Privacy Policy

1Definitions

Terms defined in Article 4 GDPR have the same meaning in this Privacy Policy, including:

Data Controller

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Personal Data

Any information relating to an identified or identifiable natural person, directly or indirectly, for example by reference to a name, an identification number, location data or an online identifier.

Data Subject

The identified or identifiable natural person to whom the personal data relates.

Processing

Any operation performed on personal data, such as collection, recording, organization, storage, use, disclosure, restriction, erasure or destruction.

Data Processor

A natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.

Third Party

A natural or legal person, public authority, agency or body other than the Data Subject, Controller, Processor and persons authorized to process personal data under their direct authority.

2Types of Personal Data

The Controller processes personal data provided by Data Subjects, or collected automatically, while they interact with the Website.

Browsing and Website use

• System and maintenance logs, including IP addresses
• Usage data collected through cookies and similar tools (IP address, URLs, browser characteristics, pages visited, approximate location), as described in the Cookie Policy
• Checkout and purchase data: products selected, checkout steps, orders

Registration and information requests

• Identification data: first name, last name
• Contact data: email address, phone number (if provided)
• Account data: username and password (if an account is created)
• Content of requests: questions and messages sent to support

Sales

• Identification and contact data: name, email, billing address
• Payment data: payment method and transaction details (full card data is handled only by the payment processor)
• Billing data: tax code or VAT number, where provided
• Product data: products purchased and purchase history

3Purposes and Legal Bases

The Controller processes personal data for the following purposes and on the following legal bases:

4Nature of Data Provision

Mandatory data

For processing needed to perform the contract or to comply with the law (purposes a–i), providing data is mandatory. Without it the Controller cannot provide the Products.

Legitimate interest

For processing based on legitimate interest (purposes l–p), providing data is necessary to make the Website available. You may object as described in Section 9.

Optional data

For processing based on consent (purposes q–s), providing data is optional. Refusing does not affect your use of the Website or your purchase.

5Processing Methods

Personal data is processed with electronic and automated tools, using methods strictly related to the purposes above and in compliance with Privacy Legislation.

The Controller adopts appropriate security measures to prevent unauthorized or unlawful access, disclosure, modification or destruction of personal data.

6Retention Period

• Account data: until the account is closed. After a closure request, the account is deactivated within 2 days and deleted within 30 days.
• Accounting and tax data: 10 years from the invoice date.
• Website usage data: 3 years from the last interaction.
• Dispute data: until the proceedings are fully concluded.
• Consent-based data: until consent is withdrawn.

For cookie retention periods, see the Cookie Policy.

7Data Recipients and International Transfers

Authorized personnel

The Controller's trained and authorized personnel may access personal data, on a need-to-know basis.

Processors and third parties

Personal data may be shared with:

• Technology providers: website, checkout and email platform (Systeme.io), hosting, IT and file-delivery services
• Payment services: Stripe, PayPal (where available), banks and card networks
• Advertising services: Meta (Facebook/Instagram) and, where used, Google and TikTok — only with your consent where cookies are involved
• Professional services: legal, tax and accounting advisors
• Authorities: where required by law or court order
• Corporate operations: in case of merger, acquisition or sale of the business

International transfers

Some recipients are located outside the European Economic Area, for example in the United States. Transfers take place on the basis of an adequacy decision (such as the EU-U.S. Data Privacy Framework, for certified companies) or Standard Contractual Clauses.

For the list of processors or information on transfer safeguards, write to Support@DreamMasterProtocol.com.

8Automated Processing

The Controller uses automated processing to:

• record consent choices with a timestamp;
• apply your cookie preferences;
• with your consent, measure ad performance and personalize communications.

No decision producing legal effects or similarly significant effects on you is taken solely by automated means.

9Your Rights

You may exercise your rights under Articles 7 and 15–22 GDPR by writing to Support@DreamMasterProtocol.com:

• Access — confirm whether your data is processed and obtain a copy.
• Rectification — correct inaccurate data.
• Erasure — have your data deleted where the law allows.
• Restriction — limit processing in the cases provided by law.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest or for marketing.
• Withdrawal of consent — at any time, without affecting earlier processing. For cookies, use "Cookie Settings" at the bottom of every page.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

10Data Controller

Controller

SNAP S.R.L.S.

Registered office

Via Luigi Settembrini 30, 00195 Rome, Italy

VAT

IT17614971004

Support

Support@DreamMasterProtocol.com

Business email

snapsrls@gmail.com

PEC

snapsrls@pecimprese.it

11Changes to This Policy

The Controller may update this Privacy Policy at any time and will publish the changes on this page, with the date of the last update. Where changes concern consent-based processing, new consent will be requested where required.