Privacy Policy
Last updated: 1 June 2026
This policy describes how [Ragione Sociale] (Data Controller) processes the personal data of Hobbyx users under Regulation (EU) 2016/679 (GDPR).
1. Data controller
[Ragione Sociale], [Indirizzo completo], [P. IVA]. Email: info@hobbyx.it.
2. Data we process
Registration data (name, email), purchase and shipping data (address), and technical browsing data.
Payment data is processed directly by Stripe; we do not store full card details.
3. Purposes and legal bases
Performance of the contract (account, purchases, shipping, masterclass access).
Legal obligations (invoicing, accounting).
Legitimate interest (service security) and, where required, consent (marketing communications, non-essential cookies).
4. Processors and third parties
We use providers that process data on our behalf, including Supabase (authentication and database) and Stripe (payments), under their respective terms.
5. Retention
Data is retained for as long as necessary for the stated purposes and in compliance with legal obligations.
6. Your rights
You have the right to access, rectify, erase, restrict, port and object, as well as to lodge a complaint with the supervisory authority. To exercise them, email info@hobbyx.it.
7. Transfers and security
We adopt appropriate technical and organizational measures. Any non-EU transfers are made with adequate safeguards (e.g. standard contractual clauses).