Last updated: 3 November 2026. This is a translation for your convenience: the Italian version prevails.
This policy explains how H4O SRL processes the personal data of people who visit h4o.it and of those who contact us, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
Data controller
H4O SRL
Via Augusto Riboty 10, 00195 Rome (RM), Italy
VAT no.: 18080291000
Email: h4o.customer@gmail.com
What data we collect
- Browsing data: IP address, browser and device type, pages visited, date and time. These are needed for the site to work and stay secure.
- Data you send us: name, email, phone number and message content when you fill in the contact form, or write to us by email or on WhatsApp.
- Video course waiting list: name and email, if you join the waiting list for the video course (available on the Italian site). Details are further down.
- Statistics: aggregated information on how the site is used, collected with Google Analytics, only if you give your consent.
Why we process them and on what legal basis
- Answering your requests and sending you quotes or information: pre-contractual steps at your request (Art. 6.1.b GDPR).
- Writing to you when the video course comes out, with your personal code, if you join the waiting list: only with your consent (Art. 6.1.a GDPR), which you can withdraw at any time.
- Managing the business relationship and tax and accounting obligations: contract and legal obligations (Art. 6.1.b and 6.1.c GDPR).
- Keeping the site secure: the controller’s legitimate interest (Art. 6.1.f GDPR).
- Visit statistics (Google Analytics) and embedded videos (YouTube): only with your consent (Art. 6.1.a GDPR), which you can withdraw at any time.
Cookies and third-party services
The site uses technical cookies, needed for it to work, and, only with consent through the banner, Google Analytics statistics cookies and YouTube cookies to show videos. Google may also process data in the United States, under the EU-U.S. Data Privacy Framework. Details are in the Cookie Policy, where you can also change your choices.
Who we share data with
Data are processed by authorised H4O SRL staff and by suppliers who help us run the site and services (hosting, email, Brevo for waiting-list emails, Google, WhatsApp/Meta), appointed as data processors where required. We do not sell your data to third parties.
How long we keep them
- Contact requests: for as long as needed to reply and in any case no more than 24 months, unless a business relationship begins.
- Video course waiting list: until two months after the course comes out, then we delete name and email. If you unsubscribe earlier, we stop writing to you.
- Contract and tax data: 10 years, as required by law.
- Statistics: according to Google Analytics settings, 14 months at most.
Video course waiting list
If you join the waiting list for the video course «Un orto da zero sul tuo balcone», you give us your name and email. We use them only to write to you about the course: when it comes out we send you the personal code to buy it for €34.
Your consent is needed (Art. 6.1.a GDPR): you give it by ticking the box in the form and confirm it by opening the link in the email we send you. You can withdraw it whenever you like, with the link at the bottom of every email or by writing to us.
Name and email go to Brevo (France), the service we use for waiting-list emails, which processes them on our behalf as a data processor (Art. 28 GDPR). The form uses no cookies and saves nothing in your browser. We keep name and email until two months after the course comes out, then we delete them.
Your rights
At any time you can request access, rectification, erasure, restriction of processing and data portability, object to processing and withdraw consent, without affecting the lawfulness of earlier processing (Arts. 15-22 GDPR). Write to h4o.customer@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante).
Changes
We may update this policy. The version in force is always the one published on this page, with the date of the last update.