Legal notice

Our privacy policy meets all legal requirements and contains all the information required by Italian privacy laws and European regulations (e.g. the Privacy Code and the GDPR):

  • Types of personal data collected: you can choose between data voluntarily provided by the user (contact details, information, content, sensitive data, data collected from social media, etc.) and data automatically collected (usage data, geolocation data, data collected through cookies, etc.).
  • Purpose of processing: the purposes for which personal data are collected must be listed (e.g. marketing purposes, user profiling, payment management, etc.).
  • Methods of processing: the electronic or manual tools used for data collection must be specified, as well as how the data are organized and the security measures adopted to prevent unauthorized access, disclosure, alteration, or destruction of the data.
  • Data recipients: the names of third-party recipients or the economic or commercial categories to which they belong must be indicated (e.g. marketing consultants, shipping companies, etc.).
  • Legal basis for processing: the legal grounds on which the processing is based must be specified (consent, legal obligation, contractual obligation, etc.).
  • Location: where the data are stored and whether they are transferred to a non-EU country.
  • Automated decision-making processes: whether any decisions are made through technological means without human involvement, producing legal effects or other similarly significant effects concerning the individual.
  • Data retention period: how long the user’s personal data are stored.
  • User rights: the law expressly requires including a list of the rights users can exercise (requesting data removal, deletion, anonymization, blocking of data, etc.).
  • Identification data of the data controller and/or data protection officer (DPO): all details necessary to identify and contact the person who determines the purposes and means of personal data processing must be provided. If appointed, the data protection officer must also be indicated.