Privacy Policy
Last updated: 26th February 2026
This Privacy Policy explains how Book Corners collects, uses and protects personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection laws.
1. Data Controller
The Data Controller is the operator of Book Corners, based in Italy.
For any privacy related request, you can contact:
Andrea Grandi
Email: [email protected]
2. What personal data we collect
We collect only the personal data necessary to provide and operate the service.
Account data
If you create an account, we may collect:
- Username
- Email address
- Password (stored securely in hashed form)
If you sign in using Google, we receive basic account information from Google, such as your email address and a unique identifier necessary to authenticate your account.
User generated content
When you submit a book corner or report an issue, we process the information you voluntarily provide, which may include:
- Location name and description
- Address or map coordinates
- Photos
- Reports or comments
Technical data
To operate and secure the website, we may process limited technical data such as:
- IP address
- Date and time of access
- Browser and device information
3. Purposes and legal basis of processing
Personal data is processed for the following purposes:
Providing the service
To create and manage user accounts, publish and moderate submissions, and operate the map and directory.
Legal basis: performance of a contract (Article 6(1)(b) GDPR).
Security and abuse prevention
To protect the website, prevent fraud, spam or misuse.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Responding to communications
To reply to messages or support requests.
Legal basis: performance of a contract or legitimate interest.
We do not reuse personal data for purposes unrelated to providing Book Corners.
4. Data selling and marketing
We do not sell personal data.
We do not share personal data for advertising purposes.
We do not plan to sell personal data in the future.
5. Data hosting and transfers
Book Corners is hosted on a virtual private server provided by Hetzner, with infrastructure located within the European Union.
Personal data is stored and processed within the EU. No transfers outside the European Economic Area are carried out unless required by third party authentication providers such as Google, in which case such providers act according to their own privacy policies and applicable safeguards.
6. Data retention
Personal data is retained only for as long as necessary to provide the service.
- Account data is kept while the account is active.
- You may request deletion of your account and associated personal data.
- Technical logs are retained for a limited period for security purposes.
Public submissions may remain visible unless removal is requested.
7. Recipients of data
Personal data may be processed by service providers strictly necessary for operating the website, such as hosting providers. These providers act as data processors under Article 28 GDPR.
Personal data may also be disclosed where required by law or by a competent authority.
8. Your rights under GDPR
As a data subject, you have the right to:
- Access your personal data
- Request rectification of inaccurate data
- Request erasure of your data
- Request restriction of processing
- Object to processing based on legitimate interest
- Request data portability
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
To exercise your rights, contact: [email protected]
9. Security measures
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, alteration, disclosure or destruction. However, no system can guarantee absolute security.
10. Changes to this policy
This Privacy Policy may be updated from time to time. Any changes will be published on this page with an updated revision date.