II. Who we are: our website address is: http://acquadisanmartinodicastrozza.com.

 

II. Data Controller

The data controller is Acqua di San Martino di Castrozza, with VAT  14128320968. 

You can contact us at: info@acquadisanmartinodicastrozza.com.

 

III. Data We Collect

When you use our website or purchase the product, we may collect:
Personal and contact details (name, surname, email address, shipping/billing address, phone).
Payment data (securely managed by payment providers – we do not store card numbers).
Browsing data (IP address, browser type, access logs, technical cookies).
Voluntary data you choose to provide (e.g. messages via contact form or email).
Reports regarding product use (cosmetovigilance), processed only as required by law under EU Regulation 1223/2009 on cosmetic products.

 

IV. Sales Through Authorized Retailers

In addition to our official e-commerce, Acqua di San Martino di Castrozza products may also be purchased at selected stores in San Martino di Castrozza.In such cases, the personal data provided at the time of purchase (e.g. for invoicing or warranty purposes) are processed directly by the individual retailers, who act as independent data controllers.We do not receive or process data relating to purchases made through such retailers.

 

V. Purposes and Legal Bases of Processing

Your data is processed for the following purposes:
Order fulfillment and management of the sales contract (legal basis: contract performance).
Payment processing and shipping (legal basis: contract performance).
Customer communications regarding the order (legal basis: contract performance).
Legal and tax compliance (legal basis: legal obligation).
Handling of health/cosmetovigilance reports (legal basis: legal obligation – EU Reg. 1223/2009).
Direct marketing (newsletters or product updates similar to your purchases, if you consent – legal basis: consent or legitimate interest).

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

 

VI. Processing Methods and Security

Data is processed in electronic and paper form, with appropriate security measures to protect it from unauthorized access, loss, or destruction.

 

VII. Data Recipients

Data may be shared with:

couriers and logistics companies (for product shipping); payment institutions (e.g. PayPal, Stripe, banks); legal, tax, and accounting advisors where required by law; IT service providers (hosting, email, e-commerce platform).

Data will not be made publicly available.

 

VIII. Data Retention

Billing and shipping data: stored for 10 years as required by law.

Order-related data: for the time necessary to manage the purchase and post-sales assistance.

Marketing data: until consent is withdrawn (max 24 months).

Cookies: according to our Cookie Policy.

 

IX. Data Transfers outside the EU

If some service providers (e.g. email or hosting providers) process data outside the EU, we ensure compliance with GDPR through standard contractual clauses or adequacy decisions issued by the European Commission.

 

X. User Rights

At any time, you may exercise the following rights (Articles 15–22 GDPR): access your data; request rectification or deletion; restrict processing; object to processing (e.g. direct marketing); request data portability; withdraw consent, if previously given.

To exercise your rights, contact us at info@acquadisanmartinodicastrozza.com. 

 

XI . Complaints

If you believe your data is being processed unlawfully, you may file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the supervisory authority of your country of residence.

 

XII. Cookies

Our website uses technical cookies and, with your consent, analytical and profiling cookies. You can read more in our Cookie Policy and manage your preferences through the cookie banner. 

 

XIII.Changes to this Privacy Policy 

We reserve the right to modify or update this Privacy Policy at any time. The version in force is always the one published on our website, indicated by the date of the most recent update.