Last updated: [DATE]. Data controller: [LEGAL NAME, ADDRESS, EMAIL].
Hosts (our customers): the content you put in your guidebook, your contact details shown to guests, your order and activation records, and support emails.
Guests: we collect no guest data. Guest pages set no analytics, no tracking scripts, and no forms. The only cookie is an optional, functional PIN cookie on PIN-protected guidebooks, used solely to remember that the correct PIN was entered.
Guidebook content (contract performance), activation and claim records (fraud prevention and contract performance), the email you optionally leave in the free wifi tool (consent, revocable), support correspondence (legitimate interest).
Cloudflare (hosting, storage, AI processing), Lemon Squeezy (checkout, Merchant of Record), Etsy (marketplace orders). Each under their own DPA.
Guidebook data: 5 years from purchase plus a grace period, then deletion. Activation and claim logs: as long as needed for fraud prevention and legal obligations. Leads: until you unsubscribe.
Access, rectification, erasure, restriction, portability, objection. Write to [EMAIL]. You can complain to your supervisory authority (in Italy: Garante per la protezione dei dati personali).
Processors may process data outside the EU under appropriate safeguards (SCCs, adequacy decisions). [VERIFY PER PROCESSOR]