This page explains which personal data Buccia.tech ("we", "us") processes when you visit the site, how we use it and what rights you have under the EU General Data Protection Regulation (GDPR, Reg. 2016/679).

1. What we collect

• Language & country of residence: stored in your browser (localStorage & first-party cookies) to compute destination VAT, shipping estimates and currency.
• Price alerts: if you enable a price alert, we store the email you provide plus the target product and threshold, so we can notify you.
• Technical logs: IP address, user agent and timestamps kept by our hosting provider for security and abuse prevention (max 30 days).
• Analytics: only if you consent via the cookie banner. Anonymous, aggregated usage stats — no cross-site tracking.

We do NOT process payment data — purchases happen on Amazon.

2. Legal basis

• Providing the service you request (Art. 6(1)(b) GDPR) — search, VAT/shipping calc.
• Legitimate interest (Art. 6(1)(f)) — security logs, fraud prevention.
• Consent (Art. 6(1)(a)) — non-essential cookies, analytics, price-alert emails.

3. Amazon affiliate links

Buccia.tech participates in the Amazon EU Associates Programme, an affiliate advertising programme designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.it, Amazon.de, Amazon.fr, Amazon.es and other Amazon EU marketplaces. When you click a "Buy on Amazon" link you are redirected to Amazon with an affiliate tag. Amazon may set its own cookies on its domain according to its own privacy policy — we have no control over them.

4. Cookies & localization

We use a small number of first-party cookies and localStorage entries to remember your language, your "ship to" country, your theme choice and your cookie consent. See our Cookie Policy for the full list.

5. Data retention

• Preference cookies: up to 12 months or until you clear them.
• Price-alert email + threshold: until you delete the alert or unsubscribe.
• Server logs: max 30 days, then anonymized or deleted.

6. Recipients

Data is processed by us and by the following categories of processors, bound by GDPR contracts: hosting/CDN provider, transactional email provider (for price alerts), analytics provider (only with consent). No data is sold to third parties.

7. International transfers

Some processors may be located outside the EEA. Transfers are protected by the European Commission's Standard Contractual Clauses (SCCs) and, where required, supplementary measures.

8. Your rights

You can access, rectify, erase, restrict, port or object to processing of your data at any time, and withdraw consent without affecting past lawfulness. Contact: privacy@buccia.tech. You can also lodge a complaint with your local supervisory authority (e.g. Garante Privacy in Italy).

9. Changes

We may update this policy. Material changes will be highlighted at the top of the page and re-trigger the consent banner where relevant.