Information on using the contact form

Last updated: November 15, 2025

This policy describes how we collect and use your personal data when you send us a message through our contact form.
We want everything to be clear and transparent, so you can make an informed choice about whether or not to stay in touch with us.

1. DATA CONTROLLER
The data controller is Disegnetti Depressetti LTD, with registered office in Vico della Pista 8/3, Rapallo (GE) Italy 16035, tax code and VAT number IT00383169992 , contactable at shop@disegnettidepressetti.com.

2. TYPE OF DATA PROCESSED

The following data is collected through the contact form:

• Name and surname
• E-mail address
• Subject and content of the message
• Any additional personal data that the user freely decides to communicate

Providing your data is optional, but necessary to respond to your request.

3. PURPOSE OF THE PROCESSING AND LEGAL BASIS

a) Manage and respond to user requests

The legal basis is Art. 6(1)(b) GDPR (execution of pre-contractual measures at the request of the data subject).

b) Prevent abuse or illicit use of the service

The legal basis is art. 6(1)(f) GDPR (legitimate interest of the Data Controller in the security of the site).

No automated decisions or profiling activities are performed on the data collected through this form.

4. METHODS OF TREATMENT

The data is processed using IT and electronic tools, adopting appropriate technical and organizational security measures to protect the information from unauthorized access, alteration, or unauthorized disclosure.

5. DATA STORAGE

The data collected through the contact form will be retained for 12 months from receipt of the request, unless further retention is required to protect the Data Controller in the event of disputes or legal obligations.

6. DATA RECIPIENTS

The data may be processed by:

• personnel authorized by the Owner
• suppliers who provide technical services (e.g. hosting, email services, ticketing systems)

All third parties act as data processors pursuant to Art. 28 GDPR.

7. RIGHTS OF THE INTERESTED PARTY
You have the right to:
- revoke your consent at any time by clicking the "Unsubscribe" link at the bottom of each email;
- access, rectify, or delete your data;
- object to the processing;
- lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights, you can write to shop@disegnettidepressetti.com.

8. TRANSFERS OUTSIDE THE EU
The processing of personal data takes place primarily within the European Union and the United Kingdom.
The United Kingdom benefits from the European Commission's adequacy decision of 28 June 2021, therefore the transfer of data to the Data Controller's UK headquarters takes place in compliance with Articles 44–45 GDPR.

Some of the Owner's suppliers (in particular Shopify, Google and Meta) may transfer data to third countries, including the United States and Canada.
In such cases, the transfer occurs in compliance with Articles 46–49 GDPR, through Standard Contractual Clauses (SCCs) adopted by the European Commission and additional technical and organizational measures provided for by the respective Data Processing Agreements.
For services that adhere to the US Data Privacy Framework , the transfer occurs on the basis of the relevant adequacy decision.

9. UPDATES
This policy may be updated over time to ensure greater transparency or regulatory compliance.