Privacy Policy

Vetreria Ducale S.r.l., Fondamenta Navagero 76, 30141 Murano (VE), Italy — VAT no. 04965190277 — email: [email protected]

• Purchase data: the email address and billing details you enter at checkout, the number of tickets, the amount paid and the tickets issued to you.
• Payment data: card and wallet details are entered on the Stripe checkout page and processed by Stripe. We never receive your full card number.
• Technical data: the IP address and browser user agent at the time of purchase.
• Campaign data: how you reached the site, such as campaign parameters (UTM), Google and Meta click identifiers and the referring website.
• Cookie and browser storage data: see section 6.

• To sell you tickets, send them by email, check them at the entrance and answer your requests — performance of a contract (art. 6(1)(b) GDPR). Purchase data is required: without it we cannot sell you a ticket.
• To keep accounting and tax records — legal obligation (art. 6(1)(c) GDPR).
• To prevent fraud, protect the website and payments, and understand which campaigns bring sales — legitimate interest (art. 6(1)(f) GDPR).
• Website analytics with Google Analytics and advertising measurement with Meta (Pixel and Conversions API) — your consent (art. 6(1)(a) GDPR), given through the cookie banner. You can withdraw it at any time with the "Cookie settings" link at the bottom of the page.

Only if you accept cookies, we tell Meta when you view the ticket page, start a checkout and complete a purchase. Along with these events we send your email address in hashed form (SHA-256, never in clear text), your IP address, your browser user agent and the Meta cookie identifiers. This lets Meta measure the results of our ads. If you choose "Essentials only", nothing is sent to Meta, neither from your browser nor from our servers.

• Stripe Payments Europe Ltd, which processes payments.
• Meta Platforms Ireland Ltd, only with your consent (section 4).
• Google Ireland Ltd, for Google Analytics (only with your consent) and for the Google Maps map shown on the page.
• Cloudflare, Inc., which delivers and protects the website.
• Our hosting and email delivery providers, acting as data processors.
• Accountants and public authorities, where required by law.

We do not sell personal data. Some of these providers may process data outside the European Economic Area, notably in the United States; these transfers rely on the EU–US Data Privacy Framework adequacy decision or on the European Commission's Standard Contractual Clauses.

Essential items work without consent: they only remember your choices and make checkout work. Analytics and advertising cookies are set only after you accept them.

Staff who sign in to the ticket validation area also receive a "token" cookie, needed to keep them logged in. Visitors buying tickets never receive it.

Order data, including the technical and campaign data stored with it, is kept for 10 years, the period required for accounting records under Italian law (art. 2220 of the Civil Code). Cookies and browser storage last as shown in the table above.

You can ask to access, correct or delete your data, to restrict or object to its processing and to receive it in a portable format (arts. 15–21 GDPR), and you can withdraw your consent at any time without affecting what was done before. Write to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country of residence.

We may update this notice. The date at the top shows the latest version.