Privacy

1. Data controller

Seller: Mirella Melia · Via Pio X n. 12, 89851 Ionadi (VV), Italy · VAT no. IT03970810796 · Tax ID MLEMLL70R65F537R · Certified email mirella.melia@pec.it · SDI recipient code USAL8PV · miremelia@gmail.com · +39 339 651 7392. Business Register and REA details to be added if applicable.

Privacy requests may be sent to miremelia@gmail.com.

2. Data processed

• contact and identification data supplied by the customer;
• order information, selected products, size, delivery address, payment and communications;
• technical browsing and security data generated by the hosting infrastructure;
• favourites saved only in the user’s browser through local storage.

3. Purposes and legal bases

• replying to requests and taking steps before entering into a contract;
• managing and performing orders and customer service;
• complying with accounting, tax and other legal obligations;
• protecting the website and preventing misuse, based on the controller’s legitimate interest;
• analytics, advertising or marketing only after valid consent, if these services are activated in the future.

4. Provision of data

Data marked or requested as necessary for an order must be provided to process it. Failure to provide them may make it impossible to reply or fulfil the order. Marketing data and consent are optional.

5. Recipients and external services

Data may be processed by authorised staff and suppliers necessary for hosting, email, messaging, delivery, accounting and technical support, appointed as processors where required. When the customer voluntarily chooses WhatsApp, email or a social platform, data are also processed according to the terms and privacy policies of the selected provider.

6. Transfers outside the EEA

Some technology or messaging providers may process data outside the European Economic Area. In such cases, transfers are based on an adequacy decision or other safeguards permitted by the GDPR, as described by the relevant provider. The actual supplier list must be reviewed whenever analytics or payment services are activated.

7. Retention

Pre-contract communications are retained for the time needed to handle the request and any related dispute; order, invoicing and accounting data are retained for the periods required by tax and civil law; technical security logs are kept for the period proportionate to security needs. Data based on consent are retained until consent is withdrawn or the stated term expires. Criteria and supplier-specific periods will be updated when new services are activated.

8. Rights

Under the GDPR, the data subject may request access, rectification, erasure, restriction, portability where applicable, and object to processing; consent may be withdrawn at any time without affecting prior processing. A complaint may be lodged with the competent supervisory authority, including the Italian Data Protection Authority.

9. Minors and updates

The website is not directed at minors and does not intentionally collect their data. This notice may be updated when sales channels, payment methods or tracking services change.

Official references

GDPR — Regulation (EU) 2016/679 · Italian Data Protection Authority