Privacy Policy

Information pursuant to art. 13 GDPR

This information is provided pursuant to Article 13 of the European Data Protection Regulation (GDPR) and describes how your personal data is processed by the data controller according to the purposes indicated below.

The data controller is Babytales di Annalisa Scandurra who can be contacted at the following addresses: Piazzetta Ado Furlan 4 - 33170 Pordenone (PN); e-mail: hi@babytales.ai

Purpose

Purpose TO

Order and purchase confirmation

Data Processed Name, surname, email
Legal Basis Contract – the provision of data is necessary to proceed with the purchase
Data retention period 10 years
Rights of the interested party Right of access (art. 15); Right to update and rectification (art. 16); Right of limitation (art. 18); Notification in case of rectification to the recipients to whom the data have been transmitted (art. 19); The right to data portability (art. 20); Right to lodge a complaint with a supervisory authority (www.garanteprivacy.it)

Purpose B

Billing

Data Processed Name, surname, email, billing address, tax code, PEC
Legal Basis Compliance with a legal obligation - the provision of data is a legal obligation
Data retention period 10 years
Rights of the interested party Right of access (art. 15); Right to update and rectification (art. 16); Right of limitation (art. 18); Notification in case of rectification to the recipients to whom the data have been transmitted (art. 19); Right to lodge a complaint with a supervisory authority (www.garanteprivacy.it)

Purpose C

Shipping of the book

Data Processed Name, surname, address
Legal Basis Time required for shipping
Data retention period 10 years
Rights of the interested party Right of access (art. 15); Right to update and rectification (art. 16); Right to delete personal data (art. 17); Right of limitation (art. 18); Notification in case of rectification or cancellation to the recipients to whom the data have been transmitted (art. 19); The right to data portability (art. 20); Right to lodge a complaint with a supervisory authority (www.garanteprivacy.it)

Purpose D

Marketing

Data Processed Email address
Legal Basis Consent – ​​the communication of data is not mandatory but in case of failure to communicate it will not be possible to receive information from the owner
Data retention period 2 years or immediately in case of withdrawal of consent
Rights of the interested party Right of access (art. 15); Right to update and rectification (art. 16); Right to delete personal data (art. 17); Right of limitation (art. 18); Notification in case of rectification or cancellation to the recipients to whom the data have been transmitted (art. 19); The right to data portability (art. 20); Right of opposition (art. 21); Right to lodge a complaint with a supervisory authority (www.garanteprivacy.it)

We inform you that for the above-mentioned treatments there is no automated decision-making process that produces legal effects or similarly significantly affects your person (art. 22 GDPR).

Personal data is communicated to the following recipients depending on the purposes pursued.

As independent owners (to check their privacy information, please refer to their respective websites):

  • Shopify Inc. for e-commerce and payment operations;
  • Paypal Holdings Inc. for payment transactions.

As data controllers to:

  • Amazon Web Services for computing and databases;
  • Tally for sending e-mails necessary for generating the book;
  • Vercel Inc. for platform hosting;
  • Short for the newsletter;
  • Ice cream for printing and shipping books;

Personal data is transferred to non-EEA countries, specifically to the United States, a country that has signed the Data Privacy Framework with the European Union to guarantee interested parties the same level of security recognized with the GDPR.

Update date 07/24/2023