Privacy notice
This page explains what data is collected when you place a bid and what it is used for (Art. 13 of EU Regulation 2016/679, "GDPR").
Who is responsible
Data controller: name, city. Contact: email.
What data
- Company or brand name and website: shown publicly on the auction page, together with the amount and time of your bid.
- Email: never public. Used only to contact you if you win.
Why, and on what basis
To run the auction and, when it closes, to contact the winner of each spot and sign the sponsorship agreement by email. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR): placing a bid is your request to take part.
How long
Emails of bidders who do not win are deleted after the auction closes. Winners' emails are kept only as long as needed to manage the sponsorship agreement.
Who else processes it
- Supabase, the database where bids are stored. Servers in the European Union (Frankfurt).
- Cloudflare, which hosts the page and runs the anti-bot check.
Your data is not sold or used for anything else.
Your rights
You can ask to access, correct or delete your data by writing to the contact above (Art. 15–22 GDPR). You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).