Privacy notice

Data controller

The data controller is Code Bakery di Marco Raoul Zanirato, Via Principale 11, 20856 Correzzana (MB), VAT no. 14754130962. To exercise your rights you can write to [email protected].

Data processed

Through the contact form we collect name, email, company, topic and message. Consent is required to send the request. Technical logs kept by our hosting provider may contain IP address, date and browser, used for the security and operation of the site. With your consent, Google Analytics collects statistical data about browsing.

Purposes and legal basis

We use the form data to read your request and answer you. The legal basis is taking steps at your request prior to entering into a contract. Browsing statistics are based on consent, which you can withdraw at any time from the Cookies page.

Retention

We keep the request for as long as needed to handle it and, if no working relationship follows, for up to 12 months from the last contact. Technical logs follow the hosting's retention times.

Challenge a friend

If you use "Challenge a friend" in the game at the bottom of the pages, we process the name you type, your friend's email address, the challenge line you pick and your record only to send your friend one invitation email. The provider that delivers the site's emails delivers it to the address you gave. To prevent misuse (at most one invitation a day per address, five an hour per visitor, a daily cap for the whole site) we keep an encrypted, non-reversible version of your friend's address and of your IP address for 7 days, then delete it. If your friend uses the "I don't want any more invitations" link in the email, we keep the encrypted version of their address with no expiry, only so we never write to them again. We do not store the addresses in clear and we do not record them in the logs. The legal basis is our legitimate interest in offering this feature at your request and in preventing its misuse. Only enter the address of someone you know who may receive the invitation.

Recipients

Data is processed by the controller and by strictly necessary suppliers: Cloudflare, which hosts the site and provides the spam check, the provider that delivers the request email, Google for statistics and Cookiebot (Usercentrics) for the banner and consent records. We do not sell data or use it for advertising profiling.

Transfers

Some suppliers may process data outside the European Economic Area. In that case the transfer takes place with the safeguards provided by Regulation (EU) 2016/679, such as standard contractual clauses.

Your rights

You can request access, rectification, erasure, restriction, objection and portability of your data, and withdraw consent. You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). The site makes no automated decisions with legal effects.

Cookies

Details of the cookies and your consent choice are on the page Cookies.