Privacy Policy

1. Data controller

The data controller responsible for processing your personal data is:

• Company: C. SRL
• VAT: 01638803377
• Address: Zona Industriale Sud, Via Torri 9, 31045 Treviso (TV), Italy
• Email: [email protected]
• Phone: +39 0822 810912

2. Information we collect

We collect personal information when you interact with our website or services. This may include:

• Identity data: name, surname.
• Contact details: email address, phone number, delivery address.
• Order information: purchased products, payment status, delivery status, order notes.
• Billing data: billing address, VAT number when applicable.
• Technical data: IP address, browser type, device identifiers, session information.
• Usage data: pages visited, actions taken, time spent on the site.
• Marketing data: preferences, opt-in status, interaction with emails or ads.

We do not intentionally collect sensitive personal data unless required for legal or contractual obligations.

3. How we use your data

Your personal data is used for the following purposes:

• Processing and delivering your order.
• Providing customer service and responding to support requests.
• Managing payments, refunds and fraud prevention.
• Shipping goods and providing tracking information.
• Sending transactional notifications (order confirmation, shipping updates).
• Improving website functionality, performance and security.
• Personalizing the shopping experience and product recommendations.
• Managing marketing subscriptions and sending promotional content when legally allowed.
• Complying with legal and regulatory obligations.

4. Legal basis for processing

We process your personal data based on one or more of the following legal grounds:

• Contract performance: to process your order and deliver your purchase.
• Legitimate interests: preventing fraud, improving services, securing transactions.
• Consent: when you subscribe to marketing communications.
• Legal obligations: accounting, tax, regulatory compliance.

5. How your data is stored and protected

We implement physical, technical and organizational safeguards to ensure that your personal data is stored securely and protected from unauthorized access, loss or alteration.

Payment information is processed using encrypted and PCI-compliant payment gateways. We do not store your credit card details on our servers.

6. Sharing your information

We share your information only with trusted partners when necessary to operate our services:

• Shipping and logistics providers for delivery of goods.
• Payment processors for handling payments and refunds.
• Customer service and communication tools.
• IT providers supporting website hosting, security and maintenance.
• Marketing and analytics partners, when legally allowed and respecting your preferences.

We do not sell, rent or trade your personal information to third parties.

7. International data transfers

Your information may be processed outside the European Economic Area (EEA) when required to deliver services. In such cases, we ensure that transfers comply with GDPR standards using:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Approved contractual and technical safeguards

8. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy. Retention periods depend on the type of data:

• Order and billing data: minimum 10 years (legal obligation).
• Customer support messages: up to 24 months.
• Marketing data: until you withdraw consent.
• Cookies: according to the Cookies Policy.

9. Your rights under GDPR

You have the right to:

• Access your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion (“right to be forgotten”).
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Withdraw consent for marketing communications at any time.
• Request data portability.

To exercise these rights, contact us at [email protected].

10. Marketing communications

We send promotional messages only if you have given explicit consent or if permitted by local laws. You may unsubscribe at any time using the link provided in the emails or by contacting us.

11. Children’s privacy

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us to request deletion.

12. Changes to this Privacy Policy

We may update this Privacy Policy to reflect new legal requirements or changes to our services. The latest version will always be published on this page.