Privacy Policy

The data controller for personal data is Bussolari Alessio, based at Via del Prete 123, 47841 Cattolica (RN), Italy.

For any request related to the protection of personal data, you can contact us at info@presentfor.me.

We collect different categories of personal data necessary for the operation of the platform.

Account data

• Name
• Email address
• Date of birth (optional)
• Username
• Profile picture
• Preferred language

Authentication data

• Password hash (bcrypt)
• Session tokens
• API tokens
• IP address and browser user agent

Shipping addresses

• Recipient name, street, city, postal code, country

Preferences and settings

• Notification preferences for each type of activity

Device data

• Token used to deliver push notifications, and device platform

Social data

• Friendships and friend requests
• Invitations sent and received

Gift and wishlist data

• Gift names, descriptions, prices, URLs, and categories
• Reservations
• Notes and comments for gift givers

In addition to data you provide directly, we automatically collect:

• Session data: access logs, session duration, pages visited
• Commercial clicks: clicks on links to partner sites for affiliate tracking
• Administrative logs: administrator actions for security and audit purposes

We process your personal data in accordance with Art. 6(1) of the GDPR, based on the following legal grounds:

Performance of contract (Art. 6(1)(b))

• Account creation and management
• Provision of the wishlist, sharing, and gift reservation services
• Sending service-related notifications (reservations, invitations)
• Handling support requests

Consent (Art. 6(1)(a))

• Analytical cookies
• Push notifications on your device
• Sending promotional communications

Legitimate interest (Art. 6(1)(f))

• Platform improvement through aggregate analysis
• Fraud and abuse prevention
• Service security

Legal obligation (Art. 6(1)(c))

• Data retention required by tax and accounting regulations
• Responding to requests from competent authorities

For detailed information about the cookies used by the platform, their purposes, and how to manage them, please refer to our Cookie Policy available on the dedicated page of the site.

To operate the platform, we use the following third-party services that may process your data:

• Google Analytics (Google LLC) — Web traffic analysis, activated only with cookie consent
• Sentry (Functional Software Inc.) — Application error and performance monitoring
• Resend (Resend Inc.) — Sending transactional emails (notifications, confirmations, password resets)
• Amazon Web Services S3 (Amazon Inc.) — Storage of files and images uploaded by users
• Affiliate partners (e.g., Amazon) — Click tracking on product links for the affiliate program

Each third-party provider is required to process data exclusively for the stated purposes and in compliance with applicable regulations.

Some of our service providers (Google, Amazon, Sentry, Resend) are based in the United States. Data transfers to the US are carried out on the basis of:

• EU-US Data Privacy Framework for certified providers
• Standard Contractual Clauses (SCCs) approved by the European Commission

In any case, we adopt supplementary measures to ensure an adequate level of protection for your personal data.

We retain your data for the time strictly necessary for the purposes for which they were collected:

• Account data: until account deletion, plus 30 days for permanent removal
• Session data and logs: 30 days
• Analytics data: 24 months
• Support requests: 12 months after closure
• Affiliate data: according to partner program terms
• Backups: 90 days, then automatically deleted

At the end of the retention period, data is deleted or irreversibly anonymized.

Under Articles 15-22 of the GDPR, you have the right to:

• Access (Art. 15): obtain confirmation of processing and a copy of your data
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): request deletion of your data ("right to be forgotten")
• Restriction (Art. 18): restrict processing in certain circumstances
• Portability (Art. 20): receive your data in a structured, machine-readable format
• Objection (Art. 21): object to processing based on legitimate interest
• Withdrawal of consent (Art. 7): withdraw consent at any time

To exercise your rights, write to info@presentfor.me. We will respond within 30 days.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it if you believe that the processing of your data violates the GDPR.

PresentForMe is intended for users aged 16 years or older. We do not knowingly collect personal data from children under 16. If a parent or guardian discovers that a minor has provided personal data without consent, they can contact us at info@presentfor.me to request its deletion.

We adopt technical and organizational measures to protect your personal data:

• Password encryption: passwords are protected with bcrypt (irreversible hashing)
• HTTPS: all communications are encrypted with TLS
• CSRF protection: anti-forgery tokens on every request
• Rate limiting: API request throttling to prevent abuse
• Revocable tokens: sessions, API tokens, and sharing links can be revoked at any time

We reserve the right to update this policy to reflect changes in our practices or for regulatory compliance. In case of substantial changes, we will inform you via:

• Notice on the platform
• Email to the address associated with your account

We encourage you to periodically review this page to stay informed.

For any question, request, or report related to the protection of your personal data:

Email: info@presentfor.me
Website: www.presentfor.me