Data deletion policy

In accordance with Regulation (EU) 2016/679 (GDPR), you have the right to request the deletion of your personal data processed by Gabumo Srl at any time. This page explains how to exercise this right and what happens to your data following the request.

1. Data controller

The controller of your personal data is Gabumo Srl, with registered office at Via Vittor Pisani 20, 20124 Milan (MI), VAT No. 14313810963.

For any request regarding your personal data you can contact us at the following details:

• by post: Gabumo Srl, Via Vittor Pisani 20, 20124 Milan (MI);
• e-mail: privacy@gabumo.com.

2. How to request data deletion

You can request the deletion of your personal data and the removal of your account by sending a request to privacy@gabumo.com, indicating the e-mail address associated with the profile you wish to delete.

To verify your identity and protect the security of your account, we may ask you to confirm the request from the e-mail address associated with the profile or to provide further information.

3. Accounts created via social login

If you registered using Facebook or Google login, deleting your Gabumo account does not automatically remove any data retained by those platforms: to manage or revoke access you can act from the settings of the respective service.

To request the deletion of data collected by Gabumo through social login, simply follow the procedure described in the previous point by contacting privacy@gabumo.com.

4. What happens to your data

Once the request has been verified, we will delete your personal data and permanently deactivate your account within 30 days. You will receive a confirmation of the deletion at the e-mail address provided.

Data deletion is irreversible: it will no longer be possible to recover the account, the order history or any content associated with the profile.

5. Data we may retain

Some data may be retained even after the deletion request, exclusively for the time and within the limits necessary to comply with legal obligations or to defend a legal right, in particular:

• the fiscal and accounting documents relating to the orders placed, retained for the period required by applicable law (usually 10 years);
• the data necessary to manage any disputes or to prevent fraud.

Such data will be processed exclusively for the purposes indicated above and will be deleted at the end of the applicable retention periods.

6. Further information

For more details on the processing of your personal data and the other rights you can exercise under the GDPR, please consult our Privacy Policy.