Who we are

The data controller is Saccuman Srl, registered office in Bolzano, Via Alessandria 23 — VAT No. IT00510340219 — Duns Number 439212986. Contact e-mail: info@saccuman.it.

Saccuman Srl owns the following websites: shop.saccuman.it, piano.saccuman.it, pianoforti-heilmann.it, bechstein-triveneto.it.

The Controller has not appointed a Data Protection Officer (DPO), as the legal requirements under Art. 37 GDPR do not apply. You may still contact us at any time regarding your data at info@saccuman.it.

What data we collect

Data you provide: first name, last name, e-mail address, delivery/billing address, phone number, and — only if you make a purchase — the tax data required for invoicing. For business (B2B) accounts we also collect the company name and VAT number. For the Rental module we collect the data needed to manage the contract and any security deposit. For the Italian "Carta del Docente" teacher voucher, we ask for a copy of the voucher, an ID document and tax code, solely to verify that the voucher holder matches the buyer.

Browsing data: IP addresses, device domain names, request times and other parameters relating to your operating system and computing environment, collected automatically during normal browsing, for statistical and security purposes.

Cookies: we use technical cookies (always active) and non-technical cookies (statistics, third-party reCAPTCHA) only with your consent, managed via the "Cookie settings" panel available on every page of the site.

Why we process your data and on what legal basis

Who we share your data with

Your data may be shared with third parties acting as data processors on behalf of the Controller, in particular:

• Couriers for order delivery (e.g. GLS, BRT);
• Payment service providers: PayPal and Amazon Pay for electronic payments; cash payment does not involve sharing any data with third parties;
• IT and hosting providers necessary for the Site to operate.

Transfers outside the EU: some providers (PayPal, Amazon Pay, Google reCAPTCHA) are based in the United States. Data transfers rely on the safeguards provided by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, depending on the provider.

How long we keep your data

Account data is kept for as long as you maintain an active account, and for 12 months after cancellation if you have not made any purchases. If you have made purchases, tax-relevant information is kept for 10 years from your last purchase, as required by tax law. Data relating to a rental contract (including any security deposit) is kept for the duration of the contract and for the period thereafter required by accounting and tax obligations. Business (B2B) account data is kept under the same criteria as ordinary account data.

Providing your data and consequences of refusal

Providing the data required for registration and to complete an order (name, e-mail address, delivery/billing address) is necessary to perform the contract: refusing to provide it means we cannot create an account or complete the purchase. Providing your tax code for the "Carta del Docente" voucher is only necessary if you wish to use that voucher: refusal means it cannot be applied to your order. Providing any other data (e.g. for the newsletter) is always optional.

Automated decision-making

The Controller does not carry out any solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, as referred to in Art. 22 GDPR. Google reCAPTCHA is used exclusively to distinguish human access from automated access (anti-spam/anti-fraud) and does not generate any decision affecting you.

Saccuman mobile app

Saccuman Srl provides a mobile app (Android), currently in testing, which lets you access the Guitars and Pianos online shops with your account, view orders and the catalogue, receive notifications and use professional musician tools (Tuner and Metronome).

Installing and using the app involves, in addition to the processing already described in this notice for your account and orders, the following:

Account and orders: the app processes your Saccuman account data, your preference for the Guitars or Pianos world, orders and related tracking, for the same purposes and on the same legal bases already indicated in this notice for the Site.

Android permissions requested: Internet (for the app's basic operation), Microphone (only for the Tuner function) and, on Android 13 or later, Notifications (only if you authorise them). The app does not request access to contacts, location, camera, storage or other device data.

Push notifications: if authorised, these are handled via Google Firebase Cloud Messaging, to which a technical device token is transmitted solely for message delivery. Google Firebase is the only third-party service integrated into the app for personal data processing; the app includes no third-party analytics, advertising or crash-reporting SDKs.

Microphone and Tuner: microphone access is used exclusively for the Tuner function. Audio is analysed in real time only on your device to recognise instrument pitch: it is never recorded, saved or transmitted to Saccuman Srl or any third party.

Transfers outside the EU: sending push notifications via Google Firebase Cloud Messaging may involve processing the device's technical token on Google infrastructure located outside the European Economic Area, under the safeguards provided by Google (including Standard Contractual Clauses). No other personal data processed by the app is transferred outside the EU.

As this is a test version, the app's features and this section may be updated; the full notice will be reviewed before the app's final publication on the stores.

Your rights

As a data subject, you may exercise the following rights at any time by writing to info@saccuman.it:

• right of access to your personal data;
• right to rectification of inaccurate or incomplete data;
• right to erasure ("right to be forgotten"), within the limits set by law;
• right to restriction of processing;
• right to object to processing based on legitimate interest;
• right to data portability for data provided on the basis of consent or a contract;
• right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or another competent EU supervisory authority.