{"id":4775,"date":"2026-10-09T15:11:22","date_gmt":"2026-10-09T13:11:22","guid":{"rendered":"https:\/\/www.schiumapostdesign.com\/?page_id=4775"},"modified":"2026-10-09T15:11:22","modified_gmt":"2026-10-09T13:11:22","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.schiumapostdesign.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><em>Last updated: 9 October 2026<\/em><\/p>\n\n\n<p class=\"wp-block-paragraph\">This notice explains how personal data of visitors to www.schiumapostdesign.com and customers of Schiuma Post Design is processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (\u201cGDPR\u201d) and Italian Legislative Decree 196\/2003 as amended.<\/p>\n\n\n<h2 class=\"wp-block-heading\">1. Data controller<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Tommaso Schiuma \u2013 Schiuma Post Design<br>Via Santa Cesarea 29bis, Matera (MT), Italy<br>VAT no. IT01206900779<br>E-mail: <a href=\"mailto:info@schiumapostdesign.com\">info@schiumapostdesign.com<\/a><\/p>\n\n\n<h2 class=\"wp-block-heading\">2. What data we collect<\/h2>\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Order and invoicing data:<\/strong> first and last name, company name if any, billing and shipping address, e-mail, phone number, tax code or VAT number, SDI code or PEC if provided, details of the products purchased.<\/li>\n\n\n<li><strong>Payment data:<\/strong> card or PayPal details are entered directly on the payment providers\u2019 systems; we do not store them and only receive the result of the transaction.<\/li>\n\n\n<li><strong>Customer account data:<\/strong> if you create an account, username, e-mail, password (encrypted) and order history.<\/li>\n\n\n<li><strong>Contact data:<\/strong> the information you send us by e-mail, WhatsApp or through forms on the site.<\/li>\n\n\n<li><strong>Newsletter subscription:<\/strong> e-mail address and any optional data.<\/li>\n\n\n<li><strong>Browsing data:<\/strong> IP address, browser and device type, pages visited, date and time, collected by the site\u2019s systems and, with your consent where required, by analytics and marketing tools (see the <a href=\"https:\/\/www.schiumapostdesign.com\/en\/cookie-policy\/\">Cookie Policy<\/a>).<\/li>\n<\/ul>\n\n\n<h2 class=\"wp-block-heading\">3. Purposes and legal bases<\/h2>\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Managing orders, payments, shipping, returns and customer support<\/strong> \u2013 performance of a contract (Art. 6(1)(b) GDPR).<\/li>\n\n\n<li><strong>Tax and accounting obligations<\/strong> \u2013 legal obligation (Art. 6(1)(c) GDPR).<\/li>\n\n\n<li><strong>Managing your customer account<\/strong> \u2013 performance of a contract at your request (Art. 6(1)(b) GDPR).<\/li>\n\n\n<li><strong>Answering your enquiries<\/strong> \u2013 pre-contractual steps at your request and legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).<\/li>\n\n\n<li><strong>Sending the newsletter<\/strong> \u2013 consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the link in every e-mail.<\/li>\n\n\n<li><strong>Website security and prevention of fraud and unauthorised access<\/strong> \u2013 legitimate interest (Art. 6(1)(f) GDPR).<\/li>\n\n\n<li><strong>Usage statistics and personalised advertising<\/strong> (Google Analytics, Meta Pixel) \u2013 consent (Art. 6(1)(a) GDPR) given through the cookie banner, which you can withdraw at any time.<\/li>\n\n\n<li><strong>Protecting the controller\u2019s rights<\/strong> in case of disputes \u2013 legitimate interest (Art. 6(1)(f) GDPR).<\/li>\n<\/ul>\n\n\n<p class=\"wp-block-paragraph\">Providing the data required for orders is mandatory: without it the purchase cannot be completed. Providing any other data is optional.<\/p>\n\n\n<h2 class=\"wp-block-heading\">4. Who we share data with<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Data is processed by the controller and, only where necessary, by providers acting as processors or as independent controllers:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Aruba S.p.A.