Last updated: 19 October 2026

Information pursuant to article 13 of Regulation (EU) 2016/679 of 27th April 2016 - General data protection regulation

Ovolab s.r.l. informs that the personal data collected through the website www.anobii.com (the “Website”) and the Anobii applications for iOS and Android devices (the “Apps”; the Website and the Apps are jointly referred to as the “Service”) will be processed in accordance with data protection law, including Regulation (EU) 2016/679 of April 27th, 2016 (hereinafter, “GDPR”) and Italian Legislative Decree 196/2003 (the “Italian Privacy Code”), and for the purposes and in the manner outlined in this privacy policy (the “Privacy Policy”).

This Privacy Policy applies only to the Service and not to any other websites or services that may be accessed by the user through links or banners contained in the Service.

1. Controller

The data controller is Ovolab s.r.l., with registered office at Corso Re Umberto 10, Torino, Italy, tax code and VAT registration no. IT08539440019 (“Ovolab”), which may be contacted:
• by e-mail at the address: [email protected];
• by post at the address: Ovolab s.r.l., Corso Re Umberto 10, 10121 Torino, Italy.

2. Data processed, purposes and legal basis

Ovolab will process data for the following purposes:

• Data collected through subscription to the Service

When you subscribe to the Service, through the Website or the Apps, you will be asked to provide your name and email address. These data will be processed to create and manage your account and to allow you to use the Service. The legal basis for data processing is the fulfilment of contractual obligations.

The communication of data is not binding, but if you do not provide a valid email address you will be unable to subscribe to the Service.

Alternatively, you may subscribe and log in with your Facebook account. In that case Ovolab will receive from Meta Platforms Ireland Limited the data you have authorised it to share, such as name, email address, profile picture and Facebook identifier, which will be processed for the same purposes and on the same legal basis.

• Data collected through the use of the Service

When you use the Service, Ovolab may collect data related to the books added to your library, to your preferences and to the contents you publish. Ovolab may also collect data provided by the user when filling in his/her profile or publishing further personal information on the Service.

Such data will be processed for the purpose of fulfilling contractual obligations. They may also be processed, on the basis of your consent, for the profiling of the user’s reading preferences, as well as for sending targeted marketing communications.

• Service communications

Your email address will be used to send you communications strictly related to the operation of the Service, such as confirmation of your subscription, password recovery, security alerts and notice of changes to the Terms of Use or to this Privacy Policy. The legal basis for data processing is the fulfilment of contractual obligations and, where applicable, compliance with legal obligations. These communications have no promotional content.

• Promotional email communications

Your email address may be also used, solely on the basis of your consent, for direct marketing purposes, i.e. to send you updates on new products, on software updates, on special offers and other information that you explicitly requested or that Ovolab considers of interest to you, or to invite you to take part to possible surveys.

On the basis of a separate consent, your email address may also be used for purposes of indirect marketing, i.e. to send you communications regarding third party products and services. Such communications are sent by Ovolab and your email address is not disclosed to the third parties.

Consents are requested at subscription or later, through unticked checkboxes that are separate from the acceptance of the Terms of Use. Giving them is optional and refusing them does not affect your use of the Service in any way. Ovolab records your choices, the date on which you made them and the version of the Privacy Policy in force at that time, in order to be able to demonstrate them.

You may withdraw your consent at any time, as easily as you gave it: through the unsubscribe link included in every promotional email, from your profile settings on the Website or in the Apps, or by writing to [email protected].

• Email open measurement

Emails sent by Ovolab may contain a very small image (a so-called “tracking pixel”) which, when the email is opened and images are displayed, reports this event to the servers of the email delivery provider. Ovolab uses this information solely to calculate aggregate and anonymous statistics on the overall open rate of each mailing, for example to understand how many recipients opened a given newsletter.

Ovolab does not use pixels to find out whether a specific recipient opened an email, nor to profile users or to adapt mailings to their individual behaviour. The request generated by the pixel does not contain the recipient’s email address.

In accordance with the Italian Data Protection Authority’s decision no. 284 of 17 April 2026 on the use of tracking pixels in emails, this processing does not require your consent and is based on Ovolab’s legitimate interest in measuring the overall effectiveness of its communications. You can in any case prevent this information from being transmitted by turning off automatic image loading in your email client. Should Ovolab in the future wish to measure email opens on an individual basis, it will do so only after informing you and obtaining your specific consent.

• Subscriptions

The Service offers paid subscriptions (for example the "No ads" subscription), which can be purchased on the Website or in the Apps and are linked to your Anobii account, so that they apply on all devices where you log in with the same account.

For purchases on the Website, payment takes place on the payment page of the RevenueCat Web Billing service, which relies on the payment service provider Stripe to process the data necessary for payment (for example card or payment method details, email address and country). Ovolab does not receive or store your full card or payment method details. Stripe processes such data on behalf of Ovolab and, for certain purposes such as fraud prevention and compliance with its legal obligations, as an independent controller, under its own privacy policy.

For purchases in the Apps, payment is handled by the Apple App Store or Google Play as independent controllers, under their respective privacy policies. Ovolab does not receive or process your payment details.

In order to verify and manage the status of your subscriptions, Ovolab processes, also through its provider RevenueCat, your Anobii account identifier, the purchase data transmitted by Stripe or by the store (for example the product purchased, price, transaction identifier, start, renewal and expiry dates, country) and the status of each subscription. The legal basis for data processing is the fulfilment of contractual obligations and, for data relating to purchases made on the Website, compliance with accounting and tax obligations.

