Privacy Policy
1. Data controller
The data controller is [NAME AND SURNAME], residing at [ADDRESS], contactable at lorenzaferazzoli@gmail.com.
2. Data processed and purposes
We process the data you provide when ordering: name, surname, email, phone, shipping address (or the InPost pickup point you choose) and, for payments, only the data strictly required by payment networks (card details never pass through our servers: payment happens on Stripe/PayPal).
Purposes and legal bases:
- Order fulfilment and performance of the contract (Art. 6.1.b GDPR): payment, production, shipping, support.
- Legal obligations (Art. 6.1.c GDPR): tax and accounting duties.
- Protection of rights (Art. 6.1.f GDPR): fraud prevention and dispute handling.
No marketing or profiling is performed.
3. Order tracking link
To let you follow your order without an account, we email you a personal link containing an unguessable random code. Anyone holding that link can see the status of that specific order: treat it like a password. The page displays only the minimum necessary data.
4. Recipients
Data may be shared with: payment providers (Stripe, PayPal), the carrier (InPost), the email service and hosting provider. Data is never disseminated.
5. Retention
Order data is kept for the period required by law (up to 10 years for fiscal documentation), then deleted.
6. Your rights
You may exercise at any time the rights under Art. 15-22 GDPR: access, rectification, erasure, restriction, objection, portability. Write to lorenzaferazzoli@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante, www.garanteprivacy.it).
7. Cookies
This website uses only technical cookies required for operation (cart, CSRF protection). See the Cookie Policy. No prior consent is required.