This site is a showcase of a private archive. Nothing is sold here. The only personal data we ask for is an email address, if you want to hear when the shop opens and, after that, occasionally from the archive.
1Who is responsible
The data controller is Edoardo Vierzi, operating as Concia (Concia Research Archive), based in Italy.
Contact for anything related to your data: inquiries@conciastore.com.
2What we collect
- Your email address, only if you submit it through the reply card or the notice on a record, with the date you submitted it, the date you confirmed it, which of the two forms you used and, if you arrived from one of our Instagram links, which one (for example the link in our profile). This is the record of your consent. We also keep the reference number of the confirmation email, so we can check with our email provider that it was delivered.
- Technical data that any web server receives when a page is requested: IP address, browser type, date and time of the request. These are handled by our hosting provider for security and delivery of the site.
- Aggregate page statistics: how many pages are viewed, which ones, which site a visitor arrived from, and the country and kind of device the browser reports. These are counted in aggregate and are not tied to you. No cookie is set, nothing is written to or read from your device, and neither your IP address nor your browser signature is used to recognise you from one page or one visit to the next.
We do not ask for your name, address, phone number or payment details. There is no account, no cart and no checkout on this site.
3Why, and on what basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Emails about the archive: the opening notice, and occasional notes afterwards | Email address | Your consent, Art. 6(1)(a). You give it by submitting the form and confirming it through the link we email you, and you can withdraw it at any time. |
| Delivering the site securely | Technical data | Legitimate interest in running a working, secure site, Art. 6(1)(f). |
| Knowing how much the site is read | Aggregate page statistics | Legitimate interest in knowing whether the archive reaches anyone, Art. 6(1)(f). No profile is built and no individual is identified. |
Your address is not used for anything else: no profiling, no advertising audiences, no sharing with third parties for their own purposes.
4Who processes it for us
We use a small number of providers, each only for what is described:
- Cloudflare, Inc.: hosts the site, receives the technical data of each request, and stores the email addresses submitted through this page.
- Cloudflare Web Analytics, also run by Cloudflare, Inc.: counts page views on our behalf. It works without cookies and without device fingerprinting, and produces only aggregate figures.
- Resend: sends the confirmation email, and later the emails about the archive, from notice@conciastore.com. It receives your address and the content of each email.
Links to Instagram take you to a service run by Meta Platforms Ireland Ltd., governed by its own privacy policy. Nothing is loaded from Instagram until you follow a link.
We do not sell or share personal data with anyone for marketing.
5How long we keep it
An address that is not confirmed within 30 days is deleted automatically, and nothing is ever sent to it except the confirmation email.
Confirmed addresses are kept until you ask to be removed. There is no fixed deadline, because the list exists to write to you about the archive over time; a request to be removed is acted on without delay.
Technical data are kept by the hosting provider for the short period needed for security and troubleshooting, according to its own retention rules.
Aggregate page statistics are kept by Cloudflare for its own retention period. They are counts, not records about a person, so there is nothing in them to delete on request.
6Cookies
This site does not set cookies. Nothing is written to or read from your device to profile you, to advertise to you, or to recognise you when you come back. For this reason there is no cookie banner to accept or refuse.
The site does count page views, using Cloudflare Web Analytics. It is a cookieless tool: no cookie, no local storage, no device fingerprinting, and no use of your IP address or browser signature to identify you. Because nothing is stored on or read from your device, it does not require consent under Article 122 of the Italian Privacy Code. There are no advertising pixels on this site.
If this ever changes — if the site starts using advertising or profiling tools, or the shop needs cookies beyond the strictly necessary ones — this page will be updated and your consent will be asked first.
7Transfers outside the EEA
Some of the providers above are based in the United States or may process data there. Where this happens, transfers rely on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.
8Your rights
Under Articles 15–22 GDPR you can ask to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. You can withdraw consent at any time, without affecting processing carried out before.
Write to inquiries@conciastore.com. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
9Minors
The site is not intended for people under 14. Under Italian law (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018), consent to data processing is valid from the age of 14. If we learn that an address was submitted by someone younger, we delete it.
10Changes
This notice will be updated when the site changes, and in any case before the shop opens, since a shop involves orders, payments and shipping. The current version is always at conciastore.com/privacy.html.