Privacy Policy

The controller of the personal data collected through this website is:

Company name: Relaquantix S.r.l.

VAT number / Tax code: 06106470872

REA (Economic and Administrative Index) no. CT-467450

Registered with the Companies Register of Catania under no. 06106470872

Share capital: €20,000.00, fully paid up

Registered office: Viale della Regione 77, 95062 Motta Sant’Anastasia (CT), Italy

Certified email (PEC): relaquantix@pec.it

Contact email: info@filmstorycraft.com

— Email address, provided for the purchase, for delivery of the ebooks and for access to the personal area.

— Order data: products purchased, total amount including VAT, VAT component, currency, date.

— Any data required by Stripe in order to determine the VAT component included in the price (for example, country of residence).

— Minimal technical data (for example, IP address), processed temporarily for security purposes and to prevent abuse (rate limiting).

— First-touch attribution data (source, medium, campaign and landing page) and a local pseudonymous identifier, created or read only after consent to campaign measurement has been given.

— Consent and withdrawal events relating to privacy preferences.

— Evidence of the customer’s location, kept as separate items of data: the billing country reported by the payment and the country derived from the network.

Payment card details are never collected or stored by the Controller: they are processed directly by Stripe.

— Managing the order and delivering the digital content — performance of the contract (Article 6(1)(b) GDPR).

— Tax and accounting obligations — legal obligation (Article 6(1)(c) GDPR).

— Access to the personal area through a sign-in link sent by email — performance of the contract and legitimate interest in providing a secure digital library service.

— Preventing abuse and fraud (rate limiting) — legitimate interest (Article 6(1)(f) GDPR).

— Cookie-free, aggregated, first-party statistics to measure use of the website — legitimate interest in understanding how the service works (Article 6(1)(f) GDPR). The safeguards applied are aggregated data, no profiling and no disclosure to third parties.

— Campaign measurement, advertising pixel, advertising profiling and server-side transmission of the conversion — only after consent (Article 6(1)(a) GDPR).

— Promotional communications by email — separate, optional consent, not pre-ticked (Article 6(1)(a) GDPR).

The email address and the order data are necessary in order to conclude and perform the contract and to comply with legal obligations; without this data the purchase is not possible. Providing data for advertising and marketing purposes is optional, and refusing does not affect the ability to purchase.

In order to run the service, the Controller relies on the following providers, in the roles indicated:

— Stripe — payments and tax calculation; independent controller for payment data.

— Supabase — database and authentication; processor.

— Cloudflare R2 — file storage; processor.

— Upstash — abuse prevention; processor.

— Resend — transactional email; processor.

— Vercel — hosting; processor.

— Advertising platforms — no advertising platform is currently active: no pixel is loaded and no conversion data is transmitted. Should campaigns be activated, the platform will be named here (independent controller or joint controller for measurement) and the date of this notice will change.

Any transfers of data to the United States and to other countries outside the EU are covered, depending on the provider and on the processing operation, by an adequacy decision — including the EU-US Data Privacy Framework — and/or by Standard Contractual Clauses. A copy of the applicable safeguards may be requested from the Controller’s contact points.

The retention period applied to each category of data is as follows:

— Order and tax data: 10 years.

— Email address and library: for as long as the account and the related rights last.

— Register of consents and withdrawals: 10 years.

— Security and anti-abuse logs: 30 days.

— Attribution and conversion data: 24 months.

— Marketing: until consent is withdrawn; after withdrawal, a minimal suppression list is kept.

Data subjects may at any time request access to their data, rectification, erasure, restriction of the processing and data portability, and may object to the processing, by writing to the contact points indicated below. They may also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or with the supervisory authority of their own country (Article 77 GDPR).

Consent to advertising cookies can be withdrawn separately through the “Cookie preferences” control available in the footer. Marketing consent can be withdrawn independently through the link included in promotional communications or by writing to the contact points indicated below. Withdrawal does not affect processing carried out before the withdrawal.

Payment takes place on a page hosted by Stripe: card details never pass through the Seller’s servers. Communications with the website are encrypted (HTTPS/HSTS), and the links giving access to orders and downloads are digitally signed and time-limited.

The website uses technical cookies that are necessary in order to keep the customer signed in to the personal area after signing in through a link sent by email, and in order to ensure continuity of the checkout. The cart is saved only locally in the customer’s browser and is not sent to the server until payment is started. Privacy preferences are stored locally in order to remember the choice made.

The statistics that are always active are AGGREGATED, with no cookies, no persistent identifiers and no third-party scripts. Any attribution or campaign identifier is created or read ONLY after consent. The pixel, advertising profiling and transmission of the conversion likewise remain disabled until consent is given.

The first level of the banner presents “Reject” and “Accept” as equivalent choices, alongside “Customize” and the saving of preferences; no consent is pre-ticked. The choice can be changed or withdrawn from the footer as easily as it was given, and without affecting the separate consent to marketing emails.

To exercise your rights, or for any question about the processing of your data: info@filmstorycraft.com, or by certified email to relaquantix@pec.it.