PRIVACY
Privacy Policy
This Privacy Policy explains how BidYourDay collects, uses, stores and protects personal data when users access or use the BidYourDay website and services.
1. Data Controller
The Data Controller is:
Salvatore Tribastone
Viale Margherita, 9
97100 Ragusa (RG), Italy
Tax Code: TRBSVT77L03H163D
VAT Number: 01754920880
Email: salvatore.tribastone@gmail.com
As the Data Controller is established in the European Union, personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR), as well as applicable Italian data protection legislation.
2. Personal Data We Collect
Depending on how you use BidYourDay, we may collect the following categories of personal data:
- Account information: name, email address, password credentials and profile information voluntarily provided by the user.
- Profile information: profile photograph, social media profile and any personal description or story voluntarily published by the user.
- Purchase information: information relating to days purchased, bids, transaction identifiers, purchase dates and amounts paid.
- Communication data: information contained in messages, support requests or other communications sent to BidYourDay.
- Technical and usage data: information that may be automatically generated when accessing the website, such as IP address, browser type, device information, access times and technical logs, where collected by the hosting infrastructure or security systems.
3. Purposes and Legal Bases for Processing
Personal data is processed only where a valid legal basis exists under applicable data protection law.
Account registration and management
Data is processed to create and manage user accounts, provide access to the private area, authenticate users and maintain account security.
Legal basis: performance of a contract or pre-contractual measures requested by the user (Article 6(1)(b) GDPR).
Purchase and provision of services
Data relating to purchases is processed to record and manage transactions, identify the holder of a purchased day, provide the associated services and maintain the relevant records.
Legal basis: performance of a contract (Article 6(1)(b) GDPR).
Payment processing
Payments are processed through third-party payment providers. BidYourDay does not directly store complete credit card, debit card or other payment instrument details on its servers.
Payment providers process payment information in accordance with their own privacy policies and applicable legal requirements.
Legal basis: performance of a contract (Article 6(1)(b) GDPR) and compliance with legal obligations where applicable (Article 6(1)(c) GDPR).
Customer support and communications
Personal data contained in communications is processed to respond to enquiries, provide assistance and manage communications with users.
Legal basis: performance of a contract, pre-contractual measures or the legitimate interests of the Data Controller, depending on the nature of the request.
Legal and security purposes
Personal data may be processed where necessary to comply with applicable legal, accounting and tax obligations, prevent fraud or abuse, protect the website and services, establish, exercise or defend legal claims, and protect the rights and legitimate interests of BidYourDay and its users.
Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR) and, where applicable, legitimate interests (Article 6(1)(f) GDPR).
4. Publicly Displayed Information
Certain information may be displayed publicly as part of the BidYourDay service.
Where a user voluntarily publishes a name, story, profile photograph, social profile or other information associated with a purchased day, the user acknowledges that such information may be visible to other website visitors.
Users should therefore avoid publishing information they do not wish to make publicly accessible.
5. Data Retention
Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, taking into account contractual, legal, accounting, tax and security requirements.
Account information may be retained for as long as the account remains active.
Where an account is deleted, personal data will be deleted or anonymised where legally and technically possible, except where retention is necessary to comply with legal obligations, resolve disputes, prevent fraud or abuse, or establish, exercise or defend legal claims.
Transactional, accounting and tax records may be retained for the period required by applicable law, including statutory retention periods applicable in Italy.
6. Data Sharing and Disclosure
Personal data is not sold or rented to third parties.
Data may be disclosed only where necessary to operate BidYourDay, fulfil contractual obligations, comply with legal requirements or protect legitimate interests.
Depending on the circumstances, recipients may include:
- hosting and infrastructure providers;
- payment service providers;
- technical and IT service providers;
- professional advisers where necessary;
- public authorities or law-enforcement bodies where legally required.
Where third parties process personal data on behalf of BidYourDay, appropriate contractual and legal safeguards will be implemented where required by applicable law.
7. International Data Transfers
Some service providers used to operate BidYourDay may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, such transfer will be carried out only in accordance with applicable data protection legislation and using an appropriate legal transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another lawful safeguard recognised under applicable law.
8. Data Security
BidYourDay adopts appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure. Users acknowledge that online services necessarily involve residual security risks.
9. Cookies and Similar Technologies
BidYourDay may use cookies or similar technologies that are necessary for the operation, security and functionality of the website.
Where non-essential cookies or similar technologies are used, they will be managed in accordance with applicable cookie and privacy legislation and, where required, user consent will be obtained.
Further information is provided in the BidYourDay Cookie Policy.
10. User Rights
Subject to applicable law, users have the right to request:
- access to their personal data;
- rectification of inaccurate or incomplete data;
- erasure of personal data;
- restriction of processing;
- data portability;
- objection to certain processing activities;
- withdrawal of consent where processing is based on consent.
Users may exercise their rights by contacting:
salvatore.tribastone@gmail.com
A request may require sufficient information to verify the identity of the requester. Requests will be handled within the time limits required by applicable law.
11. Right to Lodge a Complaint
Users located in the European Union have the right to lodge a complaint with the competent data protection supervisory authority if they believe that their personal data has been processed unlawfully.
In Italy, the competent supervisory authority is the Garante per la protezione dei dati personali.
12. Children's Privacy
BidYourDay is not intended to knowingly collect personal data from children where such collection would be unlawful.
If a parent or legal guardian believes that personal data relating to a child has been provided unlawfully, they may contact the Data Controller using the address provided above.
13. Automated Decision-Making and Profiling
BidYourDay does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on users.
14. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in the BidYourDay service, applicable legislation or data processing practices.
The updated version will be published on this page together with the applicable effective date where appropriate.
15. Contact
For questions concerning this Privacy Policy, personal data processing or the exercise of data protection rights, please contact:
Salvatore Tribastone
Viale Margherita, 9
97100 Ragusa (RG), Italy
VAT Number: 01754920880
Email:
salvatore.tribastone@gmail.com