Privacy Policy

Last updated: 1 June 2026

This policy describes how [Ragione Sociale] (Data Controller) processes the personal data of Hobbyx users under Regulation (EU) 2016/679 (GDPR).

1. Data controller

[Ragione Sociale], [Indirizzo completo], [P. IVA]. Email: info@hobbyx.it.

2. Data we process

Registration data (name, email), purchase and shipping data (address), and technical browsing data.

Payment data is processed directly by Stripe; we do not store full card details.

3. Purposes and legal bases

Performance of the contract (account, purchases, shipping, masterclass access).

Legal obligations (invoicing, accounting).

Legitimate interest (service security) and, where required, consent (marketing communications, non-essential cookies).

4. Processors and third parties

We use providers that process data on our behalf, including Supabase (authentication and database) and Stripe (payments), under their respective terms.

5. Retention

Data is retained for as long as necessary for the stated purposes and in compliance with legal obligations.

6. Your rights

You have the right to access, rectify, erase, restrict, port and object, as well as to lodge a complaint with the supervisory authority. To exercise them, email info@hobbyx.it.

7. Transfers and security

We adopt appropriate technical and organizational measures. Any non-EU transfers are made with adequate safeguards (e.g. standard contractual clauses).