Privacy Policy

1. Data controller

The data controller for personal data is LO PRESTI DAVIDE (sole proprietorship), VAT no. 14759130967, registered office at Via Adeodato Ressi 7/A, 20125 Milan (MI), Italy, certified email davide.lo.presti@pec.it, who can be contacted at the email address info@chiacchierino.com.

2. Data we collect

We collect the following personal data depending on how you interact with the site:

Data you provide voluntarily: name, email address, message (through the contact form); email address (through newsletter sign-up); name, shipping address, payment data (through a purchase).

Data collected automatically: IP address, browser type, operating system, pages visited, date and time of access. This data is collected through server logs and technical cookies.

3. Purposes of the processing

Personal data is processed for the following purposes: fulfilling orders and managing shipments; replying to contact requests; sending the newsletter (subject to explicit consent); tax and accounting obligations; improving the service and the browsing experience; fraud prevention.

4. Legal basis

The processing of data is based on: performance of a contract (for purchases); consent of the data subject (for the newsletter and the contact form); legal obligation (for tax obligations); legitimate interest of the controller (for site security and fraud prevention).

5. Recipients of the data

Data may be shared with the following third parties, all appointed as data processors: Stripe (payment processing, based in the USA, EU-U.S. Data Privacy Framework / standard contractual clauses); Resend (Plus Five Five, Inc.) (sending of transactional emails and of the newsletter, based in the USA, EU-U.S. Data Privacy Framework / standard contractual clauses); Supabase (database and image storage of the site: orders, shipping addresses, messages from the contact form; project hosted in the European Union, Frankfurt, Germany); Vercel (website hosting, based in the USA, EU-U.S. Data Privacy Framework / standard contractual clauses). Data is neither sold nor transferred to third parties for marketing purposes.

6. Data transfers outside the EU

Some of our service providers are based outside the European Union. For the US-based providers (Stripe, Vercel, Resend), transfers rely on the adequacy decision adopted by the European Commission on 10 July 2023 on the EU-U.S. Data Privacy Framework and, in the alternative, on the standard contractual clauses (SCCs) approved by the European Commission in accordance with Article 46 of the GDPR. The Privacy Shield is no longer a valid reference: it was invalidated by the Court of Justice of the European Union on 16 July 2020 (Schrems II judgment). The site's database is hosted within the European Union (Frankfurt, Germany).

7. Data retention

Data relating to purchases is retained for 10 years as required by Italian tax law. Newsletter data is retained until consent is withdrawn (unsubscribe). Contact form data is retained for a maximum of 12 months from the request.

8. Rights of the data subject

Under Articles 15-22 of the GDPR, you have the right to: access your personal data; rectify inaccurate data; request erasure of your data; restrict the processing; object to the processing; request data portability; withdraw your consent at any time. To exercise these rights, write to info@chiacchierino.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it).

9. Cookies

The site uses technical cookies that are necessary for it to work. For further details, please read our Cookie Policy.

10. Changes to the privacy policy

We reserve the right to update this notice. The date of the last update is shown at the top of the page. Any substantial changes will be communicated through the site.