Privacy Policy

1. Who is responsible for your data

SauzeLocal operates this website and decides how and why your personal data is processed, which makes it the data controller.

Sauze Local • Un servizio di Michael Donnarumma • P.IVA 13304780011. Address: Piazza Terzo Reggimento Alpini 27, 10050 Sauze d’Oulx (TO), Italia. Privacy contact: support@sauzelocal.com.

2. What data we collect

We only collect data you give us or that we need to run the service:

• Account data: first name, last name, email address, preferred language and, if you add them, phone number and country.
• Purchase data: what you bought, price, currency, order status, dates, and the payment reference returned by our payment provider. We never see or store your card number.
• Sauze Pass data: pass type, holder name, validity dates and status. For Local and Worker Passes, a holder photo uploaded by an administrator. The QR contains a verification link: anyone with that link can access the pass details described below. Keep it private.
• Business portal data: for business managers, the business you manage, your role and the information you publish about that business.
• Consent records: your marketing, terms and privacy consent choices, with date and source, so we can prove consent as the GDPR requires.
• Technical data: server and security logs needed to keep the service available and to prevent abuse.

3. Why we use it and our legal basis

Each use has a legal basis under Article 6 of the GDPR:

• To create and run your account, issue your Sauze Pass and give access to the Guide — performance of a contract.
• To take payment, issue records of sale and meet tax and accounting obligations — legal obligation.
• To keep the service secure, prevent fraud and fix faults — legitimate interests.
• To send marketing emails, where you have asked for them — consent, which you can withdraw at any time.
• To store non-essential cookies — consent, collected through the cookie banner.

4. Local and Worker Pass photographs

Administrators can add a photo to a Local Pass; Worker Passes require one. Photos help staff check the holder and are stored privately, without being published in the directory. Administrators and anyone with the QR verification link for an active Local or Worker Pass can view its photo through a short-lived image link. Keep your QR code private and show it only for pass checks. We do not use facial recognition. For removal or correction, contact support@sauzelocal.com; a Worker Pass needs a replacement photo to remain usable.

5. QR verification

When a business scans your pass, the result shows your name, pass type, status and validity dates, plus the holder photo if added to an active Local or Worker Pass. The QR token is stored in hashed form. Businesses do not receive your email address, phone number or purchase history.

6. Who we share data with

We do not sell personal data. We share necessary data with service providers. Depending on the service, they may act as processors or independent controllers:

• Our hosting and database provider, which stores the site and its data.
• Our payment provider, which processes card payments and holds the payment record.
• Our email provider, which sends account and transactional emails.
• Public authorities, where the law requires it.

7. Where your data is stored

The service uses secure cloud hosting and a managed database; card payments use Stripe and iPhone digital purchases use Apple. These providers may process data in different countries. International transfers must rely on applicable adequacy decisions or contractual safeguards, including Standard Contractual Clauses where required. Contact us for information about the relevant providers and safeguards.

8. How long we keep it

• Account data: while your account exists, then deleted or anonymised.
• Invoices and mandatory accounting documents: ten years from the last accounting entry (Italian Civil Code, Article 2220), longer for unresolved tax assessments or another legal obligation (DPR 600/1973, Article 22). Necessary billing details are retained separately with restricted access after account deletion, under GDPR Articles 6(1)(c) and 17(3)(b). This does not justify retaining unrelated profile data or photos.
• Pass data and Local and Worker Pass photographs: for the life of the pass plus a short period for dispute handling.
• Consent records: for as long as we rely on the consent, plus the period needed to prove it.
• Security logs: a short rolling period.

9. Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Where we rely on consent you can withdraw it at any time without affecting processing already carried out. You can manage most of this yourself in your account, or contact us.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority in your country of residence.

10. Children

This service is not intended for children under 16. We do not knowingly create accounts for them. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

If we change this policy we update the date at the top of this page, and for significant changes we tell you in the app or by email.

Website and iPhone account privacy

This policy also covers the Sauze Local iPhone app when available. The account database is hosted online; it is not embedded in the app. Customers can access their own account and purchases; authorised business managers can access their assigned listings; administration requires a separately authorised role.

Apple and Google receive sign-in requests only when their methods are enabled and you choose them. Apple may provide a private relay email. Use the same account across website and app, and link additional methods from that account when available. Do not send passwords or full card details to support.

Request deletion and other privacy rights at support@sauzelocal.com. Where automatic deletion is enabled, it is under Account → Settings. Saved places are device data and can be removed separately. Required billing records may be retained under the legal obligations explained above; this is not permission to keep unrelated personal data.

Password and calendar

Password reset uses a code sent to your email. Do not share the code. Add to Calendar opens Apple’s editor in the iPhone app or downloads a calendar file on the website. You save only the event you choose. On iOS versions before 17, Calendar permission may be requested; the app does not read or upload your personal events.

Providers, referrals and Apple Wallet

Service infrastructure includes Lovable hosting and Supabase database and authentication. Stripe handles online payments; Apple handles Apple purchases and Wallet; Google and Apple receive necessary information when you select their sign-in methods. Support email is forwarded through ImprovMX to the support mailbox. These services receive information necessary for the function used, according to their respective roles and privacy policies.

Purchases made through a referral link or QR are associated with the referring business so that valid sales and commissions can be calculated. The manager sees the results provided by the portal, not your card details. Programme administration relies on relevant contracts and legitimate interests in preventing abuse; optional advertising tracking requires separate consent.

Adding a pass to Wallet is optional. The card contains information needed to display and verify it, such as name, type, validity and QR. Downloading and updating it sends requests to the services involved. Do not publish your card or QR on social media. Apple’s policies explain its own processing.