Privacy policy
Updated 16 October 2026
Data controller: Giuseppe Guglielmo.
info@mangaprimastampa.it
Manga Prima Stampa is a project created for manga collectors: an archive, documented sales, resources, articles and a community. This notice, under Articles 13 and 14 GDPR where applicable, covers browsing, the newsletter, messages and reports. It applies to the project's website, including its Sites address and mangaprimastampa.it when connected.
Newsletter: data, purpose and consent
We use your email to send articles, archive updates, collecting insights and news about the project's activities. The legal basis is your consent (Article 6(1)(a) GDPR). Providing your email and selecting the unchecked consent box is necessary only to subscribe; browsing remains available without subscribing. Registration is immediate and the welcome message requires no further confirmation.
We record your email, language, source page, request and subscription dates, status, withdrawal date, and the wording and version of the consent notice. A random personal link enables unsubscribe without an account. We retain changes to document your choices. This subscription does not authorise unrelated third-party marketing or the sale of your address.
Delivery and email measurement
Resend sends automatic emails; we record sending attempts, provider acceptance, message identifiers and technical errors to operate the service and avoid duplicates. Acceptance by the provider does not mean the recipient has read the email. The site's register does not collect open or click events or build interest profiles. Any future individual measurement of newsletter opens or clicks requires prior information and the applicable consent, with a way to keep receiving the newsletter without that measurement. Updating this notice alone does not extend an existing consent.
Messages and reports
If you email us, we process your address and message to answer you. Missing-volume suggestions request only the title and an optional reference link; sale reports record the sale identifier, reason and relevant sale data. They do not subscribe you to the newsletter. Reports, processing status, dates and internal notes remain in the private register. Operational notifications go to the controller's management mailboxes.
These activities rely on our legitimate interest in answering enquiries, maintaining a reliable archive and investigating errors (Article 6(1)(f) GDPR). Please do not submit sensitive information or unnecessary information about other people. Supplying these details is voluntary; without the information needed to identify an issue, we may be unable to investigate it.
Browsing and security
Hosting and image delivery necessarily process technical information such as IP addresses, request times, requested resources, browser information and error logs. Our interest is to deliver and protect the site and prevent abuse (Article 6(1)(f)). Form rate limits use a pseudonymous hourly network-address digest, not an anonymous identifier. Raw IP addresses are not stored in newsletter or report records. See the cookie policy for browser storage and external images.
Optional visit statistics
With your consent (Article 6(1)(a) GDPR and the rules for non-essential terminal storage), Google Analytics 4 measures visits to public editorial pages. Data includes pseudonymous cookie identifiers, page viewed, visit/session information and technical browser, device and approximate geographic information. Google receives the network address to deliver and process requests; these data are not described as anonymous.
Our integration sends predefined editorial page addresses and titles, the origin of an external referring site (without its path, query or fragment), and approved campaign labels. Community clicks and successful newsletter form submissions are measured without sending email addresses or form contents. We do not send arbitrary URL parameters, search text, personal newsletter links or private-management pages, and do not use Google Signals, advertising personalisation, User-ID or newsletter-open measurement. Google tags are blocked until acceptance, including cookieless analytics pings. Withdrawal is available from Cookie preferences.
Granular user/event retention is governed by the property’s Google Analytics retention setting (2 or 14 months for a standard property); this setting does not delete standard aggregated reports. Cookie expiry is a separate limit described in the cookie policy. Analytics data are used to understand the site’s readership and improve its contents, not to make decisions with legal effects about you. Minimal choice records are retained to demonstrate consent under Article 7(1) GDPR and manage withdrawal, with the criteria described in the cookie policy.
Who processes the data
- OpenAI Sites and Cloudflare: website hosting, private database, technical infrastructure and authorised management access.
- Resend: delivery of automated emails and newsletter communications.
- Register.it: the project's contact mailbox and domain services. Pointing DNS to Sites does not move website hosting to Register.it.
- Google Analytics / Google Ireland Limited: optional visit measurement, under the Analytics terms and data processing terms applicable to EEA customers.
- Google/Gmail: an additional private mailbox receiving management notifications.
The subscriber register is not public and access is restricted to the authorised owner. Providers process data necessary for their services under applicable terms; they may act independently for their own account administration, security and legal obligations. Data may also be disclosed to competent authorities when required by law. Subscriber lists are not sold.
Processing outside the EEA
These services may process data outside the European Economic Area. Resend states that its primary processing takes place in the United States and its data processing agreement provides standard contractual clauses for relevant transfers. Sites does not offer a guaranteed data-residency location. The ChatGPT Sites Data Processing Addendum governs hosted visitor data, with OpenAI acting as processor; for EEA data it provides standard contractual clauses or an adequacy decision for relevant international transfers. The applicable agreements and providers' transfer information govern their respective services; you can contact us to request information about the safeguards relevant to your data.
Google Analytics can involve processing outside the EEA, including in the United States. Google describes reliance on the EU–US Data Privacy Framework for covered transfers and contractual safeguards where applicable: see its transfer information and data processing terms. This is not a promise of EU-only storage.
Provider documentation: OpenAI Sites, Cloudflare, Resend DPA, Register.it, Google.
Retention
- Active subscriptions: until withdrawal or closure of the newsletter. Withdrawal immediately excludes the address from active recipients and cancels pending subscriber messages.
- Consent and withdrawal evidence: restricted records needed to demonstrate your choices and prevent unwanted sending are retained while those purposes remain necessary. Retention is reviewed against the possibility of disputes and applicable limitation periods; it is not used to resume marketing.
- Reports and correspondence: while the request is handled and subsequently only where needed to document the correction, respond to follow-up or manage a dispute. Unnecessary personal details are removed; non-personal editorial facts may remain in the archive.
- Rate limits: expire at the end of the hourly window; expired records are removed on the next rate-limited request.
- Delivery records and provider logs: for troubleshooting, duplicate prevention and necessary evidence. Provider retention and backup cycles are separate from the site's register; deleting a report does not recall notification emails already delivered.
Unsubscribing and erasure are different actions. To request deletion, write to the contact above; we assess any limited record that must be retained and explain the reason.
Your rights
You can withdraw newsletter consent at any time using the unsubscribe link or by contacting us, without affecting previous lawful processing. Under Articles 15–22 GDPR, as applicable, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You can complain to the Italian data protection authority or your competent supervisory authority. Requests are normally answered within one month; any lawful extension is explained. We request identity checks only when reasonably necessary.
Community, public sources and updates
WhatsApp community access is optional and separate from the newsletter; participation may make your phone number or profile visible to others according to WhatsApp settings. External services apply their own notices. The archive uses published bibliographic and sales information, including public seller identifiers where relevant; if such information concerns you, you may contact us to exercise your rights. We do not make automated decisions with legal or similarly significant effects. This notice will be updated when processing changes; new purposes requiring consent will be presented before they begin.