Privacy and Cookies

Last updated: September 2026

Editorial note: this text is an honest, reasonable technical baseline — it does not replace a proper legal review. We recommend having it reviewed by a professional, especially now that the site accepts real payments.

Data controller

Betterpress Lab Roma, association — betterpresslab@gmail.com
Via Eugenio Barsanti, 14 — 00146 Rome, Italy

Note: the association's registration details (e.g. tax code, business register number, if any) should be added here once available — not known to this text, to be filled in by the controller.

What we collect and why

• Orders and payments (shop): when you buy a product through the SumUp "Buy" button, we record the product, amount and date to process the sale. Card payment happens entirely on SumUp's hosted page — your card details never reach or stay on our servers (our systems are not even in scope for payment card security standards, since SumUp handles that entirely). Some shop items remain on sale on the external platform BigCartel (betterpresslab.bigcartel.com): in that case the purchase and related data processing happen on BigCartel, under their own notice.
• Push notifications: only if you choose to enable them from the Notifications page, we store a technical identifier of your device/browser to send you updates about exhibitions, courses and new editions. You can disable them at any time from the same button.
• Google Fonts: for the site's design we load some fonts from Google's servers (fonts.googleapis.com, fonts.gstatic.com), which may receive your IP address as part of that, per their terms.
• Google Maps: on the "Find us" page the map is not loaded automatically — only if you click "Load map" is it requested from Google, which can then set its own cookies per its terms. Before that click, no data is sent to Google from that page.
• Images from Tumblr: the logo at the top and some blog images are loaded directly from Tumblr's servers (tumblr.com), which may log your IP address while serving them, per its terms.
• Product images from BigCartel: shop product photos are loaded from BigCartel's servers (bigcartel.com), same logic as Tumblr above.
• Admin session cookie: a signed session cookie is set only for staff logging into the management panel (/admin) — it does not concern visitors of the public site, and is strictly necessary for the panel to work (no consent required).
• Cookie consent reminder: when you close the banner at the bottom of the page, we save in your own browser (locally, never on our servers) only the date you closed it, so we don't ask again on every visit.

Where data is hosted and where the site runs

The site is hosted on a server owned by the data controller, physically located in Italy, with a second backup server (also in Italy) that activates automatically only if the first is unreachable. In front of both sits a public content delivery network (Netlify, with infrastructure also in the European Union) that routes requests to whichever server is available at the time — a purely technical delivery layer, which does not process or retain your personal data beyond normal connection handling. Orders and notification subscriptions are stored on our own servers in Italy, not with third parties.

Data transfers outside the European Union

Some of the third-party services listed above (Google, Tumblr — owned by Automattic, BigCartel) are based in the United States. Any transfer of data to these providers (typically your IP address, when your browser directly requests a resource from their servers) takes place under the safeguards provided by applicable law (standard contractual clauses and/or adherence to data transfer frameworks recognised by the European Commission, as declared by each provider). SumUp operates as a payment service provider within the European Union.

Third-party providers (sub-processors) and their notices

For transparency, here is the privacy notice of each third-party service used by the site, where you can read in detail how they handle data:

• Netlify (public hosting/delivery network) — netlify.com/privacy
• SumUp (payments) — sumup.com/en-gb/privacy
• Google (Fonts, Maps) — policies.google.com/privacy
• Tumblr / Automattic (images) — tumblr.com/policy/privacy
• BigCartel (product images, purchases on selected items) — bigcartel.com/policies/privacy

Legal basis

Orders and payments: performance of a contract (GDPR art. 6.1.b). Push notifications, Google Maps: explicit, revocable consent (art. 6.1.a). Google Fonts, images from Tumblr/BigCartel, technical operation of the site: legitimate interest in a functional, visually consistent site (art. 6.1.f), balanced against minimal impact on your data (no profiling, no sale of data to third parties). Admin cookie: strictly necessary, exempt from consent (ePrivacy).

Retention

Orders are kept as long as needed to process the sale and for applicable tax/accounting obligations (typically 10 years under Italian tax law). Notification subscriptions remain until you disable them. The cookie consent reminder stays in your browser until you clear browsing data for this site.

Security

The site is reachable only over HTTPS (encrypted connection). Staff passwords are never stored in plain text (only their cryptographic hash). No payment card data ever touches our servers: the entire payment flow happens on SumUp's hosted page.

Your rights

As a data subject under the GDPR, you have the right at any time to request: access to your data, correction, deletion, restriction of processing, data portability, and objection to processing based on legitimate interest. You can exercise these rights by writing to betterpresslab@gmail.com. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or the supervisory authority of your own country of residence, if different from Italy.

Children

The site is not directed at children under 16 and we do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will remove it.

Changes to this notice

We may update this page in the future, for example if the services used by the site change. The date at the top of the page shows the last update.

Contact

For any question about this notice: betterpresslab@gmail.com.