Privacy policy

Last updated: 27 September 2026

1. Data controller

The data controller is Martino Bertuletti, founder of The Kit Room, an app marketplace dedicated to football shirts. For any matter relating to personal data you can write to privacy@thekitroom.it.

2. Data we collect

We collect the following categories of data:

• data provided voluntarily, namely name (required) and email (required) through the waitlist registration form;
• browsing data, such as technical logs necessary for the functioning and security of the site.

3. Purposes and legal basis

We process personal data for the following purposes:

• waitlist registration and sending updates on the app launch, based on consent (Art. 6.1.a GDPR);
• responding to contact requests, based on legitimate interest or pre-contractual measures (Art. 6.1.f / 6.1.b GDPR);
• ensuring security and proper functioning of the site, including abuse prevention, based on legitimate interest (Art. 6.1.f GDPR);
• measuring site traffic through Google Analytics, based on consent (Art. 6.1.a GDPR).

4. Data processing methods

Data are processed using electronic tools with appropriate security measures. Access is limited to authorised staff and to service providers acting as data processors.

5. Data retention

Waitlist data are kept until consent is withdrawn or, in the absence of interaction, for up to 24 months from the last activity, after which we delete or anonymise the data. Technical logs are typically kept for 6 months or as strictly necessary.

6. Recipients and service providers

We may share data with providers who process it on our behalf as data processors (hosting, database, email delivery). Currently:

• Netlify, Inc.: website hosting and delivery;
• Supabase, Inc.: database where the waitlist is stored;
• Sendinblue/Brevo SAS: email delivery;
• Google Ireland Limited: traffic statistics (Google Analytics), only if you consent to measurement cookies.

An up-to-date list of processors can be requested at privacy@thekitroom.it.

7. Transfers outside the EEA

Some providers may have servers outside the EEA (e.g. in the USA). In such cases, transfers take place under Standard Contractual Clauses (SCCs) or other appropriate safeguards under the GDPR. A residual risk remains: if you do not wish your data to be transferred outside the EEA, please do not join the waitlist.

8. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

9. Exercising your rights

To exercise your rights, write to privacy@thekitroom.it from the email address you registered with. We will respond within the time limits set by law.

10. Minors

The site and the waitlist are not intended for individuals under 18 years of age. If we discover registrations from minors, we will delete the data.

11. Cookies

On your first visit the site shows a banner asking for your consent. Until you choose, no measurement tool is loaded and no analytics cookie is written to your device.

• Technical cookies. They only remember the choice you made on the banner. They are necessary for the site to work and require no consent.
• Measurement cookies (Google Analytics 4). Written only if you accept, to count visits and understand where they come from. If you decline, Google's script is never loaded at all.

You can change your mind at any time through the Cookie preferences link at the bottom of the page: withdrawing consent deletes Google's cookies straight away.

Full list of what gets stored:

The typefaces are hosted on this site and are not loaded from third-party servers.

12. Updates

We may modify this notice to reflect developments in the project or legal requirements. We will inform you in case of significant changes.

← Back to home