Privacy Policy on the book

Information pursuant to art. 14 GDPR

This information is provided pursuant to Article 14 of the European Data Protection Regulation (GDPR) and describes how your personal data is processed by the data controller.

The data controller is Babytales di Annalisa Scandurra who can be contacted at the following addresses: Piazzetta Ado Furlan 4 - 33170 Pordenone (PN); e-mail: hi@babytales.ai

Purpose

Purpose TO

Creation of the book

Data Processed Name, age, gender, images of the child
Legal Basis Contract - The data provided are necessary for the purpose
Data retention period For the time strictly necessary to create and ship the book
Rights of the interested party Right of access (art. 15); Right to update and rectification (art. 16); Right to delete personal data (art. 17); Right of limitation (art. 18); Notification in case of rectification or cancellation to the recipients to whom the data have been transmitted (art. 19); The right to data portability (art. 20); Right to lodge a complaint with a supervisory authority (www.garanteprivacy.it)
The following purpose is achieved in the hypothesis in which the person who decided to give the book as a gift has provided a shipping address, electronic or physical, of a person other than the buyer himself:

Purpose B

Shipping of the book

Data Processed Name, surname, physical address or email
Legal Basis Legitimate interest - to execute the contract concluded with the buyer of the book
Data retention period Time required for shipping
Rights of the interested party Right of access (art. 15); Right to update and rectification (art. 16); Right to delete personal data (art. 17); Right of limitation (art. 18); Notification in case of rectification or cancellation to the recipients to whom the data have been transmitted (art. 19); Right to object (art. 21) Right to lodge a complaint with a supervisory authority (www.garanteprivacy.it)
We inform you that for the processing in question there is no fully automated decision-making process that produces legal effects or similarly significantly affects you (art. 22 GDPR).

Personal data is communicated to the following recipients depending on the purposes pursued. As independent owners in Astria for the system into which the photos of the child necessary for the creation of the book flow. As data controllers to:

  • Amazon Web Services for computing and databases;
  • Tally for filling out the form prior to creating the book;
  • Ice cream for printing and shipping books.

Personal data is transferred to non-EEA countries, specifically to the United States, a country that has signed the Data Privacy Framework with the European Union to guarantee interested parties the same level of security recognized with the GDPR.

Update date 07/24/2023