Privacy policy

• We don’t use cookies or any tracking or advertising tools. For anonymous visitor statistics we use Vercel Web Analytics, without cookies (section 3).
• We serve fonts and images from our own hosting – no connection is made to Google Fonts or similar services.
• Our forms (contact and defect report) send nothing to us and store nothing: they only prepare your message and open WhatsApp with it. Only what you send there reaches us.
• If you write to us on WhatsApp, WhatsApp and Meta also process your data. Alternatively, you can reach us via eBay and Vinted messages or by email.
• We sell devices only on eBay and Vinted. When you buy there, the platform’s privacy policy applies; we only receive the data needed to complete the purchase.
• Links to eBay, Vinted, WhatsApp, Trustpilot and Google and the share buttons on the blog only transmit data to the provider once you click them. The search in the header only sends your search term to eBay once you submit it.
• Your choice of language is stored only locally in your browser – and only once you select a language.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

We have not appointed a data protection officer (DPO), as this is not required for our activities.

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Each time you visit, the hosting provider automatically processes data that your browser transmits (server log files):

• IP address
• date and time of access
• page or file requested
• referrer URL (the page you came from)
• browser type, operating system and device type

This processing is necessary to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and error-free operation of the website. The provider keeps the log files only for as long as necessary for the security and operation of the service and then deletes them automatically; we do not use them to identify you. We have concluded a data processing agreement with the hosting provider (Art. 28 GDPR).

Vercel also processes data in the USA. Vercel is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR).

Visitor statistics: to understand which pages are read, we use Vercel Web Analytics. No cookies are set and no personal identifiers are stored that would recognise you across different websites. For each page view, the time, the page address, the referrer URL, the approximate location (country, region, city), the operating system, the browser and the device type are recorded. Instead of an identifier, a hash value is created from the request and discarded after 24 hours; we only see aggregated figures.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving our website. The tool uses neither cookies nor any other data stored on your device, only produces aggregated statistics on visits to this website, and Vercel processes them solely on our behalf. That is why we use it without asking for your consent, as provided for such tools by the guidelines on cookies and other tracking tools issued by the Italian data protection authority (Garante) on 10 June 2021 (Article 122 of the Italian Data Protection Code, Codice in materia di protezione dei dati personali, Legislative Decree 196/2003). You can object at any time (Art. 21 GDPR), for example by blocking content from “/_vercel/insights” in your browser.

Texts, categories and blog articles are part of the website itself and are served only by Vercel’s servers (section 3). We don’t use a database or any other external service for content: while you browse our pages, your browser doesn’t connect to any other provider. For fonts and images, see section 8.

On our help page (contact form) and our statutory warranty and returns page (defect report), you can prepare your message in a form. The forms send nothing to us or our service providers and store nothing, not even in your browser. What you type stays on your device until you click the button.

WhatsApp then opens with the finished text, which is passed to WhatsApp as part of the link (wa.me). In WhatsApp you can still edit, send or discard it. We only receive the message once you send it; from then on, section 6 applies.

Contact form

your name (optional), the topic (optional) and your message

Defect report

platform (eBay or Vinted), order number, device and description of the problem; optionally your name, the delivery date and your confirmation that the device has not been dropped, has not come into contact with liquid and has not been opened or repaired by anyone else

We use a defect report to match it to your order on eBay or Vinted and to handle your statutory rights in respect of defects. The legal basis is Art. 6(1)(b) GDPR (performance of the purchase contract) and Art. 6(1)(c) GDPR where statutory retention obligations apply.

Our help page shows a WhatsApp button, and there are WhatsApp links on the home page, in the footer, on the statutory warranty and returns page and in the forms (section 5). These are simple links (wa.me) to our WhatsApp number +39 3522 325 325. We don’t embed any WhatsApp content or scripts: until you click, nothing is loaded from WhatsApp and no data is transmitted to WhatsApp.

When you click a WhatsApp link, WhatsApp or the WhatsApp website opens. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, which processes your data as an independent controller under its own privacy policy. Data may also be transferred to Meta Platforms, Inc. in the USA; Meta relies on the EU-US Data Privacy Framework (adequacy decision of the European Commission) for such transfers.

We use WhatsApp on a device where WhatsApp has no access to the address book; we do not sync your phone number with WhatsApp.

When you write to us on WhatsApp, we process your phone number, your WhatsApp profile name and the content of the chat (e.g. messages, photos or videos you send us) to answer your request – for example a question about a device or a defect report. The legal basis is Art. 6(1)(b) GDPR if your request relates to a purchase (including a defect report), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests through the channel you have chosen).

Using WhatsApp is voluntary. Alternatively, you can reach us via the eBay and Vinted messages or by email at testedbefore@pec.it (section 7).

We delete WhatsApp chats once your request has been closed, unless statutory retention obligations require us to keep them.

If you contact us by email (address in section 2), we process your details to handle your request (Art. 6(1)(b) GDPR if it relates to a contract, e.g. a purchase or a defect, otherwise Art. 6(1)(f) GDPR).

