Privacy Policy

I. Identification Data

When you browse or shop on this website, we may collect personal data that can directly or indirectly identify you, including:

• Name
• Residential or shipping address
• Email address
• Phone number
• IP address
• Any other identification data voluntarily provided

This website does not collect sensitive data under Article 9 of the GDPR (racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data, etc.) unless explicitly consented to and required for specific information in exceptional circumstances.

II. Banking Details

During the purchase process, data related to the payment instrument used (e.g., credit card number or PayPal account details) is processed through secure payment gateways, limited to information necessary to manage the transaction.

This website does not directly store any sensitive payment data.

III. Browsing Data

The computer systems and software programs used to operate this website acquire some personal data during their normal operation, the transmission of which is inherent in the use of Internet communication protocols.

These data include:

• IP address
• Type of browser used
• URI of requested resources
• Time and method of request
• Server response status
• Parameters related to the user's IT environment

This data is processed in aggregated and anonymous form solely to obtain statistical information on website usage and ensure its proper functioning. However, in the event of computer crimes, this data may be used to determine liability.

IV. Data Voluntarily Provided by Users

If users voluntarily send information via contact forms or make purchases, the website collects the data provided to:

• Manage requests and orders
• Provide assistance
• Comply with legal and tax obligations

This data is provided entirely autonomously by the user, who assumes responsibility for any third-party data or copyrighted content inserted.

V. Data Collected via Cookies

This website uses technical and analytical cookies to improve the navigation experience and collect statistical data. For specific details, please refer to the Cookie Policy on this website, which also explains how to manage or disable cookies through browser settings.

I. Performance of Contract

The primary legal basis for processing is the execution of product purchase contracts on the website and related pre-contractual activities. This also includes fulfilling obligations arising from subscription terms and conditions, and pursuing the Data Controller's legitimate interest in ensuring service efficiency.

II. Consent of Interested Parties

Certain data processing is based on the user's free, explicit, informed, and unambiguous consent. Examples include:

• Voluntarily sending information via email or contact forms;
• Subscribing to newsletters;
• Using data for promotional purposes.

In these cases, consent can be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

III. Compliance with Legal Obligations

Processing may occur without consent when necessary to fulfill legal obligations (e.g., tax or accounting) or respond to judicial authority requests.

IV. Optionality of Data Provision

Except for:

• Data required for contract performance;
• Legal obligations;
• Technical and navigation cookies;

Providing personal data is optional. However, refusal to provide such data may result in the inability to provide requested services, such as processing orders or responding to requests.

Retention Period

Data will be stored:

• For the time necessary to provide requested services and perform administrative management of orders;
• Or until explicitly requested for cancellation by the relevant party;
• Subject to legal limits and fiscal/civil obligations.

Security and Authorization

The Data Controller adopts appropriate technical and organizational measures to safeguard data against:

• Accidental loss;
• Unauthorized access;
• Misuse or alteration of personal information.

Data can only be processed by authorized parties, including:

• Internal collaborators, employees, or consultants of the Data Controller (e.g., commercial, logistics, legal departments);
• External service providers (e.g., hosting providers, IT companies, payment and shipping service providers);
• Public entities within legal limits for regulatory compliance.

Data will not be disclosed or transferred to unspecified recipients.

Breaches and Notification

While advanced security measures are in place, no system is immune to cyber attacks. In the event of a data breach, users and competent authorities will be notified in accordance with Articles 33 and 34 of the GDPR.