Vallerba · Privacy
Vallerba gift and reader emails: privacy
The controller
Leonardo Graziani, Florence, Italy, also controller of the erbe.love project. Contact ritierbemagiche@gmail.com for privacy questions and rights requests. Updated October 7, 2026. This notice concerns Vallerba. Erbe.love has its own notice and subscription choices.
Delivering the gift
We collect first name, last name, email, language, link source, request date, address confirmation, and download date to deliver the prequel and handle your request (GDPR Article 6(1)(b)). Names identify the contact you ask us to create; email confirmation helps prevent using someone else’s address. The QR identifies a page and language, not a verified purchase, and receives no purchase information from Amazon. Without the requested details we cannot deliver the gift through this service.
Optional later emails
Only if you choose the separate checkbox and confirm by email may we send Vallerba book news and messages about your reading experience, including a possible invitation to leave an honest review (consent, Article 6(1)(a)). Neither this choice nor a review is required for the gift. We record the checkbox wording, notice version, and confirmation and withdrawal dates. Withdraw through the email link or by contacting the controller. This form does not subscribe you to Erbe Magiche.
Security and cookies
An essential session cookie protects the form and enables downloads. There is no Analytics, advertising pixel, profiling, or open/click tracking in confirmation emails. For abuse prevention we retain cryptographic identifiers derived from IP and email, and request times, for 24 hours (legitimate security interest, Article 6(1)(f)). The hosting provider manages its own technical logs under its settings.
Providers
DreamHost hosts the website and private records. Twilio SendGrid sends email using the existing verified erbe.love sender. The privacy mailbox uses Google. These providers have infrastructure including in the United States; transfers follow the controller’s provider agreements and applicable safeguards, such as standard contractual clauses or adequacy decisions where relevant. Contacts are not shared with Amazon or other authors.
Retention
Unconfirmed requests are deleted after 7 days. Gift-only contact details are deleted 30 days after confirmation. Email subscriptions last at most 24 months after confirmation unless renewed through a documented choice. Contact details are deleted within 30 days after withdrawal. Consent/withdrawal evidence is kept for up to 3 years with a cryptographic email identifier, without first or last name. Cleanup runs daily and when the service is used.
Your rights
You can request access, correction, deletion, restriction and portability; object to processing based on legitimate interests; and withdraw consent without affecting earlier processing (GDPR Articles 15-22). You may complain to the Italian Data Protection Authority or your competent supervisory authority. We make no automated decisions producing legal effects.
Visiting Erbe Magiche or Amazon
Links to erbe.love or Amazon lead to services covered by their own notices. Erbe Magiche pages are separate editorial content. A click does not automatically transfer your name or email. Amazon links on the novel pages may be affiliate links, as disclosed there.