Privacy policy
Version 2026-10-v1 · Last updated 2026-10-14
This policy explains which personal data we process when you use this digital warranty service, why, on what legal basis, and the rights you have. We keep it short and plain. (Draft pending legal review.)
Who is responsible
The data controller is [OPERATOR LEGAL NAME], [OPERATOR ADDRESS]. For any question about your data, write to [privacy@your-domain].
Each shop you add a product from is a separate controller for the data it sees about you (your name, verified e-mail and language). We provide the platform.
What we process and why
Account: your e-mail address, and — if you register — your first name, last name and preferred language. Purpose: to sign you in and show you your warranties.
Warranties and fault reports: the products a shop registered for you, the warranty data, and the messages and status of any fault report you open. Purpose: to run the warranty and after-sales service.
Technical data: a session cookie (strictly necessary) and security counters derived from your e-mail and, where available, a keyed hash of your IP address (never the plain IP). Purpose: to keep sign-in secure and to limit abuse.
Legal basis
Performance of a contract (Art. 6(1)(b) GDPR) for your account, warranties and fault reports; your consent (Art. 6(1)(a)) when you choose to share your data with a shop; and our legitimate interest (Art. 6(1)(f)) in keeping the service secure.
Who receives your data
The shop you add a product from receives your name, verified e-mail and language, after you agree on the sharing screen. You can see per shop what was shared and when.
Service providers acting on our instructions: our e-mail provider (to send sign-in codes and notifications) and our hosting provider ([HOSTING PROVIDER, EU REGION]). We do not sell your data.
How long we keep it
We keep account, warranty and fault-report data for as long as your account exists and [RETENTION PERIOD — to be confirmed]. Short-lived technical data (sign-in codes, expired sessions, security counters) is deleted automatically by a scheduled clean-up.
Your rights
You can request access to your data, and its rectification, erasure or restriction; object to processing based on legitimate interest; and ask for a copy of the data you gave us (portability). Where processing relies on consent, you can withdraw it at any time, without affecting earlier processing.
To exercise any right, write to [privacy@your-domain]. You also have the right to lodge a complaint with your supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
Is providing data required
An e-mail address is needed to create an account and to receive a warranty; without it you cannot use the service. Everything else is optional.