Privacy Policy

This notice describes how the personal data of users who browse this website and use the online shop is processed, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data controller

Il Salone delle Meraviglie di ALI, with registered office at Via Carlo Alberto dalla Chiesa 26/B, 00071 Torvaianica (RM) — P.IVA 00000000000. Contact details: tel. 06 91530052, email info@salonemeraviglie.it.

2. Data processed and purposes

a) Account data

Name, email address and password (stored exclusively in encrypted form using a hashing algorithm) provided on registration. Purpose: creating and managing your personal area. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

b) Purchase data

Billing and delivery details (name, address, phone number) and order history. Purpose: fulfilling orders and meeting tax and accounting obligations. Legal basis: performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR). Payments are handled by Stripe Payments Europe Ltd.: card details never pass through or are stored on our systems.

c) Contact form

Name, email, optional phone number and the content of the message. Purpose: responding to enquiries. Legal basis: pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).

3. Retention

• Account data: until the account is deleted on request.
• Order data: 10 years, to meet civil and tax obligations.
• Contact form messages: up to 24 months.

4. Recipients

Data may be shared with suppliers providing ancillary services (hosting, payment via Stripe, transactional email delivery, couriers for delivery), appointed as data processors under Art. 28 GDPR. Data is never disclosed to the public or sold to third parties.

5. Transfers outside the EU

Some suppliers may process data in third countries; in that case the transfer takes place on the basis of adequacy decisions or standard contractual clauses approved by the European Commission.

6. Rights of the data subject

Under Articles 15–22 GDPR you may exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to the Controller at the contact details above. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

7. Nature of the provision of data

Providing the data marked as mandatory is necessary to deliver the requested service; failure to provide it makes registration, purchases or responding to enquiries impossible.

Template document awaiting legal review. Before going live, complete the VAT number and the controller’s email and verify the list of data processors.