Privacy Policy

1. Data controller

The data controller is Alfio Biondo. For privacy-related requests and to exercise your rights, email info@gechichan.com.

2. Data processed

During normal browsing, IT systems and the hosting provider may process technical data such as the IP address, date and time of the request, requested page, browser information and server response codes.

The private area also processes data relating to authorised users, including display name, email address, role, protected credentials, last access, technical activity and references to completed operations. There are no public contact forms, newsletters, analytics or advertising systems.

3. Purposes and legal bases

• to display the public showcase and ensure the website works securely, based on the controller’s legitimate interest;
• to manage authentication, authorisations, operational records and offline features in the private area, to provide the service requested by authorised users and based on the legitimate interest in securely managing the Lab;
• to prevent abuse, diagnose issues and protect systems and data, based on the controller’s legitimate interest;
• to comply with legal obligations or requests from competent authorities.

4. Processing methods and security

Data is processed using IT tools and organisational measures appropriate to the nature of the service. Access to the Lab is restricted to authorised users; passwords are not stored in plain text and communications use HTTPS.

5. Recipients and providers

Data may be processed by the hosting infrastructure provider, Aruba S.p.A., and by authorised technical parties to the extent required to provide, maintain and secure the service. It may also be disclosed to authorities or entitled parties where required by law.

The website contains links to Instagram but does not embed Meta content or tracking tools. A connection to that service is established only when the user chooses to open a link.

6. Retention

Technical browsing and security data is retained only for as long as necessary to operate, diagnose and protect the service, in accordance with the hosting provider’s technical and contractual periods, unless it must be kept to investigate unlawful activity or comply with legal obligations.

Authorised-user data is retained for the lifetime of the account. Records linked to operations or security audits are kept for as long as necessary to ensure integrity, traceability and system protection. Data stored on a device for offline use remains until it is synchronised, deleted by the user or removed with the website data.

7. Your rights

Data subjects may request access, rectification, erasure, restriction of or objection to processing in the cases provided for by Regulation (EU) 2016/679 by emailing info@gechichan.com. They may also lodge a complaint with the Italian Data Protection Authority.

8. Cookies and local storage

Information on the technical tools used is available in the Cookie Policy. The website currently uses no profiling cookies or advertising tools and does not require a consent banner.