Personal data

Privacy

How we handle personal data when you browse, participate in the project, or purchase.

Updated August 11, 2026

Controller and contact

I AM NOBODY is Andrea Magelli's editorial and art project. The controller for the website, shop, and activities described in this notice is Terra Futura SRL Benefit, established at Via Provinciale snc, 84068 Galdo, Pollica (SA), Italy (Registro Imprese di Salerno / C.F. / P. IVA 06199250652 · REA SA-504838). For privacy requests, contact andreamagelli@iamnobody.live.

This notice covers the I AM NOBODY website, shop, Join form, participatory question, gallery, and related communications. For purchases made through the shop, Terra Futura SRL Benefit also acts as the seller.

Data we process

When you place an order, we may process your name, email, delivery and billing address, country, phone number if provided, ordered products, amounts, order status, and information needed for support, delivery, returns, and refunds.

When you browse, limited technical data may be processed where necessary for the operation and security of the service, such as network and device information, language, session, cart, essential preferences, and security or abuse-prevention events.

If you use Join, we process your email address and evidence of your choice. If you answer the participatory question, we process the answer text, language, source page, and the choices you make; anonymous publication occurs only if you separately authorize it.

Full card details and card security codes are not stored by the I AM NOBODY website; information required for a transaction is processed in the payment environment used to complete the purchase.

Purposes and legal bases

We process data needed to manage the cart, order, payment, delivery, support, withdrawal, returns, and refunds where processing is necessary to perform a contract or take requested steps before entering into it.

We process information required for tax, accounting, administrative, or other statutory duties where this is necessary to comply with a legal obligation.

We rely on consent for Join and other optional communications where consent is required. The participatory answer and any authorization for anonymous publication are handled according to the choices shown in that form; where processing relies on consent, you can withdraw it at any time without affecting prior lawful processing.

We may process limited technical data for security, fraud and abuse prevention, service integrity, and the establishment or defence of legal rights on the basis of our legitimate interests, balanced against the rights and freedoms of the people concerned.

Recipients and transfers

Data may be shared, only as necessary, with providers supporting infrastructure and hosting, shop and payment operations, communications, technical support, delivery and logistics, as well as professional advisers or public authorities where required by law.

Where a provider processes personal data on our behalf, the processing is governed by the agreements and safeguards required by applicable law. We do not sell personal data.

Where processing involves a transfer of personal data outside the European Economic Area, the safeguards required by applicable law are used where necessary, such as adequacy decisions or standard contractual clauses together with any additional measures that may be appropriate.

Retention

Order data is kept for the time needed to perform the contract, provide support and statutory remedies, meet tax and accounting requirements, and protect the parties' rights for the periods required by law.

Join data is kept until consent is withdrawn or the service is discontinued, except for minimal information that may need to be retained to document a request or comply with law.

Participatory answers, related choices, and technical security data are retained only for periods compatible with their respective purposes, unless longer retention is necessary for a legal obligation or the protection of legal rights.

Your rights

Where provided by law, you may request access, correction, deletion, restriction, data portability, or object to processing. You may also withdraw a previous consent by contacting andreamagelli@iamnobody.live.

You have the right to lodge a complaint with the competent data protection authority. In Italy, the supervisory authority is the Garante per la protezione dei dati personali.

Requests are assessed under applicable law and may require information reasonably necessary to verify the identity of the person making the request.

Required data and automated decisions

Information marked as required for an order is needed to enter into or perform the contract; without it, the purchase or delivery may not be possible. Join, the participatory question, and related optional permissions are voluntary.

The website does not make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.

Information about privacy, purchases, delivery, returns, and support.