top of page

Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how personal information is processed when users visit or use BookGallery, available at www.bookgallery.net, in accordance with the EU General Data Protection Regulation (“GDPR”) and other applicable data protection laws.

BookGallery is operated from Italy.

1. Data Controller

The Data Controller responsible for the processing of personal information relating to BookGallery is:

Carlos Alberto Bisceglia
VAT No.: IT01885640704
Via Giuseppe Garibaldi 6, 86100 Campobasso (CB), Italy
Email: bookgallery026@gmail.com
Certified Email (PEC): carlos.a.bisceglia@pec.it

For any request relating to personal data or privacy rights, the Data Controller may be contacted using the addresses indicated above.

2. Nature of the Website

BookGallery is an informational and promotional website dedicated to the presentation of books and the publication of editorial content through its Blog.

The website does not directly sell products and does not process payments.

Visitors may browse the website, view books and read Blog articles without creating an account.

However, registration or login as a site member is required in order to use certain interactive features, including publishing comments on the Blog.

In its current configuration, BookGallery does not operate a newsletter and does not provide general contact forms through which visitors are required to submit personal information, apart from the registration and authentication functions available to site members.

The website may contain links to external platforms, including Amazon and other third-party websites.

Once a visitor leaves BookGallery, any collection or processing of personal information carried out by the destination website is governed by that third party's own privacy policy and practices.

3. Navigation, Technical and Analytics Data

During normal use of the website, the information systems used to provide the service may automatically process certain technical information whose transmission is inherent in the use of Internet protocols.

Such information may include, for example:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • date and time of a request;

  • pages or resources requested;

  • session-related information;

  • technical information necessary for the proper operation and security of the website.

This information may be processed in order to provide the website, ensure its security and integrity, prevent fraudulent or unlawful use, diagnose technical problems and maintain the service.

Where the GDPR or UK GDPR applies, the legal basis for this processing is the legitimate interest of the Data Controller in operating, maintaining and protecting the website.

In addition, through the analytics tools integrated into the Wix platform, and subject to the visitor's cookie and consent preferences where applicable, information relating to the use of the website may be processed, including pages visited, traffic source, browser and device type, approximate geographic location, date and time of visits, and technical or session identifiers.

Such information is used to obtain statistical information about the use of BookGallery and to understand how visitors interact with and navigate the website.

Where such analytics processing requires cookies or similar technologies that are not strictly necessary, those technologies are used only where permitted by applicable law and, where required, after the visitor has provided the relevant consent.

4. Wix Platform and Wix Analytics

BookGallery is created and hosted using the Wix.com platform.

The website also uses Wix features necessary for the management and display of the Blog, multilingual content, images, member accounts and related functionality.

In connection with the technical services necessary to operate the website, Wix may process personal information relating to visitors and members on behalf of the Data Controller.

BookGallery also uses analytics functionality integrated into Wix in order to obtain statistical information about the use of the website, such as the number of visits, pages viewed, traffic sources, device types and other information relating to navigation.

The availability and level of detail of such analytics information may depend on the preferences expressed by the visitor through the consent management system.

For processing carried out on behalf of the Data Controller, Wix.com Ltd. acts in accordance with its applicable Data Processing Agreement.

Wix may use infrastructure, affiliated companies, authorised service providers and sub-processors in order to provide its services.

5. Member Registration and Member Accounts

In order to publish comments on the Blog, users must register as site members or log in to an existing account.

Information processed in connection with registration and account management may include:

  • email address;

  • name or display name;

  • account identifier;

  • profile image, where applicable;

  • technical information required for registration, authentication and account security.

BookGallery currently allows users to register as site members without prior manual approval.

New members may be required to confirm their email address in order to improve security and reduce automated or abusive registrations.

Where the GDPR or UK GDPR applies, processing necessary to create and manage the account and provide the requested member functionality is based on the performance of a service requested by the user or steps taken at the user's request.

BookGallery currently prevents members from making their personal member profiles public.

This does not prevent the display name associated with an account from being shown in connection with comments or other public interactions published on the Blog.

6. Blog Comments and Public Content

Registered members may use certain interactive Blog features, including publishing comments, replying to comments and using available interaction tools.

When a member publishes a comment, the display name associated with the account and the content of the comment are publicly visible to visitors of the website.

Information directly connected with the publication may also be visible, such as the approximate publication time, replies, reactions or other interactions made available through the Blog.

Where the platform allows images, videos or other material to be attached to a comment, such material is voluntarily published by the user and may become accessible to other visitors.

Users should therefore avoid including personal information, confidential information or other data they do not wish to make public.

Comments may be moderated or removed where reasonably necessary to protect the website, prevent spam or abuse, comply with legal obligations or protect the rights of BookGallery or third parties.

