Privacy policy
What data the SWOSH - Urban Laundry website processes, why, who with, for how long, and how you can exercise your rights (Article 13 of Regulation (EU) 2016/679, the GDPR).
1. Who processes your data
The data controller is CLEANLAB SRL, Via Pier Dionigi Pinelli 88/B, 10144 Torino, VAT no. 13431760019. You can write to amministrazione@lavanderiaswosh.it or to our certified email address (PEC) cleanlabsrl@pec.it.
We have not appointed a data protection officer (DPO), as our business is not required to have one: for any privacy question, use the contacts above.
2. What data
The website has no forms and no private areas, and never asks you to sign up. The data falls into four kinds.
Browsing data. When you open a page, your browser sends the server technical data: IP address, date and time, the page requested, the site you came from, and your browser and device type. This happens with any website.
Visit statistics without cookies. The page viewed, the site you came from, approximate country and city (derived from the IP address), operating system, browser, device type and the main buttons you tap, such as "Get directions". They use no cookies and are not tied to your IP address.
Google Analytics, only if you consent. Pages viewed, the site you came from, approximate country and city, device and browser, how far you scroll a page, the main buttons and the links to other websites you tap, plus a random code, stored in a cookie, that recognises your browser from one visit to the next. If you connect from the European Union, Google Analytics does not log or store your IP address.
What you send us. If you call us, message us on WhatsApp or Instagram, or email us: your number or address, your profile name, what you write and any photos you attach, for example of a machine that will not start. Please send only what your request needs.
3. Why, and on what legal basis
Showing you the website and keeping it secure. We use browsing data to show you the pages and to protect the website from abuse and attacks. Legal basis: our legitimate interest in a website that works and is secure (Article 6(1)(f) GDPR).
Counting visits. Statistics tell us which pages are useful and which to improve, in aggregate numbers: not who you are. Legal basis: our legitimate interest in improving the website (point f). The cookie policy explains how this works without cookies.
Understanding how you use the website, if you consent. With Google Analytics we see which pages and buttons are most useful and where visits come from, always in aggregate numbers. Legal basis: your consent (point a), which you can withdraw at any time from "Cookie preferences", at the bottom of every page, with no consequences.
Replying to you. We use what you send us only to reply and to handle your request, for example a question about prices or a machine that will not start. Legal basis: your request, before or while you use our services (point b); for questions that are not about a service, our legitimate interest in replying (point f).
Replying to reviews. If you leave a Google review, we read it and may reply publicly on our profile. Legal basis: our legitimate interest in looking after our relationship with customers (point f).
Defending our rights. If a dispute arises, we may use the data needed to establish or defend a legal claim. Legal basis: legitimate interest (point f).
Nothing else. We do not use your data for advertising, we do not sell it, we do not build advertising profiles and we make no automated decisions about you.
Do you have to give us your data? No. Browsing data is needed to show you the pages: without it, the website does not open. Google Analytics is optional: if you reject it, the website works just the same. Everything else is up to you: if you do not contact us, we simply cannot reply.
4. Who we share it with
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Hosts the website and counts visits, on our behalf. | United States, where it is based. Pages come from the server closest to you: from Italy, normally one in Europe. |
| SiteGround Spain S.L. | Runs our email inboxes (@lavanderiaswosh.it), on our behalf. | Netherlands (EU) |
| Aruba PEC S.p.A. | Runs our certified email (PEC), if you write to it, on our behalf. | Italy (EU) |
| WhatsApp Ireland Limited | Only if you message or call us on WhatsApp: processes the messages we receive, on our behalf. | Ireland (EU) and United States |
| Google Ireland Limited | Google Analytics, only if you consent, on our behalf. Google Maps, only if you tap "Get directions", "Open in Maps" or "Leave a review". | Ireland (EU) and United States |
| Meta Platforms Ireland Limited | Only if you open our Instagram profile or message us there. | Ireland (EU) and United States |
- Vercel Inc.
- Hosts the website and counts visits, on our behalf.
- Where: United States, where it is based. Pages come from the server closest to you: from Italy, normally one in Europe.
- SiteGround Spain S.L.
- Runs our email inboxes (@lavanderiaswosh.it), on our behalf.
- Where: Netherlands (EU)
- Aruba PEC S.p.A.
- Runs our certified email (PEC), if you write to it, on our behalf.
- Where: Italy (EU)
- WhatsApp Ireland Limited
- Only if you message or call us on WhatsApp: processes the messages we receive, on our behalf.
- Where: Ireland (EU) and United States
- Google Ireland Limited
- Google Analytics, only if you consent, on our behalf. Google Maps, only if you tap "Get directions", "Open in Maps" or "Leave a review".
- Where: Ireland (EU) and United States
- Meta Platforms Ireland Limited
- Only if you open our Instagram profile or message us there.
- Where: Ireland (EU) and United States
Vercel, SiteGround, Aruba PEC, WhatsApp and Google for Google Analytics are processors (Article 28 GDPR): they process data only on our behalf and on our instructions, under a binding contract.
Google for Maps and reviews, Meta, and WhatsApp for your own account, are independent controllers: when you use their services, their privacy policies apply.
At SWOSH, messages are read only by the people authorised to reply to customers. We do not give your data to anyone else, except to the authorities when the law requires it.
5. Data outside the European Union
Vercel is based in the United States, and Google, WhatsApp and Meta may also process data there. These transfers are covered by the EU-U.S. Data Privacy Framework, the European Commission adequacy decision of 10 July 2023 in which Vercel Inc., Google LLC, WhatsApp LLC and Meta Platforms Inc. take part, and by the standard contractual clauses approved by the Commission (Decision 2021/914).
SiteGround keeps our email in the Netherlands. If one of its providers processes data outside the EU, it does so under the same standard contractual clauses.
You can ask us for a copy of these safeguards by writing to amministrazione@lavanderiaswosh.it.
6. How long we keep it
Browsing data. It stays in the hosting provider's technical logs for as short a time as possible: we can see it for one day at most, and we do not copy it anywhere else.
Statistics without cookies. The code that stops the same visit being counted twice is deleted after 24 hours. The aggregate numbers, which identify nobody, can be viewed for 12 months.
Google Analytics. Its cookies stay in your browser for 2 years, or until you withdraw your consent or delete them. The data of individual visits stays in Google Analytics for 2 months, then it is deleted; only the aggregate numbers remain.
Messages, emails and calls. We keep them for as long as we need to handle your request and, after that, only while they may be needed for a dispute about that service. Then we delete them.
Reviews. They stay on Google until you delete them; our reply stays as long as the review does.
7. Your rights
You can ask us at any time to access your data, correct it, erase it, restrict its processing or, where the law provides for it, receive it in a machine-readable format.
Right to object. On grounds relating to your situation, you can object at any time to processing based on our legitimate interest: the website, statistics without cookies and reviews. We will stop, unless there are compelling legitimate grounds or the data is needed to defend a legal claim.
To exercise your rights, write to amministrazione@lavanderiaswosh.it. It is free. We reply within one month; if the request is complex we may take two more months, and we will tell you. If needed, we will ask you for one detail to check that the request comes from you.
If you think we are not handling your data correctly, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (Piazza Venezia 11, 00187 Rome) or with the supervisory authority of the EU country where you live or work.
8. If something changes
If the website changes, for example with a contact form or a new statistics tool, we will update this page first, together with the date at the top.