• Push notifications

If you allow it in your device settings, the Apps may send you push notifications related to the Service. To this end a device identifier (token) is generated and processed through Google’s Firebase Cloud Messaging service. You can turn off notifications at any time from your device settings. The legal basis for data processing is your consent, given through the operating system permission.

• Camera

The Apps may use your device’s camera, only with your permission and only when you start the scanning feature, to read a book’s barcode and add it to your library. Camera images are processed on the device for the sole purpose of reading the code and are neither stored nor transmitted to Ovolab. You can revoke the permission at any time from your device settings.

• Advertising in the Apps

The Apps display advertisements through the Google AdMob service (Google Mobile Ads). Personalised ads, based on your interests and on your device’s advertising identifier, are shown only with your consent, which is collected when you first launch the Apps through Google’s consent form (User Messaging Platform) and, on iOS devices, through the tracking authorisation request provided by the operating system. Without consent, non-personalised ads may be shown. You can change your choices at any time from the Apps or device settings. Users with an active subscription that includes the removal of advertising do not see advertising, either in the Apps or on the Website. Further details are given in the cookie policy.

• Usage statistics, crash reporting and App performance

On the basis of your consent, the Apps collect through Google Analytics for Firebase data on the use of the Apps (for example screens viewed, features used, session duration, device model and operating system version) in order to produce statistics and improve the Service.

The Apps also use Firebase Crashlytics and Firebase Performance Monitoring to collect, in case of crashes or malfunctions, technical information about the device, the App version and the error, as well as data on the App’s performance (for example start-up times and network request response times). The legal basis for this processing is Ovolab’s legitimate interest in ensuring the security, stability and proper functioning of the Service.

• Navigation and technical data

Computer systems and software procedures used for the Service's functioning acquire, during their normal operation, some personal data the transmission of which is inherent to the use of Internet communication protocols. This information is not collected for being associated to identified data subjects, but - due to its characteristics - can, by means of processing and integration with data held by third parties, allow users to be identified.

This category includes the IP addresses, the browser or device used, the operating system, the App version, the domain names or websites from which the users have connected, information on the pages visited and the requests made by users within the Service, the time of the request, the duration of the visit to each page, the internal path followed and other parameters concerning the user's operating system and computer environment.

These technical/IT data are collected and used in aggregate and non-identifiable form and may be used to ascertain responsibility in the case of computer crimes to the detriment of the Service. In any other case, the data are stored for a period no longer than seven days.

• Cookies and similar technologies

The Website uses cookies and the Apps use similar technologies (device identifiers and SDKs). The related processing is described in the cookie policy.

3. Recipients

Your personal data may be transferred to IT consultants and server managers, as well as to the providers of the services used to operate the Service, who will process them, as data processors pursuant to art. 28 GDPR, on the basis of agreements executed with Ovolab. In particular:
• Google Ireland Limited and Google LLC, for the Firebase services (Analytics, Crashlytics, Performance Monitoring, Cloud Messaging) and for advertising in the Apps (AdMob), as described in the cookie policy;
• RevenueCat, Inc., for subscription management and Website payments (RevenueCat Web Billing);
• Stripe Payments Europe, Limited, for payment processing on the Website;
• the email delivery provider.

Meta Platforms Ireland Limited, for Facebook login, Stripe, for the purposes described in section 2, Apple Inc. and Google LLC, as store operators, and Google, for personalised ads, also process data as independent controllers, under their respective privacy policies.

An up-to-date list of data processors can be requested at [email protected].

The data relating to your preferences may only be transferred to third parties in an anonymous and aggregated form.

The username and the data provided by the user when filling in his/her profile or publishing further personal information on the Service will be accessible to all users of the Service.

4. Transfer of data outside the European Union

Some of the providers listed in section 3 (in particular Google LLC, Meta Platforms, Inc., RevenueCat, Inc. and Stripe, Inc.) are based in the United States or may process data outside the European Union. In such cases all necessary measures will be adopted and the transfer will be based on adequacy decisions of the European Commission, including the adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework for providers certified under it, or on standard contractual clauses approved by the European Commission, pursuant to art. 45 and 46 GDPR.

5. Storage period

Your account data will be stored until you delete your account. Unless you specifically so request, deleting your account does not entail cancellation of the contents you published and the preferences you expressed, which will be stored in an anonymous form. Once you have deleted your account, the removal of the contents you have published can be requested by writing to [email protected].

Data processed for marketing and profiling purposes will be stored until you withdraw your consent or delete your account, whichever occurs first. Records of consents and withdrawals will be kept for as long as necessary to demonstrate your choices.

Subscription data will be stored for the duration of each subscription and, afterwards, for as long as necessary to handle any disputes. Data relating to purchases made on the Website that are required for accounting and tax purposes will be stored for 10 years, as required by law.

Data collected through Google Analytics for Firebase will be stored for no longer than 14 months; crash data collected through Firebase Crashlytics for no longer than 90 days.

Your data will be cancelled in case the Service’s functions are interrupted or suspended for over 1 year.

6. Data subject’s rights

You have the right to request from Ovolab:
• access to, rectification, erasure of personal data or restriction of processing, or to object to the processing, pursuant to art. 15-18 and 21 GDPR;
• data portability, pursuant to art. 20 GDPR;

and to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You may also object at any time to the processing of your data for marketing purposes.

You may delete your account at any time from your profile settings on the Website or in the Apps.

You may exercise the above rights by contacting Ovolab at the address: [email protected]. You may also file a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

7. Changes to this Privacy Policy

Ovolab may amend this Privacy Policy, indicating the date of the last update at the top of the document. In case of material changes, Registered Users will be informed by email or through the Apps.