Privacy Policy

The data controller for personal data is Bottega Back-Door (hereinafter “Back-Door Bottega”), with registered office at Piazza Galilei 3/A, 40123 Bologna (BO), Italy.

For any privacy-related request, you can contact us at: info@back-door.it

We collect the following categories of personal data:

2.1 Data you provide voluntarily

• Registration data: first name, last name, email address, password
• Purchase data: shipping and billing address, phone number
• Payment data: credit card details are handled directly by our payment partners (Stripe, PayPal) and are not stored on our servers
• Contact data: name, email, message when you use the contact form
• Applications: name, email, phone, CV when you submit an application via "Work With Us"

2.2 Data collected automatically

• Browsing data: IP address, browser type, operating system, pages visited, time spent
• Cookies and similar technologies: technical, analytics and profiling cookies (see our Cookies Policy)

Our apps collect the same data as the website for the same purposes. In addition:

• Crash reporting: The apps send crash and error reports to Sentry (Functional Software, Inc.) so we can fix defects. A report carries the device model, operating system version, app version, a random identifier of the installation and the technical details of the error. It never carries your name, e-mail address, password, address or payment details. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). We have asked Sentry not to store IP addresses.
• Usage analytics: Only if you accept in the app, we measure which products and pages you look at and how you move through the shop with Google Analytics for Firebase (Google Ireland Ltd). It uses a random app-instance identifier, never the advertising identifier, and no advertising personalisation. You can withdraw at any time in Account › Usage analytics. Legal basis: consent (Art. 6(1)(a) GDPR).
• App stores: Apple and Google process your download and payment for the app under their own privacy policies; we do not receive your store account data.

The apps do not use cookies. Your choices in the app are stored on your device only.

Your personal data is processed for the following purposes:

• Order fulfilment: processing, shipping and managing purchases made on the site
• Account management: creating and maintaining your customer account
• Customer support: responding to your requests for information and support
• Legal obligations: compliance with tax and accounting obligations
• Marketing (with consent): sending newsletters, promotions and commercial communications
• Service improvement: anonymous statistical analysis to improve the site and the shopping experience

The processing of your data is based on:

• Performance of a contract (Art. 6.1.b GDPR): for purchases and account management
• Consent (Art. 6.1.a GDPR): for marketing and profiling cookies
• Legal obligation (Art. 6.1.c GDPR): for tax compliance
• Legitimate interest (Art. 6.1.f GDPR): for site security and fraud prevention

Your data may be shared with:

• Couriers: DHL and other couriers for order delivery
• Payment gateways: Stripe and PayPal for payment processing
• Analytics services: Google Analytics for web traffic analysis
• Hosting: Amazon Web Services (AWS) for site hosting

We do not sell or transfer your personal data to third parties for marketing purposes.

Some of our service providers may be located outside the European Economic Area (EEA). In such cases, data transfers take place in accordance with the standard contractual clauses approved by the European Commission or on the basis of adequacy decisions.

• Purchase data: retained for 10 years for tax obligations
• Account data: retained until the account is deleted
• Contact/support data: retained for 2 years from the request
• Marketing data: retained until consent is withdrawn
• Cookies: according to the durations specified in the Cookie Declaration

Under the GDPR, you have the right to:

• Access: obtain confirmation that your data exists and receive a copy of it
• Rectification: correct inaccurate or incomplete data
• Erasure: request the deletion of your data ("right to be forgotten")
• Restriction: restrict processing in certain cases
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Withdrawal of consent: withdraw consent at any time

To exercise your rights, contact us at info@back-door.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).

We adopt appropriate technical and organisational security measures to protect your personal data from unauthorised access, loss or destruction. The site uses SSL/TLS encryption for all communications, and payment data is handled by PCI-DSS certified providers.

We reserve the right to update this policy. Changes will be published on this page along with the date of the latest update. We encourage you to review this page periodically.

For any questions about this policy or the processing of your data:

Bottega Back-Door Piazza Galilei 3/A, 40123 Bologna (BO) Email: info@back-door.it