For what purpose is your Data processed?

Legal basis of processing

 How long is your Data retained?

Registration and account creation:

Your Data will be used for registration and to create a personal account, and this will allow you to access your profile, through which you can view your orders and purchases.

The processing of this Data is necessary to perform the precontractual measures adopted at your request, in accordance with art. 6, para. 1, let. b) of the GDPR.

The Data will be stored until you request that the account you created be deleted.

Order management:

Your Data will be used to allow us to process orders and send you the products that you have purchased, and, where necessary, to provide assistance and support.

The processing of your Data is necessary in order to execute the contract to which you are a party, in accordance with art. 6, para. 1, let. b) of the GDPR.

Until the period of limitation has run out (ten years) concerning contract-related suits which may arise in relation to the contract in execution of which the data are processed. 

Purchase process management:

Your Data will be processed to initiate and finalise the purchase process.

The processing of your Data is necessary in order to execute the contract to which you are a party, in accordance with art. 6, para. 1, let. b) of the GDPR.

Until the period of limitation has run out (ten years) concerning contract-related suits which may arise in relation to the contract in execution of which the Data are processed. 

Compliance with legal obligations as part of the purchase process:

issue of accounting and tax documents

The processing of your Data is necessary in order to comply with a legal obligation to which the Controller is subject, in accordance with art. 6, para. 1, let. c) of the GDPR.

Legal time frames (ten years for accounting documents and invoices, in accordance with art. 2220 of the Italian Civil Code).

Fraud prevention, protection, and management of disputes:

The Data may be processed to allow us to prevent instances of fraud committed against us or other customers, to stop a violation or to protect and defend ourselves in all venues, including legal ones.

The processing of Data is necessary to pursue the Controller’s legitimate interest to guarantee a high quality of service and to protect its rights against regulatory violations or in order to prevent regulatory violations, in accordance with art. 6, para. 1, let. f) of the GDPR.

For the time necessary to allow the Controller to act or defend itself against claims lodged against it or in order to prevent damages arising from user or customer behaviour which violate legal obligations, and until the legal period concerning contract-related suits which may arise in relation to the transaction in execution of which the Data are processed.

Marketing communications:

With exclusive reference to the email address you used to complete a purchase, the same address can be used to send promotional and marketing communications about products and services similar to those which you purchased, unless you decide to object henceforth to this initiative by writing to the email address set out under paragraph “Data Subject’s Rights” or by using the appropriate channels indicated in our email communications.

The email contact that you provide as part of the sales process will be processed by the Controller in order to offer you products that are similar to the ones you purchased (art. 6, para. 1, let. f), of the GDPR, and art. 130, para. 4 of Italian Legislative Decree 196/03), unless you object to its processing by writing to the email address under paragraph “Data Subject’s Rights” or by using the appropriate channels indicated in our email communications.

Until you decide to object to the processing of your Data

Newsletter subscription:

You may be asked to consent to subscribe to our occasional automated newsletter, to keep you up to date on the initiatives promoted by the Controller (themed events, museum and factory visits), as well as to inform you about new documentation available in the catalogue (newly digitised content, purchase of historical technical publications).

Your Data will be processed following your express consent, which can be communicated by ticking the box at the bottom of the forms present on the Controller’s website (art. 6, para 1, let. a) of the GDPR). We wish to remind you that if you provide your consent, you may revoke it at any time by clicking on the link in any one of our marketing messages, or by writing directly to the Controller at the email address listed under the paragraph “Data Subject’s Rights”, or by using the appropriate channels indicated in our email communications. We also wish you remind you that revoking your consent will not impact the lawfulness of processing before said revocation.

Until revocation of consent