Privacy Policy

1. Data Controller

Garage Drops (the "Platform") is the controller of personal data collected via this website. For any questions concerning your data, contact us at privacy@garagedrops.com.

2. Data We Collect

We process the following categories of data:

• Account data — email address, hashed passphrase, country.
• Newsletter subscription — email address, country (optional), timestamp.
• Technical data — IP address, user agent, basic logs (retained max 90 days).

3. Legal Basis & Purpose

We process your data on the legal bases of: (a) contractual necessity — to provide membership and access to drops; (b) consent — for newsletter subscription, withdrawable at any time; and (c) legitimate interest — for fraud prevention and platform integrity.

4. Cookie Policy

Garage Drops uses only strictly necessary cookies (httpOnly authentication cookie). No third-party tracking, advertising, or analytics cookies are deployed.

Il consenso ai cookie è gestito tramite Cookiebot (certificato ISO 27001), con blocco preventivo automatico e Google Consent Mode v2 attivo. Nessun cookie non essenziale viene installato prima del tuo consenso. Puoi modificare o revocare le tue preferenze in qualsiasi momento tramite il pulsante "Preferenze cookie" presente nel banner.

L'elenco completo dei cookie utilizzati (aggiornato automaticamente ad ogni scansione mensile) è consultabile qui sotto:

Google Ads e Conversioni Avanzate

Quando dai il consenso ai cookie di marketing, utilizziamo Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublino 4, Irlanda) per misurare l'efficacia delle nostre campagne pubblicitarie e per rilevare le conversioni (ad esempio la registrazione di un nuovo membro o l'invio del modulo contatti).

È attiva anche la funzionalità Conversioni Avanzate (Enhanced Conversions): quando completi un'azione considerata conversione, il tuo indirizzo email viene sottoposto a hashing SHA-256 nel tuo browser (l'email in chiaro non lascia mai il tuo dispositivo) e il valore hashato viene trasmesso a Google Ads per abbinare la conversione a un click su un annuncio. Questo permette a Google di attribuire correttamente i risultati anche quando i cookie di tracciamento tradizionali non sono disponibili (browser privati, dispositivi diversi, ecc.).

La base giuridica è il tuo consenso esplicito (art. 6 par. 1 lett. a GDPR). Puoi revocarlo in qualsiasi momento dal pulsante "Preferenze cookie" nel footer: la revoca disattiva sia il tracciamento standard sia le Conversioni Avanzate per le sessioni future.

Google agisce come Responsabile del trattamento ai sensi dell'art. 28 GDPR, secondo i Google Ads Data Processing Terms. Per informazioni sui trattamenti effettuati da Google consulta la Privacy Policy di Google.

5. Data Retention

Account data is retained for as long as your membership is active and for 24 months after deletion request, for legal recordkeeping. Newsletter data is retained until you unsubscribe. Technical logs are retained for 90 days.

6. Data Sharing

We do not sell your data. We share it only with sub-processors strictly necessary to operate the platform: cloud hosting (data within EU), email delivery (Resend, EU/US with Standard Contractual Clauses), and object storage (within the Emergent platform infrastructure).

7. Your Rights (Art. 15-22 GDPR)

You have the right to:

• Access your personal data and obtain a copy.
• Request rectification of inaccurate data.
• Request erasure (right to be forgotten).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time, without affecting prior lawfulness.
• Lodge a complaint with the Italian Data Protection Authority.

To exercise any of these rights, write to privacy@garagedrops.com.

8. Security

Passphrases are stored hashed with bcrypt. Communications happen over HTTPS. Authentication tokens live in httpOnly Secure cookies. Access to administrative tools is gated behind authentication and a hidden route.

9. Terms of Service

By using the Platform you agree to these terms. Membership is offered free of charge and may be revoked at our discretion in case of misuse. All drops, photographs, and editorial content remain the property of Garage Drops or the original artisans, restorers and photographers credited.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify members by email of any material change.