[DA FORNIRE/VALIDARE] Draft privacy policy, to be completed and validated before the site goes live.
Who we are
Data controller: [DA FORNIRE] name, address, tax code / VAT number, contact email of the artist.
What data we collect and why
Enquiries. When you send an enquiry about an artwork we receive your name, email, phone number (optional) and message, only to answer you (legal basis: your request, art. 6.1.b GDPR). The form stores no data on the site: it is delivered by email.
Orders. When you buy an artwork or request a quote we process your name, addresses, email, phone and order details to sell, ship and invoice (legal basis: contract, art. 6.1.b; legal obligations, art. 6.1.c). Invoices and accounting records are kept for the time required by law [DA VALIDARE: 10 years in Italy].
Payments. Card payments are processed by Stripe; we never see or store card numbers. Bank transfers use the bank details shown at checkout.
No profiling, no advertising. The site uses no analytics, no advertising and no social media trackers.
Who receives the data
Hosting provider: [DA FORNIRE]. Email delivery: [DA FORNIRE]. Stripe Payments Europe Ltd. (card payments; data may be transferred to the USA under the EU Standard Contractual Clauses). Couriers, for shipping, only the delivery details. [DA VALIDARE: accountant, for invoicing.]
How long we keep it
Enquiries: as long as needed to answer and follow up [DA VALIDARE: e.g. 24 months]. Orders: as required by tax law. Cookie consent: 6 months.
Your rights
You can ask for access, correction, deletion, restriction, portability, and object to processing, by writing to [DA FORNIRE: email]. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Cookies
See the Cookie Policy.