Data controller
The data controller is REBOOT LAB di Billi Marcello, sole proprietorship.
VAT 09078380723, tax code BLLMCL05B15A662L.
Registered office: Via D'Acquisto Salvo 41, 70025 Grumo Appula (BA), Italy.
Email: assistenza@rebootlab.cloud
PEC: rebootlab@pec.it
Phone: +39 334 262 6907
No Data Protection Officer (DPO) has been appointed, as it is not required for this activity.
Data we collect
We process the following data, depending on how you use the site:
- Identification and contact data: first name, last name, email, phone, company name if any.
- Quote data: project description, uploaded 3D files, notes, reference images.
- Shipping and billing data: address, postal code, city, province, country.
- Payment data: handled directly by Stripe. We do not store full card numbers.
- Order chat content and attachments.
- Reviews: name, rating, text and optional photo.
- Aggregated browsing data: pages viewed, language and geographic area, through an internal and anonymous analytics system, without the IP address or the full user-agent and without profiling.
- Cookie consent log: when you make a choice on the banner we record server-side the consent id, the policy version, your choices (analytics/marketing), a truncated IP address (/24), the user-agent, the page and the language, so we can demonstrate consent.
Purposes and legal bases
We process data to:
- Manage quotes, orders, shipping and support: performance of the contract (Art. 6.1.b GDPR).
- Meet tax and accounting obligations such as invoicing: legal obligation (Art. 6.1.c GDPR).
- Ensure site security and produce aggregate statistics: legitimate interest (Art. 6.1.f GDPR).
- Send promotional messages, review invitations and coupons: consent (Art. 6.1.a GDPR), which you can withdraw at any time.
The use of cookies is described in the Cookie Policy.
Sharing and external processors
Your data may be processed on our behalf by providers acting as data processors:
- Stripe: payment processing.
- Supabase: database and data storage.
- Vercel: site hosting.
- Resend: sending service and confirmation emails.
- ntfy: internal new-order notifications.
- Courier for delivery (BRT, Poste Italiane or another carrier).
- Tax advisor, for legal obligations.
Data is never disclosed publicly or sold to third parties.
Transfers outside the European Union
Some providers, such as Stripe and Vercel, may process data outside the European Economic Area. In such cases the transfer takes place with appropriate safeguards, such as the European Commission's Standard Contractual Clauses and, where applicable, the Data Privacy Framework.
How long we keep data
- Orders, contracts and invoices: 10 years, for civil and tax obligations.
- Quotes not converted into orders: up to 24 months.
- Data processed for marketing: until consent is withdrawn and in any case no longer than 24 months from the last contact.
- Aggregate browsing statistics: up to 14 months.
- Cookie consent log: for as long as needed to demonstrate consent.
- Uploaded 3D files: for as long as needed to fulfil the order, then deleted or kept only at your request.
Your rights
You can exercise at any time the rights under Arts. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
To do so, write to assistenza@rebootlab.cloud or to the PEC rebootlab@pec.it.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Minors
The service is not intended for people under 18. We do not knowingly collect data from minors; if you believe this has happened, contact us and we will delete it.
Changes to this policy
We may update this policy over time. The last updated date is shown at the top of the page.