Legal · Milano
Privacy Policy
maison-doro.com is operated by AM CAP HOLDING S.r.l.s., which is the data controller for the personal data collected through this site. This page sets out what we collect, why, who receives it, and what you can ask us to do about it.
Last updated: 12 August 2026
Who we are
Controller: AM CAP HOLDING Società a Responsabilità Limitata Semplificata, Via Conservatorio 17, 20122 Milano (MI), Italy.
Codice fiscale and Partita IVA: 14826690969. REA: MI 2809574.
PEC: amcapholding@sicurezzapostale.it
Privacy contact: info@maison-doro.com. Use this address for any request concerning your data.
We have not appointed a Data Protection Officer, as we are not required to under Art. 37 GDPR.
What we collect
What you give us
Our contact form asks for your first name, last name, email address, phone number and country. Nothing else.
You are not obliged to provide any of it. If you do not, we cannot reply to you. That is the only consequence.
What is collected automatically
Nineteen further fields are collected while you browse, without you typing anything. They are attached to your contact form submission when you send it.
Where you came from: utm_source, utm_medium, utm_campaign, utm_term, utm_content, the referring website, the page you landed on, the page you submitted from, and the time of your first visit.
Advertising click identifiers: gclid (Google), fbclid (Meta), msclkid (Microsoft), ttclid (TikTok).
Your device: device type and exact screen resolution, browser language, time zone, and your full user agent string.
Your browsing: a readable summary of how you reached us, plus a complete record of your first visit, your most recent visit, and your current session.
Two parts of this deserve to be spelled out.
We store every query parameter in the URL you arrive on, not a chosen list. Anything appended to a link pointing at this site is recorded, up to 300 characters per parameter.
We keep a short browsing history. The paths of the last 20 pages you viewed in your session, along with your first ever and most recent visit timestamps, are held in your browser and sent to us with any form you submit.
What our server adds
The time of submission. Your IP address, read from our hosting provider. Your Meta cookie values at the moment you submit. The IP address and cookie values are not kept in our lead records. They go to Meta, as set out below.
Why we use it, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiry and sending the confirmation email | Name, email, phone, country | Art. 6(1)(b), steps taken at your request before a contract |
| Keeping the enquiry in our lead sheet and CRM so we can follow up | Contact details plus the campaign and referral fields | Art. 6(1)(b), and Art. 6(1)(f) legitimate interest in managing enquiries |
| Measuring our advertising through Meta Pixel and the Conversions API | Hashed contact details, IP address, user agent, Meta cookies | Art. 6(1)(a) consent, and Art. 5(3) ePrivacy for the cookies |
| Understanding site usage through PostHog analytics | Pageviews, device and browser data, a distinct identifier | Art. 6(1)(a) consent |
| Recording where you came from, in your browser | Query parameters, referrer, landing page, page paths | Art. 6(1)(a) consent |
Consent for the last three rows is collected by the banner shown on your first visit. You can change or withdraw it at any time via . Withdrawal applies going forward and does not affect what was lawful before.
Cookies and browser storage
| Name | Type | Set by | What it holds | Expiry |
|---|---|---|---|---|
md_attr_first | localStorage | Us | Your first ever visit: all query parameters, referrer, landing page, timestamp | Never |
md_attr_last | localStorage | Us | Your most recent campaign or referral visit, same content | Never |
md_attr_session | sessionStorage | Us | Landing page, pageview count, last 20 page paths | When you close the tab |
_fbp | Cookie | Meta Pixel | Browser identifier | About 90 days |
_fbc | Cookie | Meta Pixel | Advertising click identifier | About 90 days |
ph_*_posthog | Cookie and localStorage | PostHog | Distinct identifier, session identifier | About 365 days |
None of these are necessary for the site to work. All of them are set on the basis of your consent, and you can remove them at any time by clearing site data in your browser.
Who receives your data
| Recipient | Purpose | Location |
|---|---|---|
| Netlify | Hosting, form handling, server logs including your IP address | United States, global network |
| Google (Sheets) | Our authoritative record of enquiries | Europe |
| Folk | CRM record: name, email, phone, country, campaign and referral fields | France |
| Meta | Advertising measurement through the Pixel and Conversions API | Ireland and United States |
| Resend | Delivery of the confirmation email: your email address and first name | Ireland |
| PostHog | Site analytics, routed through our own domain first | European Union region |
| Google Calendar | Only if you choose to book a call from the booking link | Google, as a separate controller |
What Meta receives. On each successful enquiry we send Meta your email, phone number, first name and last name, hashed with SHA-256, together with your IP address, full user agent and Meta cookie values, which are not hashed. Hashing hides the values but does not make them anonymous, and all of it remains personal data. For Pixel and Conversions API data, we and Meta act as joint controllers under Meta’s controller terms.
Transfers outside Europe. Netlify, Google and Meta are established in the United States and can access data from there. Each transfer relies on the safeguards in that provider’s standard data processing terms, which are the European Commission’s Standard Contractual Clauses or, where the provider is certified, the EU-US Data Privacy Framework.
Everything else stays in Europe. Our Google Workspace is set to a European region, Resend delivers from Ireland, PostHog is configured to its EU region, and Folk is established in France.
How long we keep it
We keep enquiry records for 24 months from our last contact with you, then delete them from our lead sheet and our CRM. If you become a client, the documents behind that relationship are kept for the longer periods Italian law requires of us, in particular the ten years set by Art. 2220 of the Civil Code for accounting records.
Analytics and advertising data are held for the periods set by PostHog and Meta. Browser storage stays until it expires or you clear it. If you ask us to erase your data sooner, we do.
Your rights
You can ask us for a copy of your data, ask us to correct it, delete it, restrict how we use it, or send it to another provider in a portable format. You can object to processing based on our legitimate interest. You can withdraw consent for analytics and advertising at any time.
Write to info@maison-doro.com. We reply within one month. Erasure means removing you from our lead sheet, our CRM, our analytics, our email delivery logs and Meta’s records, and we do this on request.
Complaints
If you think we have handled your data badly, you can complain to the Garante per la protezione dei dati personali, the Italian supervisory authority, at www.garanteprivacy.it. You can also complain to the authority in the European country where you live.
What we do not do
- We do not record your screen or your session
- We do not capture your clicks, keystrokes or what you type into forms
- We do not run heatmaps or on-site surveys
- We do not sell your data or share it with data brokers
- We do not make automated decisions about you, and we do not profile you in the sense of Art. 22 GDPR
- We set no advertising cookies other than Meta’s
Changes to this policy
We update this page when the site changes what it collects. The date at the top always reflects the current version. If a change is significant, we will say so on the page rather than update it quietly.