Privacy explained through the services actually in use.

Data controller

The data controller is Paolo Testa, an individual responsible for the REFTHE editorial project, based in Turin, Italy. For privacy requests: info@refthe.com.

Data, purposes and legal bases

Browsing the site entails processing ordinary technical connection data, such as IP address, date and time, requested resource, user agent and response status, to provide and protect the service. The legal basis is the legitimate interest in site security and proper operation. If a user writes to the listed addresses, the email address, message content and any data provided are processed to answer the request or take pre-contractual steps requested by the data subject.

Data stored in the browser

Language preferences, tools and selected products may use local browser storage. These data remain on the device, are not sent to REFTHE and persist until the user clears the site data.

Hosting, domain and email

Aruba S.p.A. provides the domain, DNS, hosting and email services and processes the technical data needed to provide those services under the applicable agreements and notices. Logs are retained for the technical and security periods set by the provider and applicable obligations. REFTHE does not use them for commercial profiling.

Remote Affiliates and Content

Pages may contain Awin and Amazon Associates affiliate links. Commercial links open only after an intentional user click; from that point the network and retailer process data under their own notices. Some product images are requested from external servers and the request may disclose the IP address, user agent and referring page. REFTHE does not receive payment data and does not manage the sales contract. See the transparency affiliations.

Services not present

There are no analytics, newsletters, videos, maps, iframes, user accounts, checkouts, or internal payments. Google Search Console is used for DNS verification and indexing and is not loaded on visitor pages.

Retention

Ordinary communications are retained for the time needed to respond and manage any follow-up, with review at least annually. Data needed for legal obligations, the protection of rights or relationships requested by the data subject may be retained longer for the applicable period. Local browser data remain on the device until deleted by the user.

Recipients and transfers

Data may be processed by strictly necessary technical providers, particularly Aruba for hosting and email. After an affiliate link is clicked, Awin, Amazon or the retailer operate according to their own roles and notices. Any international transfers made by those parties are governed by their respective terms and safeguards.

Data subject rights

The data subject may request access, rectification, erasure, restriction, portability where applicable and object to processing by writing to info@refthe.com. A complaint may also be lodged with the Italian Data Protection Authority. REFTHE does not carry out automated decision-making or profiling.