Updated on 6 October 2026
Privacy notice
How data from Sbaggie enquiries and website visits is processed.
The controller and contact details
The data controller is Martina C. Srl, a single-member company, VAT and tax identification number 02070940032, with its registered office at Via Giovanni de Agostini, 2, 28100 Novara NO, Italy. Sbaggie is a product sold and distributed by the company.
For information and requests about your data, write to info@sbaggie.com. The Sbaggie contact telephone is +39 320 468 0846.
The information you send
The Contact and Become a retailer forms ask for your name, email and message. The enquiry category distinguishes general messages from retailer enquiries. These fields are needed to receive and handle your request; without the necessary details we cannot reply through the form.
If you arrive from a product page, the bag name may be suggested in your message and you can change it. Please do not include health information, documents or other sensitive information.
Why the information is used
We answer your questions about models and availability and handle business or collaboration enquiries on the basis of our legitimate interest in responding to communications received, GDPR Article 6(1)(f). If you personally are a party to a potential contract with the company, we use your data to take steps before entering into that contract at your request, Article 6(1)(b). This second basis does not automatically cover someone writing on behalf of a company. Sales take place through retailers; the forms do not collect direct consumer orders.
We use technical data for our legitimate interest in operating the website and protecting it against spam and abuse, Article 6(1)(f). The form does not subscribe you to newsletters or authorise promotional messages. The website does not perform profiling or automated decision-making.
How enquiries are received
The website emails your enquiry to the configured company mailbox. Your name and message appear in the email and your address enables a reply. Under the current process, enquiries remain in the company mailbox and are not transferred to a CRM or other commercial archives. The website does not create an application database of enquiries.
Enquiries are handled by the people managing company communications. Data may also be accessible to providers of technical support, hosting and email services. The website uses OVHcloud and email uses Register.it. For information about recipients, write to info@sbaggie.com.
Locations and transfers
The website server is hosted by OVHcloud in Strasbourg, France. For the Register.it email service, the published terms specify servers in Settimo Milanese and backups at a different datacentre in Milan, Italy.
Register.it’s published data processing agreement covers services involving subprocessors outside the European Economic Area. In those cases, where no applicable adequacy decision exists, it provides for the provider’s commitment to enter into the European Commission’s standard contractual clauses. This provision does not identify actual transfers for the mailbox used or establish that all access and subprocessors remain within the European Economic Area. For information about recipients, any transfers and safeguards, write to info@sbaggie.com.
Browsing and security
The server receives the technical information needed for the connection, including your IP address. To limit spam, the application keeps a temporary per-IP counter in memory with a 60-second window and periodic cleanup; expired entries are normally removed within 75 seconds of the window starting.
Application form logs contain the enquiry category and outcome, without your name, email or message. Proxy access logging is not enabled in the configuration checked; proxy and system diagnostic logs are separate from form logs. Browser cookies and local storage are described on the dedicated page.
Retention
Correspondence relating to completed routine enquiries that do not lead to a contract is scheduled for deletion within 90 days of closure. This is the company retention criterion; it does not indicate automatic deletion from the mailbox or all providers’ technical copies.
Ongoing enquiries are retained for the time needed to handle them. Any further retention of documents relating to contracts, legal obligations or disputes depends on the duration of the relationship, applicable obligations and the need to protect legal rights.
Technical retention and backups
Technical logs support troubleshooting and website security. Application logs rotate by size, removing the oldest when configured limits are reached; retention depends on message volume. No explicit rotation is configured for proxy diagnostic logs. We do not have a verified deletion period in days for system logs or local recovery copies.
OVHcloud Standard backup is active for website continuity; the provider documents a daily copy retained for 24 hours in the same datacentre. The Register.it email service terms provide for daily mailbox backups for six days and recovery of contents from up to five days before the request. These technical copies are separate from correspondence in the mailbox and follow the service retention periods; deleting a message from the mailbox does not mean immediate removal from all copies.
Your rights
Where the conditions in the GDPR apply, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. To exercise your rights, write to info@sbaggie.com.
You may lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali. Sending a business enquiry is not marketing consent. Any future subscriptions to updates will be explained separately before activation.