1. Data controller
The controller (titolare del trattamento) is Lorenzo Zanchi, operating Go On Set from Italy.
Email: goonsetapp@gmail.com
No data protection officer (DPO) is appointed, because it is not required for this activity.
2. What this policy covers
This policy covers the public website only: browsing pages, contacting us by email, and optional YouTube videos you choose to load.
The iOS and Android apps may process other data (for example accounts, precise GPS, or photos you upload). Those processing operations are described in the App Store and Google Play privacy labels and in-app notices. This page does not replace them.
3. Data we process
Technical logs. Our hosting provider may process IP address, date and time, requested URL, referrer, browser and device type, and similar server logs needed to deliver the site, prevent abuse, and diagnose errors.
Messages you send. If you email us, we process the address you use and the content of your message (and any files you attach).
YouTube (only if you tap “Load YouTube video”). Google may then process data as described in Google’s privacy policy. Videos are not loaded until you ask for them.
Audience analytics (only if you accept cookies). If you accept analytics in the cookie banner, we use Google Analytics 4 to understand how the website is used (for example pages viewed, approximate country, device/browser type, and referral source). IP addresses are anonymized where the tool allows it. We do not use this for advertising or marketing profiles, and we do not sell personal data. If you reject analytics, the Google Analytics scripts are not loaded.
We do not run advertising networks on this website.
4. Purposes and legal bases
Under Article 6 GDPR we rely on:
- Legitimate interest (Art. 6(1)(f)) — to host and secure the website, keep logs for a short time, and reply to emails you send us.
- Consent (Art. 6(1)(a)) — to load a YouTube video when you tap the load button, and to run Google Analytics when you accept analytics cookies. You can refuse either.
- Legal obligation (Art. 6(1)(c)) — if we must keep or disclose limited records because the law requires it.
5. Cookies
Strictly necessary. Hosting may use technical cookies or similar storage needed to deliver the page. Under the Italian Garante cookie guidelines (10 June 2021), those tools do not require a consent banner.
Analytics (optional). Google Analytics cookies (or similar storage) are used only after you accept in the cookie banner. You can reject them, change your mind later via the “Cookies” link in the footer, or clear site data in your browser.
We do not use advertising or profiling cookies on this website.
6. Who we share data with
We use processors who help us run the site. They act on our instructions:
- Hosting / CDN for the website (currently Vercel)
- Content and images (currently Sanity)
- Email (Google, if you write to goonsetapp@gmail.com)
- Google Analytics, only after you accept analytics cookies
- Google / YouTube, only after you load a video
- The Movie Database (TMDB) when we import public movie/series metadata — not as a way to identify you
Some of these providers may process data in the United States or other countries outside the EEA. Where that happens, they typically rely on Standard Contractual Clauses or another GDPR transfer tool.
7. How long we keep data
Server logs: according to the host’s default window, generally no longer than needed for security and operations (typically up to 90 days unless we must keep a record of an incident).
Emails: for as long as needed to handle your request, and up to 24 months after the last message unless a longer period is required by law or to defend a claim.
Analytics events (if you consented): retained according to the retention settings in our Google Analytics property (configurable; often measured in months).
8. Your rights
You may ask us to access, rectify, or erase your personal data, to restrict or object to processing, and to receive data you provided in a portable format, within the limits of Articles 15–22 GDPR.
To exercise these rights, email goonsetapp@gmail.com. We may need to verify that the request comes from you. You can withdraw analytics consent with the “Cookies” link in the footer (or by clearing site data), and withdraw YouTube consent simply by not loading videos.
9. Complaints
If you are in the EEA you may lodge a complaint with your local supervisory authority. For Italy that is the Garante per la protezione dei dati personali:
10. Children
This website is not directed at children under 14 (the Italian age for digital consent). Do not send us personal data about a child under 14.
11. Photos and location content
Location photos and copy we publish are intended to be material we have the right to use. Public map pins on the website are approximate. Precise coordinates, if offered, are provided in the app under that product’s terms.
12. Automated decisions
We do not make solely automated decisions that produce legal or similarly significant effects about you.
13. Changes
We may update this page. The “Last updated” date will change when we do. Material changes will be posted here.