Cookie preferences
PRIVACY POLICY
pursuant to Regulation (EU) 2016/679 – GDPR
1. Data Controller
The data controller of the personal data collected and processed through the website www.designtrasparente.com is:
Creazioni di Mia di Milene Sclavo, operating under the Designtrasparente brand
Registered office: Largo Luigi Cossa 36H – 00148 Rome – Italy
Email: info@designtrasparente.com
VAT number: 13389321004This Privacy Policy describes how the Data Controller processes the personal data of users who visit the website, make a purchase, create an account, request information or use the services available on the website
2. What personal data is collected
The Data Controller may collect and process personal data provided directly by the user while browsing, registering, making a purchase or contacting Designtrasparente
Consumer data
In the case of a purchase made by a consumer, the following data may be requested and processed:
first name and surname
tax identification number
billing and delivery address
email address
telephone number
information relating to orders placed
information necessary to manage payment and delivery
Data of professionals, companies and entities
In the case of a purchase made in connection with a professional or business activity, the data necessary to manage the order and issue invoices may be requested and processed, including:
first name and surname or company name
tax identification number
VAT number
recipient code or other data necessary for electronic invoicing
registered office or billing address
delivery address
email address
telephone number
information relating to orders placed
any additional data necessary to manage the business relationship
Providing the data necessary to manage the order and comply with tax and contractual obligations is mandatory. Without such data, the Data Controller may be unable to enter into or perform the contract
3. Purposes of processing
Personal data may be processed for the following purposes:
management of customer registration and account
management of orders and sales contracts
management of payments
invoicing
management of shipments and deliveries
pre-sales and after-sales assistance
management of requests submitted by the user
management of communications relating to orders and products
compliance with obligations established by law, regulations and tax legislation
protection of the Data Controller's rights and management of any complaints or disputes
statistical analysis and improvement of the website's operation and services
measurement of the effectiveness of advertising activities
marketing activities and commercial communications, where the relevant consent has been validly provided
4. Legal basis for processing
Personal data is processed on the basis of the different purposes pursued and may rely on the following legal bases provided for by Article 6 of the GDPR:
performance of a contract or of pre-contractual measures requested by the data subject
compliance with legal obligations to which the Data Controller is subject
pursuit of the legitimate interest of the Data Controller, within the limits provided for by applicable law
consent of the data subject, where required by law
Consent is optional and may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal
5. Payments
The website provides various payment systems for the management of payments
Depending on the payment method chosen by the customer, the data necessary to process the payment may be processed by the relevant payment service providers, including:
PayPal, including any instalment payment options or other payment methods made available directly by PayPal
Stripe, for card payments and any additional payment methods made available through Stripe, including, where available, instalment payment systems such as Klarna
bank transfer
Designtrasparente does not acquire or retain complete payment card details when the payment is processed directly by the relevant providers
Payment service providers process data in accordance with their own privacy policies and terms of service
6. Shipping and delivery
In order to deliver purchased products, Designtrasparente provides transport and delivery service providers, including carriers, shipping companies and logistics operators responsible for managing and delivering orders, with the data strictly necessary to manage the shipment
These parties may, as part of the provision of transport and delivery services, use their own partners or local operators, including in other countries, in compliance with applicable data protection legislation
Depending on the needs of the shipment, the data may include the recipient's first name and surname, delivery address, telephone number and other information necessary to ensure the correct management of the delivery
Transport and delivery service providers process the data received in accordance with their own privacy policies and, depending on the service provided and their relationship with Designtrasparente, either as independent data controllers or as parties processing data on behalf of Designtrasparente, where applicable
7. Google Analytics
The website uses Google Analytics to collect statistical information about the use of the website and analyse how users interact with its pages and services
Google Analytics may involve the processing of information relating to browsing activity, events and user interactions with the website
The use of cookies and analytics technologies subject to consent takes place according to the preferences expressed by the user through the consent management system available on the website
Where required, the user's consent is communicated to Google services through the relevant consent management mechanisms
8. Google Ads and advertising activities
Designtrasparente uses Google Ads to promote its products and measure the effectiveness of its advertising campaigns
Google tools may use cookies and similar technologies to measure conversions, analyse advertising campaigns and, where provided for and permitted according to the preferences expressed by the user, personalise advertisements
For users subject to applicable consent requirements in the European Economic Area, the preferences expressed through the consent management system are used to determine how Google tags and tools may process data for analytics and advertising purposes
Google Ads and Google Analytics functionalities may also be linked to one another to enable the measurement of campaigns and conversions
Google provides specific consent management mechanisms for users in the European Economic Area, including signals relating to the use of data for advertising purposes and the personalisation of advertisements
9. Google Tag Manager
The website may use Google Tag Manager for the technical management of tags and tracking and analytics tools present on the website
Google Tag Manager allows the technical management of tools installed on the website without, in itself, implying the use of data for a specific purpose other than those relating to the tools actually activated
The behaviour of the individual tags and tools managed through Google Tag Manager is governed by their respective processing methods and by the preferences expressed by the user through the consent management system
10. Cookies and similar technologies
