Privacy Policy

1. Data Controller

The data controller for personal data processed through bellostock.com is:

Fotograv di Antonio Gravante
Tuscany, Italy
P.IVA IT02562280608
Email: info@bellostock.com

2. Data We Collect

2.1 Data you provide directly

• Registration data: first name, last name, email address, password (stored as a hashed value — never in plain text)
• Billing data: name, address, VAT number or tax code, SDI code or PEC email (for Italian entities), country
• Contact messages: name, email address, subject and message content
• Contributor data: PayPal email address for payout processing

2.2 Data collected automatically

• Technical data: IP address, browser type, operating system, referring URL, pages visited, timestamps
• Transaction data: purchase history, license numbers, download logs
• Cookies: session cookies and, where applicable, analytics cookies (see Section 9)

2.3 Data we do not collect

We do not collect or store credit card numbers or banking details. All payment processing is handled directly by PayPal, subject to their own privacy policy.

3. How We Use Your Data

We do not use your data for automated profiling or decisions that produce legal effects.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR (Regulation EU 2016/679):

• Contract performance (Art. 6.1.b): processing necessary to provide our services, process purchases and manage your account
• Legal obligation (Art. 6.1.c): processing required by Italian tax and accounting law
• Legitimate interests (Art. 6.1.f): fraud prevention, platform security and service improvement
• Consent (Art. 6.1.a): where you have given explicit consent, such as for optional newsletter communications

5. Data Retention

• Account data: retained for the duration of your account and for up to 2 years after account deletion, unless a longer period is required by law
• Transaction and billing data: retained for 10 years in accordance with Italian fiscal regulations
• Contact messages: retained for 2 years from receipt
• Technical logs: retained for 12 months
• Session cookies: deleted at the end of the browser session

6. Sharing of Data

We do not sell, rent or trade your personal data. We share data only with the following categories of recipients, solely to the extent necessary for the specified purpose:

• PayPal: payment processing and payout disbursement
• Amazon Web Services (AWS): cloud infrastructure and file storage
• Aruba S.p.A.: web hosting and email infrastructure
• Amazon SES: transactional email delivery
• Italian tax authorities: where required by law for electronic invoicing

All third-party service providers are bound by data processing agreements and are required to implement appropriate security measures.

7. International Transfers

Some of our service providers (including AWS and Amazon SES) may process data outside the European Economic Area. Where this occurs, we ensure that appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses approved by the European Commission.

Our AWS infrastructure is located in Stockholm (eu-north-1), within the EEA.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): you may request a copy of all personal data we hold about you
• Right to rectification (Art. 16): you may request correction of inaccurate data
• Right to erasure (Art. 17): you may request deletion of your data, subject to our legal retention obligations
• Right to restriction (Art. 18): you may request that we limit the processing of your data
• Right to data portability (Art. 20): you may request your data in a structured, machine-readable format
• Right to object (Art. 21): you may object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@bellostock.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Italy, this is the Garante per la Protezione dei Dati Personali (garanteprivacy.it).

9. Cookies

We use only technically necessary cookies required for the Platform to function. These include:

• Session cookie: maintains your login state during your visit. Deleted when you close your browser.
• CSRF token cookie: protects forms against cross-site request forgery attacks.

With your consent, we use Google Analytics (GA4) to understand how visitors use the site. This only activates if you accept it via our cookie banner; we do not use advertising cookies or tracking pixels. For full details, see our Cookie Policy.

10. Minors

BelloStock is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered an account, please contact us immediately at info@bellostock.com and we will promptly delete the account and associated data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email at least 15 days before taking effect. The date of the most recent revision is shown at the top of this page. Continued use of the Platform after the effective date of changes constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or to exercise your rights, please contact:

Fotograv di Antonio Gravante
Email: info@bellostock.com
Tuscany, Italy