Privacy Policy
This Privacy Policy is issued pursuant to Regulation (EU) 2016/679 (GDPR) and to Italian Legislative Decree 196/2003 (Italian Privacy Code), as amended by Legislative Decree 101/2018.
1. Data Controller
Salvatore Sambito
Via Sipione 62
Rosolini (SR), Italy
Email: dream@buyastar.eu
Website: https://buyastar.eu
2. Categories of data collected
2.1 Data provided by the user
- Order data: name of the star recipient, date of the dedication, personalised dedication text
- Contact data: email address of the buyer and/or recipient
- Payment data: handled directly by the payment provider ([e.g. Stripe / PayPal]); buyastar.eu does not store credit card or bank account data
2.2 Data collected automatically
- IP address, browser type, operating system, pages visited, session duration, referring URL — collected via technical cookies and, subject to consent, via analytics tools ([e.g. Google Analytics 4])
3. Purposes and legal bases of processing
| Purpose | Legal basis | Data involved |
|---|---|---|
| Order processing and management | Performance of a contract (Art. 6(1)(b) GDPR) | Email, order data |
| Digital delivery of the certificate | Performance of a contract (Art. 6(1)(b) GDPR) | Buyer/recipient email |
| Customer support | Legitimate interest (Art. 6(1)(f) GDPR) | Email, order data |
| Tax and accounting obligations | Legal obligation (Art. 6(1)(c) GDPR) | Order and payment data |
| Traffic analysis (anonymous) | Consent (Art. 6(1)(a) GDPR) | Aggregated browsing data |
| Fraud prevention | Legitimate interest (Art. 6(1)(f) GDPR) | IP, order data |
buyastar.eu does not carry out direct marketing, profiling or remarketing without the user's explicit consent.
4. Data retention
| Category | Retention period |
|---|---|
| Order and invoicing data | 10 years (Italian tax obligation) |
| Email for post-purchase support | 2 years from the last interaction |
| Browsing data (analytics) | Maximum 13 months |
5. Recipients and transfers
Personal data may be shared with:
- Payment providers ([e.g. Stripe Inc. / PayPal]): to process transactions — they act as independent data controllers
- Hostinger International Ltd.: hosting and technical infrastructure provider
- [e.g. Google LLC]: analytics service provider, subject to consent
Transfers to non-EU countries (e.g. USA) take place in compliance with the safeguards provided by the GDPR, including the EU–US Data Privacy Framework where applicable.
buyastar.eu does not sell, rent or transfer personal data to third parties for their own commercial purposes.
6. Rights of the data subject
Pursuant to Arts. 15–22 GDPR, the user has the right to:
- Access: obtain confirmation of the processing and a copy of the data
- Rectification: correct inaccurate or incomplete data
- Erasure ("right to be forgotten"): request deletion, subject to legal retention obligations
- Restriction: request restriction of processing in certain cases
- Portability: receive the data in a structured, machine-readable format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing
To exercise these rights: dream@buyastar.eu
The Controller will respond within 30 days of receipt of the request.
The user also has the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it
7. Cookies and tracking technologies
For detailed information on the use of cookies, please refer to the Cookie Policy.
8. Security
The Controller adopts appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or disclosure, including encrypted HTTPS/TLS connections and limited access to the data.
9. Minors
The buyastar.eu site is not intended for minors under the age of 16. The Controller does not knowingly collect personal data from minors. If a minor has provided data without the consent of a parent or guardian, please contact dream@buyastar.eu to request deletion.
10. Updates
This Privacy Policy may be updated from time to time. The current version is always available at:
https://buyastar.eu/privacy-policy
This Privacy Policy is a starting document based on GDPR best practices. Review by a legal professional is recommended before final publication.