1. Data controller
The controller (titolare del trattamento) is Lorenzo Zanchi, operating Go On Set from Italy.
Email: goonsetapp@gmail.com
No data protection officer (DPO) is appointed, because it is not required for this activity.
2. What this policy covers
This policy covers the public website only: browsing pages, contacting us by email, and optional YouTube videos you choose to load.
The iOS and Android apps may process other data (for example accounts, precise GPS, or photos you upload). Those processing operations are described in the App Store and Google Play privacy labels and in-app notices. This page does not replace them.
3. Data we process
Technical logs. Our hosting provider may process IP address, date and time, requested URL, referrer, browser and device type, and similar server logs needed to deliver the site, prevent abuse, and diagnose errors.
Messages you send. If you email us, we process the address you use and the content of your message (and any files you attach).
YouTube (only if you tap “Load YouTube video”). Google may then process data as described in Google’s privacy policy. Videos are not loaded until you ask for them.
We do not run advertising or audience-measurement analytics on this website. We do not create marketing profiles. We do not sell personal data.
4. Purposes and legal bases
Under Article 6 GDPR we rely on:
- Legitimate interest (Art. 6(1)(f)) — to host and secure the website, keep logs for a short time, and reply to emails you send us.
- Consent (Art. 6(1)(a)) — only if you choose to load a YouTube video. You can refuse by not tapping the load button.
- Legal obligation (Art. 6(1)(c)) — if we must keep or disclose limited records because the law requires it.
5. Cookies
This website does not set its own profiling or analytics cookies. Hosting may use strictly necessary technical cookies or similar storage to deliver the page. Under the Italian Garante cookie guidelines (10 June 2021), those technical tools do not require a consent banner.
If we later add analytics or advertising, we will show a consent banner first and update this page.
6. Who we share data with
We use processors who help us run the site. They act on our instructions:
- Hosting / CDN for the website (currently Vercel)
- Content and images (currently Sanity)
- Email (Google, if you write to goonsetapp@gmail.com)
- Google / YouTube, only after you load a video
- The Movie Database (TMDB) when we import public movie/series metadata — not as a way to identify you
Some of these providers may process data in the United States or other countries outside the EEA. Where that happens, they typically rely on Standard Contractual Clauses or another GDPR transfer tool.
7. How long we keep data
Server logs: according to the host’s default window, generally no longer than needed for security and operations (typically up to 90 days unless we must keep a record of an incident).
Emails: for as long as needed to handle your request, and up to 24 months after the last message unless a longer period is required by law or to defend a claim.
8. Your rights
You may ask us to access, rectify, or erase your personal data, to restrict or object to processing, and to receive data you provided in a portable format, within the limits of Articles 15–22 GDPR.
To exercise these rights, email goonsetapp@gmail.com. We may need to verify that the request comes from you. You can also withdraw YouTube consent simply by not loading videos.
9. Complaints
If you are in the EEA you may lodge a complaint with your local supervisory authority. For Italy that is the Garante per la protezione dei dati personali:
10. Children
This website is not directed at children under 14 (the Italian age for digital consent). Do not send us personal data about a child under 14.
11. Photos and location content
Location photos and copy we publish are intended to be material we have the right to use. Public map pins on the website are approximate. Precise coordinates, if offered, are provided in the app under that product’s terms.
12. Automated decisions
We do not make solely automated decisions that produce legal or similarly significant effects about you.
13. Changes
We may update this page. The “Last updated” date will change when we do. Material changes will be posted here.
