Privacy Policy

Information provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

This policy explains how the personal data of users who browse this website and complete the order form is collected and processed. Please read it carefully before providing your data.

1. Types of data collected

• Data provided voluntarily: first and last name, phone number and delivery address, entered by completing the order form.
• Data collected automatically: IP address, device and browser type, pages visited, date and time of access, and technical browsing data necessary for the operation and security of the site.
• Identifiers and measurement data: information collected through cookies and analytics/advertising tools (see Cookie Policy).

2. Purposes and legal bases

• Order management — fulfilment, phone confirmation, shipping and cash-on-delivery payment. Legal basis: performance of a contract (Art. 6.1.b GDPR).
• Legal obligations — tax, accounting and administrative requirements. Legal basis: legal obligation (Art. 6.1.c GDPR).
• Security and fraud prevention — protection of the site and of orders. Legal basis: legitimate interest (Art. 6.1.f GDPR).
• Measurement and optimisation of advertising campaigns — aggregate conversion statistics. Legal basis: consent (Art. 6.1.a GDPR), given through the cookie banner.

3. Advertising measurement tools

The site may use the Meta Pixel, provided by Meta Platforms Ireland Ltd., to measure the effectiveness of advertising campaigns. The tool collects, in pseudonymised form, information about events performed on the site (e.g. viewing a page, submitting an order) and links them to the ads. These tools are activated only with prior consent and may involve the transfer of data to Meta. For more information you can consult Meta’s privacy policy.

4. Cookies

The site uses technical cookies and, subject to consent, measurement and marketing cookies. For details and management options please see the Cookie Policy.

5. Processing methods and security

Data is processed using computer and electronic tools, adopting technical and organisational measures adequate to ensure its confidentiality, integrity and availability, and to prevent unauthorised access, loss or disclosure.

6. Disclosure of data to third parties

Your data may be disclosed, solely for the purposes indicated above, to:

• couriers and logistics companies, for the delivery of the order;
• customer service operators / call centres, for phone confirmation;
• technical service providers (hosting, site maintenance);
• advertising platforms, for campaign measurement only.

Data is not sold or transferred to third parties for their own marketing purposes.

7. Transfer of data outside the European Union

Some providers (for example advertising platforms) may process data in non-EU countries. In such cases the transfer takes place in compliance with the safeguards required by the GDPR, such as the Standard Contractual Clauses approved by the European Commission.

8. Retention period

Data relating to the order is retained for the time necessary to fulfil the request and, subsequently, for the period required by tax and legal obligations (generally up to 10 years). Data collected for measurement purposes is retained for the period set by the relevant tools.

9. Rights of the data subject

At any time you may exercise the rights set out in Articles 15-22 of the GDPR:

• access to your data;
• rectification of inaccurate data;
• erasure ("right to be forgotten");
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent at any time, without affecting processing already carried out.

To exercise your rights you can write to the contact form on erboristeriaviaroma.com. You also have the right to lodge a complaint with the competent Data Protection Authority.

10. Changes to this policy

The Controller reserves the right to update this policy. Any changes will be published on this page together with the update date.

← Back to the page · erboristeriaviaroma.com