Privacy & Cookie Policy

1. Data Collected and Collection Methods

When you make a purchase or create an account on our online shop, we collect the data you voluntarily provide during checkout: first name, last name, email, phone, shipping address (street, house number, ZIP code, city, province, country) and, if provided, your tax code. We also collect technical and browsing data (IP address, browser, device) through cookies and tracking pixels. Payment data (card numbers, etc.) never transit through or are stored on our servers: they are handled directly by the payment processors (Stripe, PayPal), PCI-DSS certified.

2. Purpose of Processing

Personal data provided is processed for the following purposes:

• Order fulfillment, invoicing and shipment management.
• Customer support, returns and right of withdrawal management.
• Fraud prevention and legal (tax, accounting) obligations.
• With your consent, sending email marketing and SMS marketing communications (see point 4).

3. We Do Not Sell or Transfer Your Data

Your personal data is never sold, transferred or rented to third parties for their own commercial purposes. Data is shared only with providers strictly necessary to deliver the service (couriers, payment processors, email/SMS service, analytics tools), appointed as data processors under Art. 28 GDPR and contractually bound to confidentiality.

4. Email Marketing & SMS Marketing

Only if you explicitly consent at checkout (the consent checkbox is not bindingly pre-selected and can be withdrawn at any time), we use your contact data to send:

• Email Marketing: newsletters, new collections, promotions and abandoned cart reminders. You can unsubscribe at any time via the link at the bottom of every email.
• SMS Marketing: shipment tracking notifications and promotional communications via SMS.

Without consent, your data does not enter any marketing list and is used solely for order fulfillment.

5. Tracking Tools, Pixels & Analytics

This website uses tracking technologies to analyze performance, optimize the user experience and show relevant advertising:

The Meta Pixel and browser advertising identifiers only activate upon consent given through the cookie banner, except for technical cookies strictly necessary for cart and checkout functionality.

6. Where Your Data Is Stored

Data is stored on Supabase (AWS cloud database infrastructure, European Union region) and on hosting infrastructure also located within the European Union. No personal data is permanently transferred outside the European Economic Area. Communications are protected by SSL/TLS encryption in transit and at rest.

7. Data Subject Rights (Art. 15-22 GDPR)

You have the right at any time to request access to your personal data, rectification, erasure (right to be forgotten), portability, restriction of processing, or objection to promotional communications.

To exercise your rights, simply send an email to info@florioli.it or write to 2EFFE SRL, Via A. De Gasperi, 9 — 25015 Desenzano del Garda (BS), Italy. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Data Security and Retention

Order-related data is retained for the period required by applicable tax and civil law (10 years). Data collected solely for marketing purposes is retained until consent is withdrawn or, absent any interaction, for a maximum of 24 months.

9. Minors

The online shop is intended for adults. We do not knowingly collect data from minors under 18.