Privacy policy

The Data Controller is Art 9 S.r.l., with registered office in Rome, via Montaione n.38, VAT number 18198871008, email info@ottaviano.shop.

The website may collect data provided by the user while browsing and using the services, such as identification and contact information, data related to orders, shipping, and billing, as well as technical data necessary for the website’s operation and security.

Payment data is processed by the payment service providers used by the website.

Personal data is processed for the following purposes:

• to manage orders, payments, shipments, and customer service, based on the performance of the contract or pre-contractual measures;
• to comply with legal, administrative, accounting, and tax obligations;
• to ensure the security of the website and prevent fraud and unauthorized use;
• to send newsletters and promotional communications, subject to consent where required.

The data is processed using computer systems and appropriate technical and organizational measures to ensure its security and confidentiality.

Data related to orders and administrative, accounting, and tax obligations are retained for the period required by applicable law.

Data used for marketing purposes is retained until consent is withdrawn, subject to any additional legal obligations.

Personal data may be processed by authorized personnel and by service providers necessary for the management of the website and the e-commerce platform, including providers of IT and hosting services, payment processing, shipping, customer support, administration, accounting, and communications.

These entities act, as appropriate, as data processors or independent data controllers.

Personal data is not disclosed.

An updated list of the parties involved in data processing may be requested from the Data Controller.

Some service providers may process personal data outside the European Economic Area.

In such cases, the transfer is carried out in compliance with the GDPR, based on an adequacy decision by the European Commission or other safeguards provided for by applicable law, including, where necessary, the Standard Contractual Clauses.

Further information regarding the safeguards in place may be requested from the Data Controller.

In the cases provided for by the GDPR, the user may exercise the rights of access, rectification, erasure, restriction of processing, objection, and data portability, as well as revoke any consent given at any time, without affecting the lawfulness of the processing carried out prior to the revocation.

To exercise your rights, you may contact the Data Controller using the contact information provided in this privacy notice.

The data subject also has the right to file a complaint with the Data Protection Authority.

For information regarding the use of cookies and similar technologies, please refer to the Cookie Policy.