1. Data controller
The data controller is Dal Campo S.r.l., registered office at [INSERT ADDRESS], VAT no. [INSERT VAT], email: privacy@dalcampo.me.
2. Data collected and purposes
We collect and process the following personal data:
- Contact and order data (name, delivery address, email, phone): required to process and deliver orders. Legal basis: contract performance (Art. 6(1)(b) GDPR).
- Email for marketing communications (newsletter): only with your explicit consent. Legal basis: consent (Art. 6(1)(a) GDPR).
- Usage data (IP address, pages visited): collected automatically for technical purposes. Legal basis: legitimate interest / consent.
3. Retention
Order-related data is retained for 10 years to comply with tax obligations. Marketing data is retained until consent is withdrawn.
4. Sharing with third parties
Your data may be shared with:
- Shopify Inc. — e-commerce platform and payment processing.
- Couriers and delivery services — limited to data necessary for delivery.
- Accountants and tax advisors — for accounting and tax compliance.
We do not sell or transfer your data to third parties for their own commercial purposes.
5. Your rights
Under Arts. 15–22 GDPR you have the right to access, rectify, erase, restrict processing, object to processing, and obtain portability of your data. To exercise your rights write to privacy@dalcampo.me. You also have the right to lodge a complaint with a supervisory authority.
6. Security
We apply appropriate technical and organisational measures to protect your data. Payments are handled entirely by Shopify Payments over encrypted connections. We do not store credit card data.
7. Changes to this policy
We reserve the right to update this policy at any time. The date of the last update is shown at the top of the page.