Information pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code, Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
This page explains which data is collected when you visit www.wunderfarm.com, why we process it and how long we keep it. Short answer: very little.
1. Data controller
Suti Srl — wunderfarm brand
Via Scuderie 8
39012 Merano (BZ), Italy
VAT ID / tax code: IT02797340219
Phone: +39 0473 427470
Email: info@wunderfarm.com
We have not appointed a Data Protection Officer; under Article 37 GDPR we are not required to. For anything to do with data protection, reach us at the address above.
2. When you write to us
If you send us an email or call, we process what you tell us: name, email address, phone number where given, company and the content of your message.
Purpose: answering your enquiry and, if something comes of it, getting a project started.
Legal basis: Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract. Where your message is about something other than working together, we rely on our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).
Retention: until the enquiry is settled, then up to 24 months in case you come back to it. If it turns into an engagement, the ten-year tax and commercial retention periods apply.
This website has no contact form. You decide what goes into your message.
3. Server logs and hosting
Every visit to a website leaves technical traces on the server. In our case: IP address, date and time, address requested, HTTP status code, amount of data transferred, browser and operating system identifier.
Purpose: delivering the page, operational security, troubleshooting and fending off attacks.
Legal basis: Article 6(1)(f) GDPR — legitimate interest in secure and uninterrupted operation.
Retention: log files are deleted automatically after 30 days at the latest. Only where a specific security incident has to be investigated do we keep the relevant entries longer.
The website runs on Amazon Web Services (AWS). Servers and storage sit in the eu-central-1 region, that is, in a data centre in Frankfurt am Main.
Delivery goes through Amazon CloudFront. This content delivery network keeps copies of the site at locations in Europe, the United States and Canada, and answers every request from the nearest one. Reached from Europe, your request does not leave Europe. Reached from North America, it is handled there — what that means is in section 6.
4. Traffic measurement with Plausible
We want to know which pages get read, not who reads them. For that we use Plausible Analytics, a European service running on servers in the EU.
Plausible sets no cookies, assigns no device identifier and builds no profiles. Only aggregated, anonymous figures are recorded: page viewed, referring page, device type, browser and country. The IP address is used briefly for processing and is not stored. The data cannot be traced back to an identified person.
The measurement script does not sit at Plausible. Your browser loads it from wunderfarm.com under /js/pa-….js, and the counting calls go to the same domain under /api/event; our delivery network passes both on to Plausible without storing them. For you that means no connection to an outside server and nothing an ad blocker would see as a third-party request. For Plausible nothing changes — the page viewed, the referring page, the browser identifier and, for the duration of processing, your IP address still arrive there.
Purpose: understanding how the website is used and improving it accordingly.
Legal basis: Article 6(1)(f) GDPR — legitimate interest in a website that works. No consent is required because no information is stored on or read from your device.
Retention: the aggregated statistics are kept indefinitely. They no longer contain personal data.
More detail on our cookie page.
5. Your theme choice
If you pick the light or the dark theme, your browser remembers that choice locally (localStorage, key wf-theme). The value never leaves your device and never reaches us. With no choice made, the site follows your operating system setting.
6. Recipients and processors
We do not sell data and do not pass it on for advertising. The only parties with access are:
- Amazon Web Services EMEA SARL (Luxembourg) — hosting, storage and email delivery via Amazon SES. Processor under Article 28 GDPR on the basis of the AWS Data Processing Addendum.
- Plausible Insights OÜ (Estonia) — traffic measurement, processed exclusively within the EU. Processor under Article 28 GDPR. The requests reach Plausible through our own delivery network, see section 4; that does not change its role as a processor.
- Suti Srl itself, for handling your enquiries.
Our contracting party is Amazon Web Services EMEA SARL, based in Luxembourg, and the site itself lives in Frankfurt am Main. Reached from North America, the request is served by a CloudFront location in the United States or Canada, which processes the visitor's IP address in doing so. For that case the European Commission's standard contractual clauses apply, which form part of the AWS Data Processing Addendum. No further transfer to third countries takes place.
Beyond that we disclose data only where we are legally obliged to or where an authority lawfully requests it.
7. No automated decision-making
There is no automated decision-making, including profiling, within the meaning of Article 22 GDPR. Nobody here is assessed by an algorithm.
8. Do you have to provide anything?
No. The whole website can be read without telling us anything at all. Only if you want to get in touch do we need an address to answer at — without one it cannot work.
9. Your rights
Under Articles 15 to 22 GDPR you have the right to:
- access — confirmation of whether and which data we process about you
- rectification of inaccurate data
- erasure, unless a retention obligation stands in the way
- restriction of processing
- portability in a common, machine-readable format
- objection to processing based on legitimate interest — that is, to sections 3 and 4 of this policy
An informal message to info@wunderfarm.com is enough. We answer within one month, at no cost to you.
10. Right to lodge a complaint
If you believe we are not processing your data properly, you can complain to the Italian supervisory authority:
Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Rome, Italy
www.garanteprivacy.it
You may also turn to the supervisory authority where you habitually reside, or take the matter to court.
11. Minors
Our services are not aimed at children under 14. If a child has sent us data without the consent of a parent or guardian, write to info@wunderfarm.com and we will delete it straight away.
12. Changes
When something changes on the website or in the services we use, we update this policy. Last updated: September 2026.