Last Updated: Version 1.0 of July 30, 2025

SNAP S.r.l.s., with registered office in via Luigi Settembrini n. 30, 00195 Rome, as the Data Controller (hereinafter "Data Controller"), collects and processes personal data in compliance with Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), Legislative Decree 30 June 2003, n. 196, consolidated text ("Privacy Code"), provisions and guidelines of the Data Protection Authority ("Garante") and the European Data Protection Board ("EDPB"), all cumulatively referred to as ("Italian Privacy Legislation"), in observance of privacy principles and the rights of Data Subjects.

Pursuant to Articles 13 and 14 GDPR, the Data Controller communicates through this Privacy Policy how and why it collects and processes personal data of users and customers ("Data Subjects") of the website https://www.sigilmagikengine.com/ ("Website").

This Privacy Policy must be read and applies to the processing of personal data of Data Subjects together with the Website's Cookies Policy.

Please read this Privacy Policy carefully before browsing, registering, using the Website and purchasing the products offered through it.

1. Definitions

The terms used in this Privacy Policy and defined in Art. 4 GDPR, even if not written in capital letters, regardless of singular and/or plural, masculine and/or feminine form, have the same meaning attributed by the GDPR and apply in addition to the definitions identified in this Privacy Policy, for example:

§ Data Controller:

the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

§ Personal Data:

any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

§ Data Subject:

the identified or identifiable natural person to whom the personal data refers;

§ Processing:

any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

§ Data Processor:

a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

§ Third Party:

a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

2. Types of Personal Data

The Data Controller collects and processes personal data provided and/or indicated by Data Subjects at different times during interaction with them through the Website.

🌐 Navigation & Website Usage

System and maintenance logs: files that record interactions within the Website, including IP addresses

Usage data: collected automatically through tracking tools such as cookies, including IP addresses, URI addresses, request methods, browser characteristics, visit patterns, and geographic data

Segmentation data: cart items, wishlist additions, checkout processes, payment data, registration forms, visits, purchases, and user behavior patterns

📝 Registration & Information Requests

Personal details: name, surname, date of birth

Contact details: email address, mobile phone number

Registration data: username and password

Request data: questions, preferences, opinions related to services and products

🛒 Sales & E-commerce

Personal details: name, surname, citizenship

Contact details: email, phone, physical address

Payment data: payment methods, credit card data, PayPal details

Billing data: tax code, VAT number

Product data: type of product, purchase history

3. Purposes and Legal Bases of Processing

The Data Controller collects and processes the personal data of Data Subjects for the following purposes, relying on the following legal bases:

a. Response to Information Requests & Account Registration

Legal basis: Pre-contractual measures at the request of the Data Subject

b. Management of Website Registration

Legal basis: Performance of a contract to which the Data Subject is a party

c. Account Closure/Deletion Management

Legal basis: Performance of a contract to which the Data Subject is a party

d. Product Communications Management

Legal basis: Performance of a contract to which the Data Subject is a party

e. Payment Service Provider Relations

Legal basis: Performance of a contract to which the Data Subject is a party

f. Accounting and Tax Obligations

Legal basis: Performance of a contract / Compliance with legal obligation

g. Purchase Order Processing and Supplier Communication

Legal basis: Performance of a contract to which the Data Subject is a party

h. Invoice Processing and Management

Legal basis: Performance of a contract / Compliance with legal obligation

i. Compliance with Judicial/Administrative Orders

Legal basis: Compliance with legal obligation

l. Website Provision and IT Security