Privacy Policy
Privacy Policy of www.giordanoastronomia.it
Last updated: October 2026
1. Data controller
The controller of personal data is:
Skyrover S.r.l.s.
Registered office: 5° Trav. Viale Italia, 4 – 70032 Bitonto (BA), Italy
VAT no. / Tax code: 08994720723
Email: skyroversrls@gmail.com
Certified email (PEC): skyrover@pec.it
2. Types of data processed
The website collects, directly or through third parties, the following categories of personal data:
- identification data (first name, surname);
- contact data (email, telephone number);
- billing and shipping data (address, postcode, city, province, country);
- tax data (tax code, VAT number, company name, if provided);
- data relating to orders and payments;
- browsing and website usage data;
- cookies and tracking tools, as set out in the Cookie Policy.
Data may be provided voluntarily by the user or collected automatically while browsing.
3. Purposes of processing
Personal data are processed for the following purposes:
- managing orders, payments and shipments;
- creating and managing the user account;
- fulfilling contractual, tax and legal obligations;
- customer support and handling of requests;
- sending information about orders;
- sending promotional communications and newsletters, subject to consent;
- statistical analysis and improvement of the user experience;
- website security and prevention of abuse or fraud.
4. Legal basis for processing
Processing is based on one or more of the following legal bases:
- performance of a contract or of pre-contractual measures;
- compliance with legal obligations;
- the user's express consent;
- the legitimate interest of the Controller (security, website management, direct marketing within the permitted limits).
5. Methods of processing
Data are processed using IT and electronic tools, with security measures appropriate to ensure the confidentiality, integrity and availability of the information, in compliance with Regulation (EU) 2016/679 (GDPR).
6. Disclosure and recipients of data
Personal data may be disclosed to third parties acting as processors or independent controllers, such as:
- e-commerce platform and hosting (Shopify);
- payment providers (e.g. PayPal, HeyLight);
- couriers and logistics operators;
- IT service and technical support providers;
- infrastructure and data storage services (Cloudflare);
- email marketing service providers, subject to consent.
7. Transfer of data outside the EU
Some service providers may process data in countries outside the European Union. In such cases, the transfer takes place in compliance with Articles 44 et seq. of the GDPR, through appropriate safeguards such as adequacy decisions or standard contractual clauses.
8. Data retention
Personal data are kept for as long as necessary to achieve the purposes for which they were collected and, in any case, in compliance with legal obligations. Data processed for marketing purposes are kept until consent is withdrawn.
9. User rights
The user may at any time exercise the rights provided for by Articles 15 et seq. of the GDPR, including:
- access to personal data;
- rectification or erasure;
- restriction of or objection to processing;
- data portability;
- withdrawal of consent;
- lodging a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Requests can be sent to: skyroversrls@gmail.com
10. Price reports
Product pages include a box ("Found a better price?") that allows the user to report a cheaper offer seen on another website, so that the Controller can assess whether to match it.
The following data are collected through this form:
- name, email address and, if the user chooses to provide it, telephone number;
- the link to the reported offer and any notes written by the user;
- the product from which the report was sent, with the date and time of submission.
The user's IP address is not stored: only an encrypted fingerprint is recorded, from which the original address cannot be traced and which is used solely to prevent the automated submission of fake reports.
The legal basis for processing is the performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR), since it is a response requested by the user; the IP address fingerprint is based on the Controller's legitimate interest in protecting the form from abuse (Art. 6(1)(f) GDPR). Data collected through this box are not used for marketing purposes and are not disclosed to third parties.
Reports are kept for six months from submission, after which they are deleted automatically. They are stored by Cloudflare, Inc., acting as data processor, in a database bound to the jurisdiction of the European Union.
The rights set out in section 9 remain unaffected and may be exercised by writing to skyroversrls@gmail.com.
11. Reservations of upcoming products
Product pages for items that have been announced but are not yet available, and whose price has not yet been announced, include a form ("Reserve with no obligation") through which the user can ask to be notified when the price and delivery date are known. The reservation is not binding and does not involve any payment.
The following data are collected through this form:
- name, email address and, if the user chooses to provide them, telephone number and any notes;
- the reserved product and the language of the website in which the form was filled in, with the date and time of submission.
As with price reports, the user's IP address is not stored: only an encrypted fingerprint is recorded, used solely to prevent the automated submission of fake reservations.
The data are used only to contact the user about the reserved product. The legal basis for processing is the performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR); the IP address fingerprint is based on the Controller's legitimate interest in protecting the form from abuse (Art. 6(1)(f) GDPR). Data collected through this form are not used for marketing purposes and are not disclosed to third parties.
Reservations are kept for twelve months from submission, after which they are deleted automatically. They are stored by Cloudflare, Inc., acting as data processor, in the same database bound to the jurisdiction of the European Union used for price reports.
The rights set out in section 9 remain unaffected, including the deletion of the reservation at any time, and may be exercised by writing to skyroversrls@gmail.com.
12. Astronomy tools: equipment saved in the account
On the "Astronomy tools" page the user can enter their equipment (telescopes, cameras, eyepieces, reducers, filters and saved combinations) and a log of the objects observed or imaged. If the user is not signed in, these data remain only in their browser and are not transmitted to us.
If the user is signed in with their customer account of the shop, the same data are also saved on our systems, linked to the customer identification number, so that they are available on all of the user's devices. No other data are collected: the customer identifier is provided to us directly by the Shopify platform.
The legal basis for processing is the provision of the service requested by the user (Art. 6(1)(b) GDPR). The data are not used for marketing purposes and are not disclosed to third parties.
The user can delete them at any time from the page itself (the "Clear all" button for the equipment and removal of the log entries); in any case they are deleted automatically after twenty-four months without use. They are stored by Cloudflare, Inc., acting as data processor, in the database bound to the jurisdiction of the European Union already mentioned in sections 10 and 11.
The rights set out in section 9 remain unaffected and may be exercised by writing to skyroversrls@gmail.com.
13. Suggestions about the Astronomy tools
At the bottom of the "Astronomy tools" page there is a form ("An idea or a problem?") through which the user can send us a suggestion or report a fault in the tools.
The following data are collected through this form:
- the message written by the user and the type of message (idea, problem, other);
- the email address, only if the user chooses to provide it in order to receive a reply;
- some technical data that help us understand and fix problems: the tool and the address of the page that were open, the language, the browser type and the screen size, with the date and time of submission.
As with the forms in sections 10 and 11, the user's IP address is not stored: only an encrypted fingerprint is recorded, used solely to prevent the automated submission of messages; for the same purpose the form uses the Cloudflare Turnstile service.
The data are used only to improve the tools, fix their faults and, if the user has provided an email address, reply to them. The legal basis for processing is the Controller's legitimate interest in improving its services and fixing their faults (Art. 6(1)(f) GDPR) and, for the reply, the data subject's request (Art. 6(1)(b) GDPR). Data collected through this form are not used for marketing purposes and are not disclosed to third parties.
Messages are kept for twelve months from submission, after which they are deleted automatically. They are stored by Cloudflare, Inc., acting as data processor, in the same database bound to the jurisdiction of the European Union referred to in sections 10, 11 and 12.
The rights set out in section 9 remain unaffected, including the deletion of the message at any time, and may be exercised by writing to skyroversrls@gmail.com.
14. Cookies
The website uses technical cookies and, subject to consent, profiling and third-party cookies. For more information, please see the dedicated Cookie Policy.
15. Changes to this policy
The Controller reserves the right to amend this Privacy Policy at any time. Changes will be published on this page with the date of the update.