HMHussain MohsinPescara · since 2026

Privacy Policy

Last updated: 2026-08-31

Data controller: HUSSAIN MOHSIN — Impresa Individuale, Via Tiburtina Valeria 146, 65128 Pescara (PE), Italia, VAT 02054650680. Contact: support@hussainmohsin.com.

1. Data processed

  • Contact data you voluntarily send by email (name, email address, message content).
  • Members-area account data: name, email address, account type, approval status and registration date. Credentials are handled by the Supabase Auth service; the password is stored on the provider's servers in hashed form and is never visible to the controller. The session token is kept in your browser to keep you signed in.
  • Sales recorded at the stand (order number, date, amount, payment method and, if provided by the customer, name and email), stored in the database hosted on Supabase and accessible only to authenticated administrators.
  • Technical data collected automatically by the infrastructure: IP address, user agent, browser language, requested URL, referrer, date and time, request outcome. This includes the network provider Cloudflare's logs (technical __cf_bm cookie for bot protection) and the hosting platform's availability and performance measurements (page-hit counts and Web Vitals collected by the /~flock.js script).

2. Purposes and legal basis

  • Replying to information requests — pre-contractual measures (Art. 6.1.b GDPR).
  • Managing members-area accounts and their manual approval — legitimate interest in granting access only to verified people (Art. 6.1.f GDPR).
  • Recording sales and tax compliance — legal obligation (Art. 6.1.c GDPR).
  • Security, abuse prevention, error diagnostics and aggregate performance measurement of the website — legitimate interest (Art. 6.1.f GDPR).
  • Loading the Google Maps view on the “Find us” page — consent (Art. 6.1.a GDPR): the map does not load until you accept it.

3. Providers and transfers

  • Supabase — database and members-area authentication, acting as data processor.
  • Hosting platform and Cloudflare delivery network — serving the pages, security logs and technical metrics.
  • Google Ireland Ltd. — embedded map only, and only after consent. Web fonts are hosted on our own domain: no request is made to Google Fonts.

Some providers may also process data outside the European Economic Area; where this happens, the transfer relies on the European Commission's Standard Contractual Clauses.

4. Retention

  • Emails and information requests: up to 24 months.
  • Members-area accounts: until the account is deleted or the registration request is rejected.
  • Accounting and tax data: 10 years, as required by Italian law.
  • Technical and security logs: normally no longer than 12 months.

5. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection at any time by writing to support@hussainmohsin.com. You also have the right to lodge a complaint with the Italian Data Protection Authority.

6. Cookies

The full list of cookies and local storage, with the relevant legal basis, is in the Cookie Policy.