Messages you send us via eBay or Vinted are processed by the platforms in accordance with their own privacy policies.

We use the fonts Inter and Poppins. Like the images on our website, they are served from our own hosting (self-hosted). No connection is made to Google Fonts or any other external font or image service.

We sell devices exclusively on eBay and Vinted. Nothing can be bought on this website itself, and we do not collect any purchase or payment data here.

When you buy on eBay or Vinted, the platform processes your data as an independent controller; the privacy policy of eBay or Vinted applies.

As the seller, we receive from the platform the data we need to complete your purchase, e.g. your username, your name and delivery address and, if you have provided it to the platform, your phone number. We process this data exclusively to perform the purchase contract (complete the purchase, ship the device, handle defect reports and withdrawals) and to meet legal obligations such as invoicing and bookkeeping (Art. 6(1)(b) and (c) GDPR).

For delivery, the carrier receives your name and delivery address (and, where needed for delivery, your phone number), either via the platform’s shipping label or directly from us.

Our website links to our eBay shop, our Vinted profile, our WhatsApp chat (section 6) and review platforms (Trustpilot and, if set up, Google). We don’t embed any content, widgets or scripts from these providers, so no data is transmitted to them while you are only visiting our pages.

Only when you click such a link – for example “Shop on eBay” or “Shop on Vinted” – do you leave our website and go to the provider’s website or app, which we do not operate. From then on, the provider’s privacy policy applies, and the provider alone is responsible for any processing there; we have no control over it. The platforms’ privacy policies are here: eBay’s privacy notice (åbner i en ny fane) and Vinted’s privacy policy (åbner i en ny fane).

Share buttons on the blog

Below our blog articles, you can share the article via WhatsApp, X, LinkedIn or email, or copy the link. These are simple links without any embedded content or scripts from the providers. Only when you click a button does the service or your email program open with the title and address of the article. “Copy link” only puts the address on your device’s clipboard; nothing is transmitted.

Search in the header

The search looks through our listings on eBay. Only when you submit the search is your search term sent to eBay (the eBay site of the language you are using, e.g. ebay.com) and eBay’s results page opened; eBay’s privacy policy applies there. While you are only typing, nothing is transmitted.

The QR code in our packages takes you to our thank-you page. This page does not collect any personal data: it contains no form, and the QR code contains only the address of the page, no information about you or your purchase. As with any page visit, only the server log files and visitor statistics described in section 3 apply.

From the thank-you page, you can leave us a review on the linked platforms. Section 10 applies to these links.

This website does not use cookies – no tracking or advertising cookies, no technical cookies and no third-party cookies. Nor do we use any marketing tools; for cookieless visitor statistics see section 3. We store only two settings, only locally in your browser (local storage) and only once you click the corresponding button:

• your chosen language – when you select a language
• that you have dismissed the language suggestion – when you close it

This information is not transmitted to us. It only serves to make the functions you have requested work (technical tools within the meaning of Article 122 of the Italian Data Protection Code, Legislative Decree 196/2003), so no consent is needed and the website shows no cookie banner. You can delete these entries at any time in your browser settings.

There is no login on this website, so no login details are stored in your browser.

We store personal data only for as long as necessary for the purpose concerned:

• What you enter in the forms: we don’t store it (section 5).
• Enquiries by email: until they have been fully dealt with, then for no longer than 6 months.
• Defect reports (via WhatsApp, email, eBay or Vinted): until the case has been closed, then only if and for as long as statutory retention obligations apply.
• WhatsApp chats: until your request has been closed, unless statutory retention obligations apply.
• Data on purchases via eBay and Vinted: for as long as it is needed to complete the purchase and handle claims in respect of defects and statutory retention obligations apply (10 years for accounting records and tax documents: Article 2220 of the Italian Civil Code and Article 22 of Presidential Decree 600/1973).
• Visitor statistics (Vercel Web Analytics): hash value for counting visits 24 hours, then only aggregated figures (section 3).
• Server log files: see section 3.

You have the following rights at any time:

Access

to the data we hold about you (Art. 15 GDPR)

Rectification

of inaccurate data (Art. 16 GDPR)

Erasure

of your data, unless we are legally required to keep it (Art. 17 GDPR)

Restriction

of processing (Art. 18 GDPR)

Data portability

in a common, machine-readable format (Art. 20 GDPR)

Objection

to processing based on legitimate interests (Art. 21 GDPR)

Withdrawal

of any consent you have given, with effect for the future (Art. 7(3) GDPR)

Complaint

to the Italian data protection authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it) or to the supervisory authority of the country where you live or work (Art. 77 GDPR)

To exercise your rights, simply send an informal message to testedbefore@pec.it or on WhatsApp.

Our website is transmitted in encrypted form via HTTPS (TLS). The forms send no data to us (section 5). Only we can use the internal admin area, after logging in.

We update this privacy policy when our website, our service providers or the legal situation change. The version published on this page applies.