Your privacy

Privacy notice pursuant to Art. 13 of EU Regulation 2016/679 (GDPR)

In short: we collect the data you give us to manage your account and orders (including through our Rental and B2B modules), we only share it with the suppliers strictly necessary (couriers, payment providers), we do not use it for automated decisions about you, and you can always ask us to see, correct or delete it by writing to info@saccuman.it. Full legal details below.

Who we are

The data controller is Saccuman Srl, registered office in Bolzano, Via Alessandria 23 — VAT No. IT00510340219 — Duns Number 439212986. Contact e-mail: info@saccuman.it.

Saccuman Srl owns the following websites: shop.saccuman.it, piano.saccuman.it, pianoforti-heilmann.it, bechstein-triveneto.it.

The Controller has not appointed a Data Protection Officer (DPO), as the legal requirements under Art. 37 GDPR do not apply. You may still contact us at any time regarding your data at info@saccuman.it.

What data we collect

Data you provide: first name, last name, e-mail address, delivery/billing address, phone number, and — only if you make a purchase — the tax data required for invoicing. For business (B2B) accounts we also collect the company name and VAT number. For the Rental module we collect the data needed to manage the contract and any security deposit. For the Italian "Carta del Docente" teacher voucher, we ask for a copy of the voucher, an ID document and tax code, solely to verify that the voucher holder matches the buyer.

Browsing data: IP addresses, device domain names, request times and other parameters relating to your operating system and computing environment, collected automatically during normal browsing, for statistical and security purposes.

Cookies: we use technical cookies (always active) and non-technical cookies (statistics, third-party reCAPTCHA) only with your consent, managed via the "Cookie settings" panel available on every page of the site.

Why we process your data and on what legal basis

PurposeLegal basis
Manage browsing, cart and accountPerformance of a contract (Art. 6.1.b GDPR)
Process and ship orders, rental contracts and B2B relationshipsPerformance of a contract (Art. 6.1.b GDPR)
Respond to support requests or contact-form enquiriesPerformance of a contract (Art. 6.1.b GDPR)
Accounting, tax and other legal obligationsLegal obligation (Art. 6.1.c GDPR)
Prevent fraud and misuse of the Site (e.g. reCAPTCHA)Controller's legitimate interest in protecting the Site's security (Art. 6.1.f GDPR)
Produce statistics and verify the Site works correctlyController's legitimate interest in service security and functionality (Art. 6.1.f GDPR)
Protect the Controller's rights and interests in case of unlawful actsController's legitimate interest (Art. 6.1.f GDPR)
Send newsletters and promotional communicationsConsent (Art. 6.1.a GDPR), revocable at any time

Who we share your data with

Your data may be shared with third parties acting as data processors on behalf of the Controller, in particular:

  • Couriers for order delivery (e.g. GLS, BRT);
  • Payment service providers: PayPal and Amazon Pay for electronic payments; cash payment does not involve sharing any data with third parties;
  • IT and hosting providers necessary for the Site to operate.

Transfers outside the EU: some providers (PayPal, Amazon Pay, Google reCAPTCHA) are based in the United States. Data transfers rely on the safeguards provided by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, depending on the provider.

How long we keep your data

Account data is kept for as long as you maintain an active account, and for 12 months after cancellation if you have not made any purchases. If you have made purchases, tax-relevant information is kept for 10 years from your last purchase, as required by tax law. Data relating to a rental contract (including any security deposit) is kept for the duration of the contract and for the period thereafter required by accounting and tax obligations. Business (B2B) account data is kept under the same criteria as ordinary account data.

Providing your data and consequences of refusal

Providing the data required for registration and to complete an order (name, e-mail address, delivery/billing address) is necessary to perform the contract: refusing to provide it means we cannot create an account or complete the purchase. Providing your tax code for the "Carta del Docente" voucher is only necessary if you wish to use that voucher: refusal means it cannot be applied to your order. Providing any other data (e.g. for the newsletter) is always optional.

Automated decision-making

The Controller does not carry out any solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, as referred to in Art. 22 GDPR. Google reCAPTCHA is used exclusively to distinguish human access from automated access (anti-spam/anti-fraud) and does not generate any decision affecting you.

Saccuman apps

Saccuman Srl provides the following applications:

  • Saccuman for Android, iPhone and iPad: tuner, metronome, piano and practice tools, the Guitars and Pianos online shops, orders, rentals, concerts and your instruments;
  • Concerti Saccuman for Apple Watch and Wear OS watches: upcoming concerts and your instruments on your watch;
  • C.Bechstein Triveneto for Android, iPhone and iPad;
  • Saccuman Staff, Saccuman Schermo and Saccuman Registrazione: internal tools for staff and for in-store devices, not intended for the public.

For your account, orders, rentals and enquiries, the purposes, legal bases and retention periods already described in this notice for the Site apply. The points below are specific to the apps.

Use without an account: the tuner, metronome, piano, practice tools, catalogue and concerts work without an account. An account is needed for orders, wish list, “My instruments”, rentals, messages and Pro features.

