1. Data Controller
The Data Controller is Gianni Cusumano, VAT No. 02828090841, based in Castelbuono, Sicily, Italy.
For any request concerning the processing of personal data, you can write to gianni.cusumano@gmail.com.
2. Personal data processed
This website collects only the data needed to provide the services requested by the user. Depending on how the website is used, the following data may be processed:
- contact data: name, email address, message content and any details connected to the request;
- newsletter data: email address and proof of consent;
- book purchase and shipping data: first name, last name, email address, phone number, shipping address, country, order code and data needed to connect the purchase request with the PayPal payment;
- technical browsing data: IP address, date and time of the request, user agent, requested URL and similar technical data generated by server and security systems.
The website does not request special categories of personal data, such as health, biometric, political or religious data. Please do not enter this type of information in free-text form fields.
3. Purposes, legal bases and retention periods
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to requests sent through contact forms or email. | Pre-contractual measures or legitimate interest in replying to the request. | For the time needed to manage the conversation and any related follow-up. |
| Managing newsletter subscription. | User consent. | Until consent is withdrawn or deletion is requested. |
| Managing book purchase requests, PayPal payment and book shipment. | Pre-contractual or contractual measures requested by the user. | For the time needed to complete payment, shipment and post-order assistance. |
| Administrative, accounting and tax obligations connected to payments or sales. | Legal obligation. | According to the retention periods required by applicable law. |
| Website security, abuse prevention and technical maintenance. | Legitimate interest in keeping the website secure and properly functioning. | For the technical time needed for security, diagnostics and maintenance. |
4. Whether data is required
Data requested in forms is necessary to manage the specific request. If the user does not provide it, it may not be possible to reply, subscribe the user to the newsletter, complete the purchase or ship the book. Newsletter consent is optional and does not affect other services.
5. Book purchase and data minimization
For book purchases, the website collects only the data needed to identify the request, prepare the payment, receive the shipping address and allow Gianni to manually verify the payment before shipment.
The website does not create customer accounts, does not use a shopping cart and does not store orders in an internal order management system. After the form is submitted, the data is used to generate the PayPal payment summary and to send an operational email to the Data Controller. Any subsequent retention takes place in the Data Controller's email inbox, in PayPal systems and, where necessary, in administrative or tax documentation.
6. Newsletter
The newsletter is used only to send occasional updates about workshops, works, prints and studio activities. The user may withdraw consent at any time by writing to the email address provided in this notice.
7. Recipients and service providers
Data may be processed by technical providers needed to deliver the website and connected services, within the limits of their respective roles. These may include:
- website hosting and infrastructure providers;
- Resend, for email delivery and newsletter management;
- PayPal, for payments and data connected to the transaction;
- email providers used by the Data Controller and by the user;
- external services reached through links or embedded content, such as YouTube or social networks.
Data is not sold, is not shared for advertising purposes and is not used by this website for profiling.
8. Transfers outside the European Economic Area
Some technical or payment providers may process data outside the European Economic Area. In such cases, transfers take place according to the safeguards required by the GDPR and the privacy notices of the relevant providers.
9. Automated decision-making
The website does not carry out automated decision-making that produces legal effects concerning the user and does not perform advertising profiling.
10. User rights
Where provided by law, the user may exercise the rights of access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise these rights, write to gianni.cusumano@gmail.com. The user also has the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it.
11. Cookies and tracking tools
Information about cookies and similar tools is available in the Cookie Policy.