Privacy policy

Privacy Policy – Disegnetti Depressetti LTD

Last updated: November 15, 2025

Welcome to the Disegnetti Depressetti shop!

On this page, you will find all the information regarding how we collect, use, and protect your personal data when you browse our website or make a purchase.

We aim to explain everything clearly and transparently, just the way we like it.

1. DATA CONTROLLER AND REPRESENTATIVE IN THE EUROPEAN UNION

The Data Controller is Disegnetti Depressetti LTD, with registered office at Vico della Pista 8/3, Rapallo (GE), Italy, 16035, Tax Code and VAT ID: IT00383169992, contactable at shop@disegnettidepressetti.com.

2. TYPES OF DATA COLLECTED

While you browse the website, we may collect:

• Browsing data: IP address, browser type, pages visited, time spent on pages, system logs;

• Data provided voluntarily: Name, surname, email address, shipping and billing address, contents of sent messages;

• Data necessary to manage payments and orders: Amount, payment status, payment method (excluding card numbers).

We do not collect special categories of personal data (e.g., sensitive or judicial data).

3. PURPOSES AND LEGAL BASES OF PROCESSING

We process your personal data for the following purposes, each associated with its respective legal basis:

• a) Management of website browsing and technical operation

  (Legal basis: Art. 6, par. 1, point f GDPR – Legitimate interest of the Data Controller in the proper functioning of their sales channel);

• b) Order fulfillment, payment processing, and delivery of purchased products

  (Legal basis: Art. 6, par. 1, point b GDPR – Performance of a contract);

• c) Management of user communications and information requests

  (Legal basis: Art. 6, par. 1, point b GDPR – Performance of a contract);

• d) Compliance with legal obligations regarding accounting, tax, and administrative matters

  (Legal basis: Art. 6, par. 1, point c GDPR – Compliance with a legal obligation);

• e) Sending promotional communications

  (Legal basis: Art. 6, par. 1, point a GDPR – Explicit consent).

4. PROCESSING METHODS AND SECURITY MEASURES

Data is processed using electronic and paper tools in compliance with the principles of lawfulness, fairness, transparency, and data minimization set out in the GDPR.

We adopt appropriate technical and organizational measures to protect data from unauthorized access, loss, or misuse.

Processing mainly takes place on servers located within the European Union and, for website hosting and management services, through the Shopify platform.

5. DATA RETENTION

Personal data is stored for as long as necessary to achieve the purposes for which it was collected, and specifically:

• For order management: Up to 10 years (tax and accounting obligations);

• For managing customer requests: Up to 12 months from the response;

• For newsletters: Until consent is revoked;

• For technical and browsing data: As indicated in the Cookie Policy.

6. RECIPIENTS AND TRANSFERS OUTSIDE THE EU

Personal data is primarily processed within the European Union and the United Kingdom.

The United Kingdom benefits from the European Commission’s Adequacy Decision dated June 28, 2021; therefore, the transfer of data to the Data Controller’s UK office complies with Arts. 44–45 of the GDPR.

Certain service providers of the Data Controller (in particular Shopify, Google, and Meta) may transfer data to third countries, including the United States and Canada. In such cases, data transfers comply with Arts. 46–49 of the GDPR via Standard Contractual Clauses (SCCs) adopted by the European Commission, alongside additional technical and organizational measures outlined in their respective Data Processing Agreements.

For services adhering to the US Data Privacy Framework, transfers are carried out based on the relevant adequacy decision.

7. RIGHTS OF THE DATA SUBJECT

You may exercise your rights under Arts. 15–22 of the GDPR at any time:

• Right of access to data;

• Right to rectification or erasure;

• Right to restriction of processing;

• Right to data portability;

• Right to object;

• Right to withdraw consent (for processing based on consent).

To exercise your rights, you can write to shop@disegnettidepressetti.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali – www.garanteprivacy.it).

8. COOKIES AND ANALYTICS TOOLS

The website uses technical and functional cookies to ensure proper operation and improve your browsing experience.

For more information about third-party or profiling cookies that may be used, please consult the dedicated Cookie Policy.

9. POLICY UPDATES

This privacy policy may be updated over time to reflect legal or organizational changes.

We encourage you to review it periodically. The updated version will always be available at www.disegnettidepressetti.com.

__________________________________________

Account Creation Privacy Notice – Disegnetti Depressetti LTD

Last updated: November 15, 2025

When you choose to create a personal account on our website, you provide us with data necessary to easily manage your orders, track purchases, and access your favorite products faster.

Here is everything you need to know.

1. DATA CONTROLLER

The Data Controller is Disegnetti Depressetti LTD, with registered office at Vico della Pista 8/3, Rapallo (GE), Italy, 16035, Tax Code and VAT ID: IT00383169992, contactable at shop@disegnettidepressetti.com.

2. DATA COLLECTED

To create an account, the following information is required:

• First and last name;

• Email address;

• Access password;

• Any shipping and billing details (for future orders).

3. PURPOSES AND LEGAL BASES

Data is processed to:

• a) Allow registration and management of the personal account

  (Legal basis: Art. 6, par. 1, point b GDPR – Performance of a contract);

• b) Manage orders, shipments, and payments

  (Legal basis: Art. 6, par. 1, point b GDPR – Performance of a contract);

• c) Comply with legal obligations regarding tax, accounting, and consumer protection

  (Legal basis: Art. 6, par. 1, point c GDPR – Compliance with a legal obligation).

4. METHODS AND RETENTION

Data is processed using electronic tools and stored on secure servers.

Account data remains active as long as the user maintains their registration; upon account closure, data will be deleted or anonymized within 24 months, unless longer retention periods are required by law.

5. DATA RECIPIENTS

Data may be processed by:

• Personnel authorized by the Data Controller;

• Service providers performing technical services (e.g., hosting, email services, ticketing systems).

All third parties act as Data Processors pursuant to Art. 28 of the GDPR.

6. RIGHTS OF THE DATA SUBJECT

You have the right to:

• Withdraw consent at any time by clicking the "Unsubscribe" link at the bottom of each email;

• Access, rectify, or erase your data;

• Object to processing;

• Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights, write to shop@disegnettidepressetti.com.

7. TRANSFERS OUTSIDE THE EU

Personal data is primarily processed within the European Union and the United Kingdom.

The United Kingdom benefits from the European Commission’s Adequacy Decision dated June 28, 2021; therefore, the transfer of data to the Data Controller’s UK office complies with Arts. 44–45 of the GDPR.

Certain service providers of the Data Controller (in particular Shopify, Google, and Meta) may transfer data to third countries, including the United States and Canada. In such cases, data transfers comply with Arts. 46–49 of the GDPR via Standard Contractual Clauses (SCCs) adopted by the European Commission, alongside additional technical and organizational measures outlined in their respective Data Processing Agreements.

For services adhering to the US Data Privacy Framework, transfers are carried out based on the relevant adequacy decision.

8. UPDATES

This privacy notice may be updated over time to ensure greater transparency or legal compliance.