Privacy Policy - Spazio Legna SRL

📄 Privacy Policy – SPAZIO LEGNA S.R.L.

(Information pursuant to EU Regulation 679/2016 – GDPR)

1. Data Controller

The Data Controller for personal data processing is:

SPAZIO LEGNA S.R.L.
Registered Office: VIA VILLAMAGNA 4, 03010 SGURGOLA (FR), Italy
VAT / Tax Code: 02382190607
Phone: +39 350 155 6189
Email: info@spaziolegnasrl.com
Website: spaziolegnasrl.com

2. Types of data collected

The website may collect the following categories of personal data:

a) Data voluntarily provided by the user

First and last name
Email address
Phone number
Shipping/billing address
Data necessary for completing online purchases
Information sent through contact form

b) Automatically collected data

IP address
Technical data about device and browser
Technical cookies and, if accepted, analytics/marketing cookies
Anonymous browsing data

c) Payment-related data

Managed exclusively by external providers (e.g., Stripe, PayPal, banking institutions).
The website does not store credit card numbers or sensitive data.

3. Purpose of processing

Personal data is processed for the following purposes:

Execution of sales contract (orders, billing, delivery).
Response to information requests through forms or email.
Customer account management (if applicable).
Sending service communications related to orders or shipments.
Accounting, tax and legal obligations.
Website improvement, security and technical monitoring.
Marketing, newsletters or commercial offers (only with explicit consent).

4. Legal basis for processing

Performance of a contract or pre-contractual measures (art. 6.1.b GDPR).
Legal obligations (art. 6.1.c GDPR).
Legitimate interest of the Controller for security and website improvement (art. 6.1.f).
User consent for marketing activities and cookies (art. 6.1.a).

5. Processing methods

Data is processed through IT tools and technical measures suitable to prevent:

loss
unauthorized access
disclosure
unlawful processing

No automated profiling is performed beyond analytical services possibly active through cookies.

6. Data retention

Data related to orders and invoices: 10 years (legal obligation).
Newsletter data: until consent withdrawal.
Contact form data: maximum 24 months.
Cookies: according to the duration indicated in the Cookie Policy.

7. Data sharing

Data may be shared with:

Couriers and shipping services
Accounting/tax consultants
Payment providers
IT, hosting or maintenance service providers
Public entities in compliance with legal obligations

Data is not sold or transferred to third parties for commercial purposes.

8. Transfer outside the European Union

Some services (e.g., hosting, statistical analysis, email) may involve transfers to non-EU countries.
In such cases, adequate safeguards are adopted such as Standard Contractual Clauses or GDPR-compliant providers.

9. Data subject rights (arts. 15-22 GDPR)

Users may exercise the following rights at any time:

Access to personal data
Rectification
Erasure (right to be forgotten)
Restriction of processing
Data portability
Objection to processing
Withdrawal of consent
Complaint to the Privacy Authority (www.garanteprivacy.it)

Requests may be sent to: info@spaziolegnasrl.com

10. Cookies

The website uses technical cookies and, with authorization, analytics or marketing cookies.
For more information, please consult the dedicated Cookie Policy.

11. Changes to this privacy notice

The Controller may update this privacy notice at any time.
The updated version will always be available on this page.