Account, orders and payments: the app processes your Saccuman account data (name, email, phone, addresses), your preference for the Guitars or Pianos world, orders and their tracking, rentals and instalments. Payments are made with the same methods and providers as the online shop; the app does not store payment card data.

Device permissions: each permission is requested only when the feature needs it and can be refused or revoked in the device settings; the other features remain available.

  • Microphone: tuner, tempo detection, sound analysis and practice recordings. Sound is analysed on the device only and is not sent to Saccuman Srl or to third parties.
  • Location (only while using the app): sorting concerts by distance. The distance is calculated on the device: coordinates are not sent to Saccuman Srl.
  • Camera: reading QR codes (tickets, artist and venue pages, linking your watch). Images are neither saved nor sent.
  • Photos and files: only those you choose, for example the poster of a concert you propose or the images of your artist or venue page; saving to Photos an image you decide to save.
  • Calendar: adding a concert to your calendar, when you ask for it.
  • Bluetooth: connecting a MIDI keyboard or piano.
  • Notifications: alerts about orders, deliveries, rentals, appointments, followed concerts and messages, according to the preferences chosen in the app.
  • Face ID / fingerprint: unlocking access more quickly. Recognition takes place on the device: Saccuman Srl receives no biometric data.

Recordings and files on the device: practice and piano recordings, custom tunings and settings stay on the device. They leave it only if you share or export them yourself.

Data the app sends to Saccuman Srl: they are processed on Saccuman Srl servers in the European Union.

  • Account data and the features you use: profile, registered instruments and maintenance, followed artists and venues, proposed concerts with their posters, messages with artist, venue and organiser pages.
  • Installation code: a random code created by the app on first launch, sent with the app and operating system version. It is used to count the devices on which the app is installed and to deliver notifications to the right device. It contains neither your name nor your phone number.
  • Anonymous usage statistics: the app counts how many times each screen is opened and sends totals only (for example “Tuner screen: 12 openings”), together with the chosen world and the app version, without your account, without the installation code and without the sequence of screens. They are not used for advertising or profiling. Collection can be turned off at any time in the app Settings, with immediate deletion of the counts not yet sent.
  • Country: from the IP address our servers derive only the country, in order to show the features available there (shop, concerts, services). The IP address is not stored for this purpose.
  • App errors: the technical report of an error (version, device model, point in the code) stays on the device and is sent to Saccuman Srl servers only from staff accounts. No third-party service is used.

Third-party services: the app contains no advertising and no third-party analytics or profiling services, and does not track you across other companies' apps or websites. It only uses:

  • Google Firebase Cloud Messaging and Apple Push Notification service: delivery of notifications, if you allow them: a technical device code is transmitted;
  • Google Play and Play Integrity (Android only): app updates, download of the piano sounds and verification that the app is the original one: technical data processed by Google;
  • OpenStreetMap: maps in concert and venue pages: the IP address is transmitted in order to download the map images;
  • YouTube (Google): videos of concerts, artists and the Saccuman channel, when you watch them: data processed by YouTube under its own privacy policy;
  • Google Maps / Apple Maps: only if you tap “Map” or “Take me there”: the maps app or website opens with the address of the place.

Transfers outside the EU: some of the services listed may also process data outside the European Economic Area, with the safeguards provided (Standard Contractual Clauses and the EU-US Data Privacy Framework).

Watches (Apple Watch and Wear OS): the watch is linked to your account with a six-digit code or a QR code shown by the app and receives, read-only, the upcoming concerts and your instruments. The link can be removed from the app or the watch and, in any case, by deleting the account.

Deleting your account: you can delete your account at any time from the app (“Profile” → “Delete account”), confirming with your password, or by asking the shop.

  • Access to the app and to the online shops is closed immediately; notifications and watches are unlinked and you receive a confirmation email.
  • After 30 days we permanently delete the account and the app data (registered instruments, preferences, followed artists, messages, contact details). Until then you can change your mind by contacting the shop.
  • If you have made purchases, rentals or repairs we keep for 10 years, as required by law, only the data needed for tax documents (name or company name, address, tax code or VAT number, invoices, orders and contracts); email and phone are deleted.
  • If a rental, an order, a payment, a storage deposit or a repair is in progress, deletion is not possible or is completed once they are closed.

Uninstalling the app deletes the data saved on the device, but not the account.

Minors: the apps are not specifically aimed at minors. “Kids mode” offers musical games only, requires no account and collects no personal data. Accounts are reserved for people aged 14 or over; for younger users the account must be created and managed by a person with parental responsibility.

Your rights

As a data subject, you may exercise the following rights at any time by writing to info@saccuman.it:

  • right of access to your personal data;
  • right to rectification of inaccurate or incomplete data;
  • right to erasure ("right to be forgotten"), within the limits set by law;
  • right to restriction of processing;
  • right to object to processing based on legitimate interest;
  • right to data portability for data provided on the basis of consent or a contract;
  • right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or another competent EU supervisory authority.

Last updated: October 2026