Information about your privacy

Notice pursuant to Article 13 of EU Regulation 2016/679 (GDPR)

This notice is addressed to Users of the Saccuman.it website (hereinafter: "Site") and aims to describe how the Site is managed with regard to the processing of personal data, as well as to inform Users of the purposes and methods of personal data processing carried out by the Data Controller.

The information and data provided or otherwise collected while using the various Saccuman.it services will be processed in compliance with the provisions of the GDPR and confidentiality obligations. Processing activities will be carried out in accordance with the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity and confidentiality.

"Processing of personal data" means any operation or set of operations performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction.

DATA CONTROLLER

The data controller is Saccuman Srl, with registered office in Bolzano, Via Alessandria 23, Italy. Contact e-mail: info@saccuman.it. Saccuman Srl is the owner of the following websites: shop.saccuman.it - piano.saccuman.it - pianoforti-heilmann.it - bechstein-triveneto.it

PERSONAL DATA PROCESSED

The personal data processed consist of identifiers such as first and last name, email address, physical address, and telephone contact details (hereinafter "Personal Data"). In particular, the Personal Data processed through the Site are as follows:

Browsing data: The computer systems and software procedures used to operate the Site acquire, during their normal operation, certain Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that could make it possible to identify users. This category includes IP addresses, domain names of computers, times of requests, the method used to submit the request to the server, the size of the file obtained, etc. This data is used to derive statistical information on the use of the Site and to check that it is functioning correctly.

DATA PROVIDED BY THE DATA SUBJECT

Such Data is provided voluntarily by the User when registering on the Site. Other Data: Data relating to the User's use of the Site may also be collected for statistical purposes, based on the Controller's legitimate interest in verifying the functionality and security of the service.

Cookies: For Cookies, please refer to the specific Cookie Policy. The processing of data through cookies is based on the consent given by users.

PURPOSES OF PROCESSING AND LEGAL BASES

The Controller informs Users of the Site that the data collected will be lawfully processed pursuant to Article 6 of the GDPR for the following purposes:

1. to allow browsing and consultation of the site;
2. to carry out market research and statistics;
3. to exercise and protect the Controller's rights and interests;
4. to respond to support requests via e-mail;
5. to respond to requests submitted through dedicated forms;
6. to trace the perpetrators of any unlawful acts or fraud;
7. to fulfil legal obligations;
8. to fulfil accounting and tax obligations;
9. to send promotional information via newsletter (subject to consent);
10. to check the proper functioning of the IT platforms.

For purposes 1, 4 and 5 the legal basis is the performance of a contract. For purposes 2, 3, 6 and 10 it is legitimate interest. For purposes 7 and 8 it is legal obligation. For purpose 9 it is the data subject's consent.

RECIPIENTS OF PERSONAL DATA

Data may be disclosed to third parties acting on behalf of the Controller (Data Processors). Saccuman Srl uses third-party providers for logistics (e.g. GLS, BRT) and for payments (e.g. PayPal, Stripe). For the Italian "Carta del Docente" teacher voucher scheme, the user must provide a copy of the voucher, an identity document and their tax code to verify the match between the voucher holder and the buyer.

RETENTION PERIOD

The Controller retains data for as long as the User maintains an account and for 12 months following its deletion (if no purchases were made). In the case of purchases, tax information is retained for 10 years from the date of the last purchase.

SACCUMAN MOBILE APP

Saccuman Srl provides a mobile application (Android), currently in test phase, which allows users to access the Guitars and Pianos online stores with their account, view orders and the catalog, receive notifications, and use professional tools for musicians (Tuner and Metronome). By installing and using the app, in addition to the processing already described in this notice for accounts and orders, the following specifications apply:

• Account and orders: the app processes Saccuman account data, the preference for the Guitars or Pianos world, orders and related tracking, for the same purposes and on the same legal bases already indicated in this notice for the Site.
• Android permissions requested: Internet (for basic app functionality), Microphone (only for the Tuner feature, see below), and, on devices with Android 13 or later, Notifications (only if authorized by the User). The app does not request access to contacts, location, camera, storage or other device data.
• Push notifications: if authorized by the User, notifications are managed through Google Firebase Cloud Messaging, to which a technical device token is transmitted, needed solely to deliver messages. Google Firebase is the only third-party service integrated into the app for personal data processing; the app does not include any third-party analytics, advertising or crash reporting SDKs.
• Microphone and Tuner: the app requests microphone access exclusively for the Tuner feature. Captured audio is analyzed in real time only on the User's device to recognize the instrument's pitch: it is never recorded, saved or transmitted to Saccuman Srl or third parties.
• Professional features: some advanced Tuner and Metronome features may require a specific unlock granted by Saccuman Srl to the customer's account.
• Security: sessions for the Guitars and Pianos worlds are kept separate and encrypted on the device; communications with the servers take place exclusively over HTTPS.
• Transfer of data outside the EU: sending push notifications via Google Firebase Cloud Messaging may involve processing the device's technical token on Google infrastructure located outside the European Economic Area. The transfer takes place under the safeguards provided by Google for its GDPR-compliant services (including the European Commission's Standard Contractual Clauses). No other personal data processed by the app is transferred outside the EU.
• Data retention: account, order and preference data processed via the app are retained for the same period already indicated in this notice for equivalent data collected via the Site. The technical token for push notifications is retained only for as long as the app remains installed and notifications remain authorized; it is deleted upon uninstallation or revocation of the permission.
• Deletion of data and account: the User may at any time request the deletion of their account and of the data processed via the app by writing to info@saccuman.it, following the same procedure indicated in the "Data subject rights" section of this notice.
• As this is a version currently in test phase, the app's features and texts may be updated; the complete notice will be reviewed before final publication on the app stores.

DATA SUBJECT RIGHTS

Users may at any time request access, rectification, withdrawal of consent, objection, restriction or erasure of their data by writing to: info@saccuman.it.

Last updated: August 2026