Where the GDPR or UK GDPR applies, processing necessary to provide the requested commenting functionality may be based on the provision of the requested service, while moderation, security and abuse-prevention activities may be based on the legitimate interests of the Data Controller.

7. Registration Through Google or Facebook

The website may allow users to register or log in using third-party authentication services such as Google or Facebook, in addition to registration by email.

Use of these external login methods is optional.

When a user chooses one of these services, the relevant provider may process information in accordance with its own terms and privacy policy and may provide Wix with information necessary to create or authenticate the account, such as identifiers, email address, display name or basic profile information made available by the provider.

Users may use email-based registration instead, where available.

8. reCAPTCHA and Protection Against Bots and Abuse

BookGallery uses Google reCAPTCHA, through functionality integrated into Wix, in order to protect member registration against bots, spam, automated registrations and abusive activity.

In connection with reCAPTCHA, technical data and signals relating to the device, connection, session and user interaction may be processed in order to distinguish legitimate human activity from automated or potentially abusive activity.

The purpose of this processing is website security, fraud prevention and abuse prevention.

Where the GDPR or UK GDPR applies, the legal basis is the legitimate interest of the Data Controller in protecting the website, its users and its registration systems.

Further information about cookies or similar technologies associated with security services is provided in the Cookie Policy where applicable.

9. International Data Transfers

The use of Wix and related technical services may involve the processing or transfer of personal information outside the European Economic Area.

Wix.com Ltd. is based in Israel and may use affiliated companies and sub-processors located in other countries.

The optional use of external authentication providers such as Google or Facebook, and security services such as reCAPTCHA, may also involve processing within the infrastructure of the relevant providers.

Where applicable, international transfers are carried out using the mechanisms and safeguards provided by applicable data protection law, including adequacy decisions, standard contractual clauses or other legally recognised safeguards.

10. Cookies and Similar Technologies

BookGallery uses cookies and other technical tools necessary for the proper operation, security, member authentication and functionality of the website.

The website may also use cookies or similar technologies for statistical and analytics purposes through Wix functionality.

Cookies or tracking technologies that are not strictly necessary are used only where permitted by applicable law and, where required, after the visitor has provided consent.

BookGallery uses Usercentrics for Wix to manage cookie consent and visitor preferences.

Where applicable, visitors can accept, reject, modify or withdraw their cookie preferences through the cookie banner or privacy preference controls available on the website.

Further information about the categories of cookies used, their purposes, providers and retention periods is available in the Cookie Policy of BookGallery.

11. Voluntary Email Communications

If a visitor voluntarily contacts BookGallery using an email address published on the website, the information provided will be processed only to the extent necessary to respond to the request and manage the related correspondence.

Providing such information is voluntary. Failure to provide information necessary to deal with the request may make it impossible to respond.

Where the GDPR or UK GDPR applies, depending on the nature of the communication, the legal basis for processing may be the taking of steps at the request of the individual, compliance with a legal obligation, or the legitimate interest of the Data Controller in managing and responding to communications received.

The information may be retained for as long as reasonably necessary to manage the communication and, where appropriate, to comply with legal obligations or protect legal rights.

12. Recipients and Public Disclosure of Personal Information

Personal information may be processed, only to the extent necessary for their respective functions, by the Data Controller and by service providers that provide technical services necessary for the operation, security, member management, Blog functionality, consent management and statistical analysis of the website.

These may include:

  • Wix.com Ltd. and its authorised service providers or sub-processors;

  • providers involved in consent management;

  • authentication providers selected by the user;

  • security providers;

  • other technical providers necessary for operation, maintenance or security.

BookGallery does not generally make visitors' personal information public unless this forms part of a function deliberately used by the individual or disclosure is otherwise required or permitted by law.

In particular, display names, comments, replies and other material voluntarily published through the Blog may be accessible to other visitors of the website.

13. Data Retention

Personal information is retained only for as long as necessary for the purposes for which it is processed, taking into account the nature of the information, the purposes of processing, applicable legal obligations, security requirements and the retention periods used by the technical service providers supporting the website.

Technical and security information may be retained according to the operational and security requirements of the website platform and the relevant providers.

Information relating to member accounts may be retained for as long as necessary to manage the account and provide the requested member functionality, subject to any longer period required for legal obligations, security, abuse prevention or the protection of legal rights.

Comments and other material published through the Blog may remain available until deleted by the user where the relevant functionality is available, or until removed by the Data Controller or platform where appropriate.

Information contained in voluntary email communications may be retained for as long as necessary to manage the communication and any related obligations.

Information relating to consent preferences may be retained for the period necessary to record and respect the visitor's choices.