The website uses cookies and similar technologies necessary for its operation and, where consent is required under applicable law, cookies and tools used for statistical, analytical, advertising and personalisation purposes
For detailed information about the cookies used, their purposes, duration and how preferences can be managed, users may consult the Cookie Policy published on the website
Users may modify or withdraw their cookie preferences according to the procedures indicated in the Cookie Policy and in the consent management system available on the website
11. Newsletter and commercial communications
During registration or use of the website, users may be offered the possibility of subscribing to the newsletter or receiving commercial communications
Newsletter subscription is optional and requires the user's consent where required by applicable law
Users may withdraw their consent to receive commercial communications at any time by using the methods indicated in the communications received or by contacting the Data Controller
The absence of communications for a certain period does not automatically result in the cancellation of the subscription or previously given consent
12. Social networks and external platforms
The website may contain links, buttons, tools or integrations with social platforms and external services, including Google Business Profile, Facebook, Instagram, Pinterest and TikTok
These platforms may process users' personal data in accordance with their own privacy policies and according to the way in which the relevant tools are configured on the website
The presence of links or integrations with these platforms does not, in itself, involve the disclosure to social networks of customers' personal, tax or order-related data for the management of sales
If additional functionalities are activated in the future that involve different processing of personal data, such processing will be carried out in compliance with applicable legislation and, where necessary, after obtaining the relevant consent
13. Processing methods and security
Personal data is processed using electronic tools and, where necessary, paper-based tools, in accordance with the principles of fairness, lawfulness, transparency, data minimisation and confidentiality
The Data Controller adopts technical and organisational measures appropriate to the nature of the data processed and the risks associated with the processing, in order to protect the data against loss, destruction, alteration, unauthorised access or unlawful processing
Data is accessible only to authorised persons or suppliers who need access to it in order to carry out the activities entrusted to them
14. Parties to whom data may be disclosed
Personal data may be disclosed, within the limits strictly necessary for the purposes indicated in this Privacy Policy, to:
parties providing technical and IT services necessary for the operation of the website
payment service providers
carriers and logistics operators responsible for delivery
consultants and professionals assisting the Data Controller in the course of its activities
parties responsible for accounting and tax management
public authorities, administrations and parties to whom disclosure is required by law
any other suppliers necessary for the management of the business and the services offered by the website
External parties processing personal data on behalf of the Data Controller are appointed as data processors pursuant to Article 28 of the GDPR where required by applicable law
15. Transfer of data to third countries
Some service providers used by the website may process personal data outside the European Economic Area
Where processing involves the transfer of personal data to a third country, the Data Controller adopts the measures and safeguards provided for by Articles 44 et seq. of the GDPR, where applicable
For further information on how individual external providers process data, users may consult their respective privacy policies
16. Data retention period
Personal data is retained for the period necessary to achieve the purposes for which it was collected and subsequently for the period necessary to comply with legal obligations and protect the rights of the Data Controller
Data relating to orders, invoicing and business relationships is retained for the periods provided for by applicable civil, tax and accounting legislation
Data processed on the basis of consent is retained until consent is withdrawn, unless there are other legal grounds allowing or requiring the retention or processing of the data
Data relating to cookies and analytics and advertising tools is retained for the periods indicated in the Cookie Policy and according to the settings of the relevant services
17. Nature of the provision of data
Providing the data necessary for registration, entering into and performing the order, invoicing, payment, shipping and compliance with legal obligations is necessary
Failure to provide the necessary data may prevent the Data Controller from providing the requested service or entering into and performing the contract
Providing data for marketing and commercial communication purposes is optional
Refusal to provide consent for marketing purposes does not prevent users from making purchases on the website or using the available services
18. Data subject rights
The data subject may exercise, where provided for by applicable law, the rights recognised under Articles 15 et seq. of the GDPR, including:
obtaining confirmation as to whether or not personal data concerning them exists
obtaining access to their personal data
obtaining the rectification of inaccurate data or the completion of incomplete data
obtaining the erasure of data in the cases provided for by law
obtaining restriction of processing in the cases provided for by law
objecting to processing in the cases provided for by law
receiving their personal data in a structured, commonly used and machine-readable format, where the right to data portability applies
withdrawing previously given consent, where processing is based on consent
lodging a complaint with the competent supervisory authority
The exercise of these rights is subject to the conditions and limitations provided for by applicable law
19. How to exercise rights
To exercise their rights or obtain information regarding the processing of their personal data, data subjects may contact the Data Controller using the following contact details:
Creazioni di Mia di Milene Sclavo – Designtrasparente
Largo Luigi Cossa 36H – 00148 Rome – Italy
Email: info@designtrasparente.com
The Data Controller may request the information necessary to verify the identity of the requester where this is necessary to protect the security and confidentiality of personal data
The Data Controller will respond to the request within the time limits provided for by the GDPR
20. Supervisory authority
A data subject who believes that the processing of their personal data carried out through the website infringes applicable legislation has the right to lodge a complaint with the competent supervisory authority, in particular the authority of the Member State where they habitually reside, work or where the alleged infringement occurred
21. Updates to the Privacy Policy
This Privacy Policy may be amended or updated to reflect changes in legislation, technology, organisation or the services used by the website
The updated version is published on the website with the relevant update date
Last updated: 20-08-26