1. Data Controller

Pursuant to Article 4(7) of Regulation (EU) 2016/679 (“GDPR”), the Data Controller is:

PiùCheLettere
Email: info@piuchelettere.com

2. Categories of Personal Data Processed

The Data Controller processes the following categories of personal data in order to provide its services:

• Identification and contact data: first name, last name, shipping address, email address, telephone number.

• Payment data: data necessary to process payments (e.g. credit card details), processed exclusively by secure third-party payment service providers; the Data Controller does not store full payment details.

• Browsing and usage data: IP address, browser type, operating system, cookies, and similar tracking technologies.

3. Purposes of Processing

Personal data is processed for the following purposes:

• Performance and management of purchase orders.

• Delivery of purchased products.

• Invoicing and payment management.

• Customer support and communications.

• Compliance with legal and tax obligations.

• Statistical analysis and service improvement based on aggregated or anonymized data.

• Marketing and promotional activities, subject to the data subject’s prior explicit consent.

4. Legal Basis for Processing

The processing of personal data is carried out in accordance with Article 6 of the GDPR and is based on the following legal grounds:

• Performance of a contract to which the data subject is a party (Article 6(1)(b)).

• Compliance with a legal obligation (Article 6(1)(c)).

• Legitimate interests of the Data Controller related to security, fraud prevention, and service improvement (Article 6(1)(f)).

• Consent of the data subject for marketing and profiling activities (Article 6(1)(a)).

5. Recipients of Personal Data

Personal data may be disclosed to the following categories of recipients, acting as data processors or independent controllers:

• Shipping and logistics service providers.

• Payment service providers.

• Marketing and analytics service providers, subject to user consent.

• Public authorities, where required by law.

All recipients process data in compliance with GDPR and, where applicable, under data processing agreements pursuant to Article 28 GDPR.

6. Data Retention

Personal data is retained only for the period necessary to achieve the purposes for which it was collected and in accordance with applicable legal retention obligations. Marketing data is retained until consent is withdrawn.

7. Rights of the Data Subject

Pursuant to Articles 15–22 of the GDPR, data subjects have the right to:

• Obtain confirmation as to whether personal data concerning them is being processed.

• Access, rectify, or erase their personal data (“right to be forgotten”).

• Restrict or object to processing, in whole or in part.

• Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

• Receive their personal data in a structured, commonly used, and machine-readable format and request data portability.

• Lodge a complaint with the competent supervisory authority.

Requests to exercise these rights may be sent to: info@piuchelettere.com

8. Cookies and Tracking Technologies

This website uses cookies and similar technologies in accordance with applicable legislation and, where required, with the user’s consent.

Cookies are small text files stored on the user’s device and are used to ensure proper website functionality, analyze traffic, and improve user experience.

The website uses the following categories of cookies:

• Strictly necessary cookies: required for the operation of the website and the provision of requested services (e.g. shopping cart, authentication).

• Analytics cookies: used to collect aggregated and anonymized information on website usage.

• Profiling and marketing cookies: used to deliver personalized advertising and content; these cookies are installed only with explicit consent.

• Third-party cookies: installed by external providers such as analytics, advertising, and social media platforms.

Users may manage or revoke their cookie preferences at any time through browser settings or the cookie management tool. Disabling strictly necessary cookies may affect website functionality.

9. Changes to This Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time. Any changes will be published on this website and, where appropriate, notified to users.

For further information or clarification, please contact: info@piuchelettere.com