Privacy Policy

Data Controller

The Data Controller (Titolare del trattamento) is:

• Elhosain Halili
• Occasional private sale — no VAT number (P.IVA)
• Vicolo Primo delle Coste 17, 10074 Lanzo Torinese (TO), Italy
• Email: eloskillzbands@gmail.com

You can use the email above to exercise any of the rights described below.

What data we process and why

Navigation data. Like any website, our hosting provider automatically records technical data sent by your browser (such as IP address, date and time of the request, and the page requested) in its server logs. This is processed to deliver the site, keep it secure, and diagnose faults.

Access cookie. The site is protected by a shared password. When you log in, a strictly necessary technical cookie (skillz_auth) keeps you authenticated. It stores a signed technical session token and does not intentionally hold directly identifying information; however, cookie and session identifiers may still be personal data under the GDPR.

Login attempts. When you submit the access password, your request — including the technical data above — passes through our hosting provider. Failed attempts may be recorded in the provider’s security logs. We process this to protect the site against unauthorised access and abuse.

Language preference. A technical cookie (skillz_locale) remembers whether you chose English or Italian.

Voluntary contact via Instagram. When you tap “Order on Instagram”, you are taken to Instagram to start a direct message. Any data you share there (your handle, profile, message content, and any order, shipping, or payment details you provide) is processed by Meta, and by us only to handle your request. The link includes the product name and reference as a pre-filled message so we know which item you are asking about.

Legal basis

• Navigation data, the access cookie, and login-attempt/security logs: our legitimate interest in operating and securing the site and preventing abuse, and the technical necessity of providing a service you requested (Art. 6(1)(b) and (f) GDPR).
• Language preference: technical necessity of providing the site in your chosen language.
• Instagram contact and order handling: your own decision to reach out to us and the steps needed to handle your request (Art. 6(1)(b) GDPR).
• Gallery photos, player handles, and photographer credits: the consent of the players, who share their photos with us, subject to your right to withdraw it and request removal at any time (Art. 6(1)(a) GDPR).

Recipients and data processors

Hosting. The site is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA), which processes server-log and security data on our behalf as a data processor under a data processing agreement. Hosting may involve transfers outside the EU/EEA (e.g. to the United States); where this occurs it is covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Instagram / Meta. If you choose to contact us via Instagram, your messages are handled by Meta Platforms Ireland Ltd. under its own privacy policy (https://privacycenter.instagram.com/policy). We are not responsible for Meta’s processing.

We do not sell your data and do not share it with anyone else.

Gallery photos, handles, and credits

Our gallery publishes photos of players wearing Skillz Bands. These photos are shared with us by the players themselves. Where a photo identifies a person, we also show that player’s Instagram handle as a caption (linking to their profile) and, where known, credit the photographer with their Instagram handle.

If you appear in the gallery, took one of the photos, or are credited and want your photo, handle, or credit changed or removed, email eloskillzbands@gmail.com and we will remove it promptly. You can withdraw your consent at any time.

Retention

• Access cookie: up to 30 days.
• Server and security logs: kept by the hosting provider for the period set out in its own policy, then deleted or anonymised.
• Instagram conversations and order details: kept only for as long as needed to handle your request and meet any legal obligation.
• Gallery images, handles, and credits: kept while relevant to the brand showcase, and removed on request or when consent is withdrawn.

Your rights

Under Articles 15–22 GDPR you have the right to access your data, and to ask for its rectification, erasure, restriction, or portability, as well as to object to processing based on legitimate interest.

To exercise these rights, email eloskillzbands@gmail.com. We will respond within the time limits set by law.

Right to complain

If you believe your data is processed unlawfully, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your country of residence.

Automated decisions

We carry out no automated decision-making or profiling, and we use no analytics or advertising technologies.