Privacy policy

PRIVACY INFORMATION (PRIVACY POLICY)

Last updated: July 2026

This Privacy Policy aims to describe how this website manages the processing of personal data of users/visitors who consult it and use its e-commerce and newsletter services. The processing is carried out in compliance with EU Regulation 2016/679 (GDPR) and current Italian legislation.

1. DATA CONTROLLER AND FISCAL DETAILS

The Data Controller for personal data is:

Data Controller: Federica Italiano

VAT Number 13465931007

Tax Code TLNFRC85P54C342P

Registered Office: Via Genè 8, 10152 Turin (TO), Italy

Contact Email straziostudio@gmail.com

Tax Note: Operations carried out under Article 1, paragraphs 54 to 89, of Italian Law no. 190/2014 and subsequent amendments (Flat-rate tax regime/Regime forfettario, without application of VAT and without application of withholding tax).

2. TYPES OF DATA COLLECTED AND PURPOSES OF PROCESSING

Personal data is collected and processed for the following purposes:

• A) Order Fulfillment and Shop Management (Contractual Data): We collect First Name, Last Name, Shipping Address, Billing Address, Email Address, and Phone Number. This data is mandatory; refusal to provide it makes it impossible to receive and process your purchase order.

• B) Legal and Tax Obligations: Billing data is processed to comply with administrative, accounting, and tax obligations required by Italian law.
• C) Payment Data (Encrypted): Sensitive credit card or PayPal account data does not pass through and is not stored on this website's servers. It is handled in a secure and encrypted manner directly by authorized external payment gateways (PayPal and WooPayments/Stripe).
• D) Newsletter Subscription (Marketing): Subject to your explicit consent (by entering your email in the dedicated form), we will process your email address to send informative communications, updates, and exclusive promotions related to the shop.
• E) Anti-Fraud Protection (Google reCAPTCHA): This website uses the Google reCAPTCHA service to protect payment and contact forms from automated bot and card-testing attacks. The operation of this service involves the analysis of the user's browsing behavior by Google LLC.
• F) Analisi del traffico e registrazioni di sessione (Microsoft Clarity): Previo tuo esplicito consenso fornito tramite il banner dei cookie, utilizziamo Microsoft Clarity per analizzare in forma anonima le modalità di interazione degli utenti con le pagine del sito (tramite mappe di calore, registrazioni anonime delle sessioni e metriche comportamentali) al solo fine di migliorare l’usabilità e la funzionalità del negozio online. I dati raccolti non consentono l’identificazione diretta dell’utente.
  

3. LEGAL BASIS FOR PROCESSING

The Data Controller processes your personal data only when one of the following legal bases exists:

• Performance of a contract (Art. 6.1.b GDPR): for the purpose of fulfilling orders (Point A).

• Compliance with a legal obligation (Art. 6.1.c GDPR): for maintaining accounting and tax records (Point B).

• Consent of the data subject (Art. 6.1.a GDPR): for subscribing to the Newsletter (Point D).

• Legitimate interest (Art. 6.1.f GDPR): for website security and fraud prevention via anti-bot systems (Point E).
• Consenso dell’interessato (Art. 6.1.a GDPR): per la raccolta dei dati analitici e di navigazione tramite Microsoft Clarity (Punto F).

4. DATA RECIPIENTS (THIRD PARTIES)

The collected data will never be sold or shared with third parties for marketing purposes. However, for the proper functioning of the shop, data may be communicated to external providers appointed as Data Processors, such as:

• Web hosting and infrastructure service companies (Aruba S.p.A.).
• Payment processing platforms (PayPal Inc. and Stripe/WooPayments).
• Shipping and logistics services (Express couriers and Poste Italiane for package delivery).
  
• Tax consultants or accountants for bookkeeping management.
  
• Technology service providers and email management platforms (Google LLC).
• Fornitori di servizi di analisi comportamentale e mappe di calore (Microsoft Corporation per il servizio Microsoft Clarity).
  

5. DATA RETENTION PERIOD

Your data will be kept only for the time strictly necessary to achieve the purposes indicated above:

• Data related to orders and billing is legally required to be kept for 10 years, in accordance with fiscal and civil obligations under Italian law.
• Newsletter data is kept until you decide to withdraw your consent (unsubscribe).

6. USER RIGHTS (DATA SUBJECT RIGHTS)

In accordance with Articles 15-22 of the GDPR, you have the right at any time to:

1. Request confirmation of whether or not your personal data exists.
   
2. Know its origin, the purposes of processing, and the methods used.
   
3. Request the update, rectification, or integration of data.
   
4. Request the total erasure (Right to be forgotten), transformation into anonymous form, or blocking of data processed in violation of the law.
5. Withdraw your consent to the newsletter at any time by clicking the "Unsubscribe" link at the bottom of any email.

To exercise these rights, simply send a communication via email to: straziostudio@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali - www.garanteprivacy.it).