Privacy Policy

1. Data Controller

The Data Controller for the processing of your personal data is:

Vega di Vannacci Emanuele
Salita Sant Antonio 25, 16137 Genova (GE), Italy
Email: [email protected]
Phone: +1 (504) 369-9574
PEC: [email protected]
P.IVA: 03073780995

This Privacy Policy is issued in accordance with the EU General Data Protection Regulation (GDPR - Regulation EU 2016/679) and the Italian Privacy Code (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018).

2. Data We Collect

We may collect and process the following categories of personal data:

Identity Data: First name, last name, title.

Contact Data: Email address, telephone number, billing and delivery addresses.

Transaction Data: Details of products purchased, order history, payment information (processed securely by our payment provider — we do not store full card details).

Technical Data: IP address, browser type and version, operating system, device information, time zone, and browsing patterns on our Website.

Communication Data: Records of correspondence with us, including emails, contact form submissions, and customer service interactions.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

Contract Performance (Art. 6(1)(b)): Processing necessary to fulfil your orders, manage your account, and provide customer support.

Legal Obligation (Art. 6(1)(c)): Processing required to comply with tax, accounting, and other legal obligations under Italian and EU law.

Legitimate Interest (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and website analytics, provided these interests do not override your fundamental rights.

Consent (Art. 6(1)(a)): Where you have given explicit consent, such as for marketing communications. You may withdraw consent at any time.

4. How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling your orders, including delivery and payment processing
• Communicating with you about your orders, inquiries, and customer service matters
• Complying with legal and regulatory obligations (e.g., tax reporting, invoicing)
• Improving our Website, products, and services through analytics
• Sending marketing communications (only with your explicit consent)
• Preventing fraud and ensuring the security of our Website

5. Data Sharing

We may share your personal data with the following categories of recipients:

Service Providers: Payment processors, shipping companies, IT service providers, and analytics platforms that assist us in operating our business. These providers are contractually bound to process data only on our behalf and in accordance with GDPR requirements.

Legal Authorities: Where required by law, regulation, or legal process, we may disclose data to Italian or EU authorities.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

6. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If any data transfer outside the EEA is necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Transaction data: 10 years from the date of the transaction (as required by Italian tax law)
• Account data: Until you request deletion of your account
• Marketing data: Until you withdraw your consent
• Technical/analytics data: 26 months from collection

8. Your Rights under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15): You may request a copy of the personal data we hold about you.

Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete data.

Right to Erasure (Art. 17): You may request deletion of your data, subject to legal retention requirements.

Right to Restriction (Art. 18): You may request that we restrict the processing of your data in certain circumstances.

Right to Data Portability (Art. 20): You may request to receive your data in a structured, commonly used format.

Right to Object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days as required by the GDPR.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

9. Cookies

Our Website uses cookies and similar technologies to enhance your browsing experience. Essential cookies are necessary for the Website to function properly. Analytics cookies help us understand how visitors use our Website. We will request your consent before placing non-essential cookies, in accordance with the EU ePrivacy Directive and Italian Cookie Law (Provvedimento del Garante dell'8 maggio 2014).

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Significant changes will be communicated via email or a prominent notice on our Website.

12. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: [email protected]
Phone: +1 (504) 369-9574
PEC: [email protected]
Address: Salita Sant Antonio 25, 16137 Genova (GE), Italy