Santera
/

Privacy Policy

Last updated: June 11, 2026

This policy describes how the personal data of users who browse and use the website santera.it is processed, in accordance with Regulation (EU) 2016/679 ("GDPR").

1. Data controller

The data controller is Giulio Molari, a natural person, tax code MLRGLI01P10H294O, based in Via Benjamin Franklin 1, 47822 Santarcangelo di Romagna (RN), Italia, e-mail info@santera.it.

2. Types of data processed

We process the following categories of personal data:

  • Registration and account data: first and last name, e-mail address, password (encrypted) and, if provided, phone number.
  • Purchase and shipping data: delivery address, order details, amounts, name for billing/shipping.
  • Ticket data: the holder's name and the data needed to generate and validate the QR code.
  • Payment data: handled directly by the payment provider (Stripe); we do not store full card numbers.
  • Browsing and technical data: IP address, device and browser type, logs, and data collected through cookies and similar technologies (see the Cookie Policy).

3. Purposes and legal bases

Data is processed for the following purposes:

  • Performance of the sales contract and management of orders, shipments, tickets and support (Art. 6.1.b GDPR).
  • Compliance with legal, accounting and tax obligations (Art. 6.1.c GDPR).
  • Management of the user account and authentication (Art. 6.1.b GDPR).
  • Statistics and analysis of Site usage through analytics tools, subject to your consent where required (Art. 6.1.a GDPR).
  • Defence of rights in court and fraud prevention (Art. 6.1.f GDPR).

4. Providers and data processors

To provide the service we use third-party providers that process data on our behalf as data processors, or as independent controllers for their own purposes:

  • Vercel Inc.: hosting and delivery of the Site.
  • Supabase: database, authentication and storage of account and order data.
  • Stripe Payments Europe, Ltd.: payment processing.
  • Resend: sending of transactional e-mails (order, shipping and ticket confirmations).
  • Cloudflare: network, security and CDN services.
  • Google Ireland Ltd.: browsing statistics via Google Analytics 4 (subject to consent).

5. Transfers outside the EU

Some providers may process data outside the European Economic Area. In such cases, transfers take place in compliance with the GDPR, on the basis of adequacy decisions or standard contractual clauses approved by the European Commission, together with appropriate safeguards.

6. Retention period

Data is retained for as long as necessary for the purposes for which it was collected. Order data is retained for the period required by tax and accounting obligations (generally 10 years). Account data is retained until you request its deletion. Statistical data is retained for the periods indicated in the Cookie Policy.

7. Your rights

As a data subject you have the right to:

  • access your data and obtain a copy (Art. 15);
  • request rectification (Art. 16) or erasure (Art. 17);
  • request restriction of processing (Art. 18);
  • object to processing (Art. 21);
  • request data portability (Art. 20);
  • withdraw your consent at any time, without affecting the lawfulness of prior processing.

8. Exercising your rights and complaints

You can exercise your rights by writing to info@santera.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if you believe the processing infringes applicable law.

9. Cookies

The Site uses cookies and similar technologies. For details of the types used and to manage your preferences, see the Cookie Policy.

Santera Radio