<\/strong> (Italy) \u2013 website and database hosting;<\/li>\n\n\n<li><strong>Stripe<\/strong>, through Automattic\u2019s WooPayments, and <strong>PayPal<\/strong> \u2013 payment processing;<\/li>\n\n\n<li><strong>GLS Italy<\/strong> and other couriers \u2013 order delivery;<\/li>\n\n\n<li><strong>Mailchimp<\/strong> (Intuit Inc., USA) \u2013 newsletter delivery;<\/li>\n\n\n<li><strong>Google Ireland Ltd \/ Google LLC<\/strong> \u2013 Google Analytics and related services (Site Kit, Google Fonts);<\/li>\n\n\n<li><strong>Meta Platforms Ireland Ltd<\/strong> \u2013 Meta Pixel and measurement of ads on Facebook and Instagram; WhatsApp for conversations you start;<\/li>\n\n\n<li><strong>Automattic Inc.<\/strong> \u2013 services related to WooCommerce;<\/li>\n\n\n<li>our accountant and advisers, for tax obligations;<\/li>\n\n\n<li>public authorities, where required by law.<\/li>\n<\/ul>\n\n\n<p class=\"wp-block-paragraph\">Data is never sold or made public.<\/p>\n\n\n<h2 class=\"wp-block-heading\">5. Transfers outside the European Union<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Some providers (for example Google, Meta, Mailchimp, Stripe, PayPal) may process data in the United States. Transfers rely on the EU-U.S. Data Privacy Framework adequacy decision for certified companies, or on the Standard Contractual Clauses approved by the European Commission.<\/p>\n\n\n<h2 class=\"wp-block-heading\">6. How long we keep data<\/h2>\n\n\n<ul class=\"wp-block-list\">\n<li>order and invoice data: 10 years, as required by tax and civil law;<\/li>\n\n\n<li>customer account: for as long as it remains active; you can ask for it to be deleted at any time;<\/li>\n\n\n<li>contact requests: for as long as needed to handle them and no longer than 24 months afterwards;<\/li>\n\n\n<li>newsletter: until you withdraw your consent;<\/li>\n\n\n<li>analytics and marketing data: for the period stated in the <a href=\"https:\/\/www.schiumapostdesign.com\/en\/cookie-policy\/\">Cookie Policy<\/a> and in the settings of the services used;<\/li>\n\n\n<li>technical security logs: only for as long as strictly necessary.<\/li>\n<\/ul>\n\n\n<h2 class=\"wp-block-heading\">7. Your rights<\/h2>\n\n\n<p class=\"wp-block-paragraph\">You may at any time request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Articles 15-21 GDPR). You can withdraw any consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise your rights, write to <a href=\"mailto:info@schiumapostdesign.com\">info@schiumapostdesign.com<\/a>.<\/p>\n\n\n<p class=\"wp-block-paragraph\">You also have the right to lodge a complaint with the Italian Data Protection Authority (<a href=\"https:\/\/www.garanteprivacy.it\/web\/garante-privacy-en\" target=\"_blank\" rel=\"noopener\">Garante per la protezione dei dati personali<\/a>) or with the supervisory authority of your country.<\/p>\n\n\n<h2 class=\"wp-block-heading\">8. Cookies<\/h2>\n\n\n<p class=\"wp-block-paragraph\">For information on the cookies we use and how to manage your preferences, please see the <a href=\"https:\/\/www.schiumapostdesign.com\/en\/cookie-policy\/\">Cookie Policy<\/a>.<\/p>\n\n\n<h2 class=\"wp-block-heading\">9. Changes<\/h2>\n\n\n<p class=\"wp-block-paragraph\">This notice may be updated. The current version is always published on this page, with the date of the last update.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>Last updated: 9 October 2026 This notice explains how personal data of visitors to www.schiumapostdesign.com and customers of Schiuma Post Design is processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (\u201cGDPR\u201d) and Italian Legislative Decree 196\/2003 as amended. 1. Data controller Tommaso Schiuma \u2013 Schiuma Post DesignVia Santa Cesarea 29bis, Matera (MT), [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-4775","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.schiumapostdesign.com\/en\/wp-json\/wp\/v2\/pages\/4775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.schiumapostdesign.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.schiumapostdesign.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.schiumapostdesign.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.schiumapostdesign.com\/en\/wp-json\/wp\/v2\/comments?post=4775"}],"version-history":[{"count":1,"href":"https:\/\/www.schiumapostdesign.com\/en\/wp-json\/wp\/v2\/pages\/4775\/revisions"}],"predecessor-version":[{"id":4780,"href":"https:\/\/www.schiumapostdesign.com\/en\/wp-json\/wp\/v2\/pages\/4775\/revisions\/4780"}],"wp:attachment":[{"href":"https:\/\/www.schiumapostdesign.com\/en\/wp-json\/wp\/v2\/media?parent=4775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}