analytics are not currently enabled. If we enable them later, the consent banner will ask you first, and this policy will be updated.
5. How long we keep it
Subscription records are kept for 730 days (about 2 years) from your last interaction, or until you unsubscribe. Server access logs are rotated and kept for a short operational period, then deleted.
6. Your rights
Under the GDPR you have the right to:
- Access — get a copy of the data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — have your data deleted ("right to be forgotten")
- Restriction — ask us to pause processing
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these, email hello@zhosie.com. We answer within 30 days.
You also have the right to lodge a complaint with your national supervisory authority. In Italy that is the Garante per la protezione dei dati personali (garanteprivacy.it).
7. Children
This site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has subscribed, contact us and we will delete the record.
8. Security
We use HTTPS, http-only session cookies, CSRF protection on every admin action and rate limiting on public forms. No system is perfectly secure, but we take proportionate measures and review them regularly.
9. Changes
Material changes will be announced on this page with an updated date. Continued use of the site after a change means you accept the revised policy.
10. Contact
Zhosie
Via de' Tornabuoni 12, Florence, Italy
Email: hello@zhosie.com
Tel: +39 055 123 4567