Informativa sulla privacy
This Privacy Policy explains how dekorzaly.shop collects, uses, discloses, stores and otherwise processes personal information in connection with our ecommerce website, products, services and customer communications.
For privacy questions or requests, contact:
Where applicable, personal data relating to individuals in Italy or the European Economic Area is processed in accordance with the General Data Protection Regulation and other applicable privacy and electronic-communications requirements.
Shopify notes that merchants using its platform must comply with privacy laws applicable to their business and customers.
Personal Data We May Collect
Depending on how a customer interacts with dekorzaly.shop, we may process information including a customer's name, email address, telephone number, billing information, shipping information, order information, purchase history, account information, customer-service communications, transaction information and other information voluntarily submitted through the store.
We may also receive technical and usage information such as IP address, browser type, device information, operating-system information, website interaction information, approximate location derived from technical data, referral information and cookie or similar technology identifiers.
Payment information may be processed directly by payment processors and ecommerce service providers used to facilitate transactions.
We do not require customers to send complete payment-card credentials through normal customer-service email.
How We Collect Personal Data
Personal data may be collected directly from customers when they visit our website, create or use an account where available, place an order, complete checkout, contact customer service, subscribe to communications where offered, participate in a promotion or otherwise communicate with us.
Information may also be obtained automatically through the operation of our website and from service providers involved in ecommerce infrastructure, checkout, payment processing, fulfilment, delivery, security, analytics and related functions.
Purposes of Processing
We may process personal data to operate the store, process transactions, accept and fulfil orders, arrange shipping and delivery, provide order notifications, administer accounts, provide customer service, handle cancellations and returns, issue refunds, prevent fraud, protect website security, comply with legal obligations, maintain business records and resolve disputes.
Where permitted, personal data may also be processed for analytics, website improvement, product development and marketing activities.
Marketing communications requiring consent will be handled according to applicable consent requirements.
Legal Bases
Where the GDPR applies, we process personal data only when an appropriate lawful basis exists.
Processing may be necessary to perform a contract or take steps requested before entering into a contract, particularly when processing orders, arranging delivery or handling returns.
Processing may also be required to comply with legal obligations.
Certain processing may be based on legitimate interests, provided those interests are not overridden by the rights and freedoms of the individual.
Where required by law, processing will instead be based on the individual's consent.
A person who has given consent may withdraw that consent for future processing where applicable.
Shopify
Our ecommerce store may be hosted and operated using Shopify technology.
As part of providing ecommerce functionality, personal information may be processed through Shopify systems according to the applicable arrangements between Shopify, merchants and customers.
Shopify provides information to merchants concerning GDPR and privacy compliance obligations.
Payment Processing
When customers make purchases, payment information may be processed by authorised payment service providers.
These providers may collect and process data necessary to authorise payments, detect fraud, satisfy financial compliance requirements and complete transactions.
Their processing may be subject to their own legal obligations and privacy practices.
Fulfilment and Delivery Providers
We may disclose information necessary to fulfil and deliver an order to appropriate suppliers, warehouses, logistics companies, postal operators and delivery carriers.
Information disclosed for this purpose may include the customer's name, delivery address, telephone number, email address and information necessary to identify the parcel.
Such disclosure is limited to what is reasonably necessary for order fulfilment and related purposes.
Other Service Providers
We may use third parties to provide website hosting, technical infrastructure, fraud prevention, payment services, communications, analytics, customer support, advertising, security and other functions required to operate the business.
Service providers may process personal data only to the extent required for their role and subject to applicable legal requirements.
Legal and Regulatory Disclosure
We may disclose personal information where reasonably necessary to comply with applicable laws, enforceable governmental requests, court orders or legal processes.
Information may also be disclosed where necessary to investigate fraud, protect legal rights or respond to a genuine security incident.
We do not sell personal information merely because a third party requests it.
International Data Transfers
Some service providers supporting an international ecommerce website may process data in countries outside Italy or the European Economic Area.
Where GDPR restrictions on international transfers apply, appropriate transfer mechanisms and safeguards will be used as required by law.
These may include an adequacy decision, contractual safeguards or another legally recognised transfer mechanism.
Cookies and Similar Technologies
dekorzaly.shop may use cookies and similar technologies to provide website functionality, maintain sessions, remember customer choices, improve security, measure website performance and, where permitted, support analytics or advertising.
Italian privacy guidance distinguishes technical technologies necessary for providing services from non-technical tracking technologies. Where legally required, non-essential tracking technologies should not be activated before appropriate consent has been obtained.
Accordingly, where consent is required, customers should be provided with an appropriate cookie or consent interface allowing them to make relevant choices.
Technical or strictly necessary technologies may operate where permitted without prior consent.
Cookie Choices
Where a consent-management interface is available, users may use it to accept, reject or adjust optional cookie categories.
Users can also adjust browser settings to block or delete cookies.
Blocking strictly necessary cookies may interfere with certain website functions, including shopping-cart, authentication or checkout features.
Withdrawal of consent will not make processing carried out lawfully before withdrawal unlawful.
Marketing Communications
Where customers voluntarily subscribe to promotional communications, we may use contact information to send marketing messages in accordance with applicable law.
Where consent is required, marketing will only be sent on an appropriate legal basis.
Customers may withdraw from marketing email communications using the unsubscribe functionality provided in the relevant message or by contacting:
Unsubscribing from promotional communications does not prevent us from sending transactional or service communications necessary to fulfil an order or respond to a customer request.
Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by applicable law.
Different categories of information may have different retention periods.
Order and transaction records may need to be retained for accounting, taxation, legal, fraud-prevention or dispute-management purposes even after an order is completed.
When data is no longer reasonably required, it may be deleted, anonymised or otherwise handled according to applicable legal requirements.
Data Security
We seek to maintain reasonable technical, organisational and administrative safeguards designed to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.
However, no internet transmission, website or electronic storage system can be guaranteed to be completely secure.
Customers should protect account credentials and avoid sharing passwords with unauthorised persons.
Children's Privacy
dekorzaly.shop is intended for persons who have the legal capacity to make purchases or who use the website with appropriate parental or guardian involvement where required.
We do not knowingly seek to collect children's personal data for behavioural advertising in circumstances where such processing would be unlawful.
If a parent or guardian believes that a child has provided personal information improperly, the parent or guardian may contact info@dekorzaly.shop.
GDPR Rights
Subject to applicable requirements, individuals protected by the GDPR may have rights including access to personal data, correction of inaccurate data, erasure, restriction of processing, data portability and objection to certain processing.
Individuals may also have the right to withdraw consent where processing is based on consent.
Some rights are subject to exceptions and legal conditions and therefore may not apply in every circumstance.
Exercising Privacy Rights
Privacy requests may be submitted to:
To protect customer information from unauthorised disclosure, we may request reasonable information necessary to verify the identity of the person making the request.
We will handle valid requests within the periods required by applicable law.
We will not discriminate against an individual simply for legitimately exercising a privacy right.
Complaints
Individuals may contact us first with questions or complaints concerning our handling of personal information.
Where the GDPR applies, individuals also have the right to lodge a complaint with the competent supervisory authority.
The Italian Data Protection Authority, the Garante per la protezione dei dati personali, is Italy's supervisory authority for data protection matters.
Changes to This Privacy Policy
We may update this Privacy Policy where necessary to reflect changes in our business operations, technology, legal obligations or privacy practices.
The current version will be published on dekorzaly.shop with an updated revision date where appropriate.
Material changes will be communicated as required by applicable law.
Contact
For privacy requests or questions:
dekorzaly.shop
Email: info@dekorzaly.shop
- Choosing a selection results in a full page refresh.