14. Privacy Rights in the European Economic Area and the United Kingdom

Where the GDPR or UK GDPR applies, individuals may have rights including:

  • the right of access to personal information;

  • the right to correct inaccurate or incomplete information;

  • the right to request erasure where applicable;

  • the right to restrict processing;

  • the right to object to certain processing;

  • the right to data portability where applicable;

  • the right to withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Requests may be submitted using the contact details provided in Section 1.

Individuals may also request information or assistance relating to their member account, information associated with the Member Area or content they have published through the Blog.

As the Data Controller is established in Italy, complaints may be submitted to the Garante per la Protezione dei Dati Personali.

Under the GDPR, individuals may also lodge a complaint with the competent supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement.

Where UK data protection law applies, individuals may also have the right to contact the Information Commissioner's Office (ICO).

15. United States Privacy Information

Certain U.S. state privacy laws may grant specific rights to residents of particular states.

Where and to the extent that such laws apply to BookGallery, eligible residents may have rights which, depending on the applicable law, may include:

  • requesting access to certain personal information;

  • requesting correction of inaccurate personal information;

  • requesting deletion of certain personal information;

  • obtaining information about categories of personal information processed and the purposes of processing;

  • opting out of certain sales, sharing or targeted advertising where applicable;

  • exercising legally protected privacy rights without unlawful discrimination.

The existence and scope of these rights depend on the law applicable to the individual and to BookGallery.

Privacy requests may be submitted to:

bookgallery026@gmail.com

16. California Privacy Information

California privacy laws, including the California Consumer Privacy Act (CCPA), as amended, provide certain privacy rights where the statutory requirements for application are met.

Where those laws apply to BookGallery, California residents may exercise the rights available to them under applicable law.

BookGallery does not sell visitors' personal information.

In its current configuration, BookGallery does not itself use visitors' personal information for cross-context behavioural advertising or create advertising profiles based on visitors' activities across unrelated websites or online services.

Technical providers may process certain personal information as necessary to provide hosting, infrastructure, security, consent management, authentication, analytics or other services required for the operation of BookGallery.

If BookGallery's practices change in a manner that creates additional obligations under applicable U.S. privacy law, this Privacy Policy and any required privacy controls will be updated accordingly.

17. Other Jurisdictions

Visitors located in other countries may have additional rights under the data protection or privacy laws applicable in their jurisdiction.

Where such laws apply to BookGallery, personal information will be handled in accordance with the requirements applicable to the relevant processing.

Eligible individuals may contact the Data Controller using the details provided in Section 1 to request information or exercise privacy rights recognised by applicable law.

This provision does not imply that every privacy law of every country automatically applies to BookGallery merely because the website can be accessed from that country.

18. Advertising, Analytics, Profiling and Automated Decision-Making

In its current configuration, BookGallery does not itself use personal information for behavioural advertising or cross-site advertising profiling.

BookGallery uses Wix analytics functionality for statistical analysis of website usage as described in this Privacy Policy.

These analytics functions are not used by the Data Controller to make automated decisions about individual visitors or to create cross-site advertising profiles.

BookGallery does not carry out automated decision-making producing legal or similarly significant effects on visitors.

Automated security tools, such as reCAPTCHA, may be used to identify bots, spam or potentially abusive activity for security purposes.

If additional advertising, tracking or profiling technologies involving further processing of personal information are introduced in the future, this Privacy Policy, the Cookie Policy and the applicable consent or privacy controls will be updated where required.

19. Children's Privacy

BookGallery is a general-audience website and is not specifically directed at children.

The website does not intentionally seek to collect personal information from children for marketing or profiling purposes.

Because registration is available in connection with Blog participation, it is possible that an individual may voluntarily attempt to create an account.

If the Data Controller becomes aware that personal information relating to a child has been collected in circumstances in which the processing is not permitted or an appropriate legal basis is absent, reasonable steps will be taken in accordance with applicable law.

20. Security

The Data Controller uses technical and organisational measures appropriate to the nature of the website and the information processed, including security measures provided by Wix and other technical service providers.

Current measures include member authentication, email confirmation mechanisms, reCAPTCHA protection for registration and other security tools made available by the platform.

These measures are intended to reduce the risk of loss, unlawful use, unauthorised access, automated registrations, spam or unauthorised disclosure of personal information.

No Internet-based system can guarantee absolute security.

21. Complaints

Questions or complaints concerning the handling of personal information may be sent to the Data Controller using the contact information provided in Section 1.

Depending on the applicable law and the individual's location, the individual may also have the right to lodge a complaint with the competent privacy or data protection authority.

22. Changes to this Privacy Policy

BookGallery may update this Privacy Policy to reflect changes in applicable law, website functionality, service providers, security settings or data-processing practices.

The updated version will be published on this page and the “Last updated” date will be changed accordingly.

bottom of page