Privacy & Cookie Policy

Last update: 15/11/2025

1. Data Controller

This website is managed by Leonardo Zampi, reachable at:
📧 Email: l.zampi@hotmail.com

2. Purpose of Processing

Your personal data is collected for the following purposes:

  • Managing orders and purchases through WooCommerce (contractual necessity).

  • Communicating with users (inquiries, customer support).

  • Collecting website traffic statistics via Google Analytics and monitoring site performance with Google Search Console (legitimate interest in improving the service).

  • Ensuring site security and proper technical functioning.

3. Categories of Data Collected

The website may collect the following types of data:

  • Identifying and contact information (name, surname, email, shipping and billing address, phone number) provided when placing an order or contacting us.

  • Payment data, processed directly by external providers (e.g. PayPal, Stripe, banks). This site does not store payment card details.

  • Browsing data and cookies (IP address, browser type, device info, pages visited, session duration) collected automatically for analytics and technical purposes.

4. Legal Basis for Processing

Processing is lawful on the basis of:

  • Contractual necessity (orders, purchases).

  • Legitimate interest (site improvement, fraud prevention, security).

  • Consent (where explicitly requested, e.g. marketing cookies).

5. Data Sharing

Personal data may be shared with:

  • Hosting provider (Altervista) for website operation.

  • WooCommerce and its extensions for e-commerce functions.

  • Google LLC (Google Analytics, Search Console) – data may be transferred outside the EU with appropriate safeguards.

  • Payment processors (e.g. PayPal, Stripe) to complete transactions.

6. Data Retention

  • Order and billing data: retained for 10 years (legal obligation).

  • Contact and communication data: retained as long as necessary to reply to your requests.

  • Analytics data: anonymized and stored for a maximum of 14 months.

7. User Rights

As a data subject, you may exercise your rights under Articles 15–22 GDPR:

  • Access, rectify, or erase your data.

  • Restrict or object to processing.

  • Data portability.

  • Withdraw consent at any time (where applicable).
    To exercise these rights, contact: [Your Email Address].

If you believe your rights have been violated, you can file a complaint with the Data Protection Authority of your country.

8. Cookies

This site uses cookies for technical, functional, and analytical purposes.

  • Technical cookies: necessary for site operation and order management.

  • Analytics cookies: set by Google Analytics, used to measure site traffic (with IP anonymization enabled).

  • Third-party cookies: may be set by external services (e.g. YouTube, social plugins).

You can manage or delete cookies through your browser settings.
For more details, visit: https://www.aboutcookies.org