Privacy policy
Last updated: July 2026
Controller
The controller for data processing on this website is OkayGrazie (Out of the Box Media, owner Manuel Siri), Flahwiesenweg 11, 39040 Vahrn/Varna (BZ), Italy. Email: ciao@okaygrazie.com.
In short
This site is built to collect as little as possible. By default no analytics or marketing services run. Only if you agree in the cookie banner do we activate Google Tag Manager and the services loaded through it. Without your consent, everything stays off.
Hosting
The site is hosted with Netlify (Netlify, Inc., USA). When you open the site, Netlify processes technically necessary access data (IP address, date and time, requested file, browser type). Transfer to the USA is based on the EU Standard Contractual Clauses. The legal basis is our legitimate interest in secure, stable operation (Art. 6(1)(f) GDPR).
Server log files
Access data is briefly stored in log files to ensure operation and security, then deleted or anonymised. It is not merged with other data.
Cookies and local storage
Technically necessary storage: in your browser local storage we only remember your cookie choice so the notice does not reappear. Analytics and marketing cookies are set only after you consent, and you can withdraw at any time by changing your choice in the banner.
Google Tag Manager & analytics
We use Google Tag Manager (Google Ireland Limited) and the analytics and marketing tags loaded through it. These run only with your consent. We use Google Consent Mode v2: analytics and advertising are denied by default and activate only once you choose "Okay grazie" in the banner. Data (including IP address, device and usage data) may then be transferred to Google, also to the USA, based on the EU Standard Contractual Clauses. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with future effect by changing your cookie choice.
Fonts
All fonts are served from our own server. There is no connection to Google Fonts or any external provider, so no IP address is passed to third parties.
Video
The header video is served directly from our server. No third parties such as YouTube or Vimeo are involved.
Contact
If you contact us by email or phone, we process your details to handle the request (Art. 6(1)(b) and (f) GDPR). The WhatsApp button opens WhatsApp, where Meta’s privacy terms apply. Data is only transferred to Meta once you write there.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection. To exercise them, contact ciao@okaygrazie.com.
Right to complain
You may lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).
Website check
The website check fetches the entered, publicly accessible URL server-side, stores the result for 24 hours in cache, and does not process any personal data beyond that.
Changes
We update this policy when the site or the legal situation changes.