Privacy Policy
Privacy Policy
1. Who We Are
This Privacy Policy explains how La Giclée di Milano collects, uses, stores and protects personal data when you visit our website, contact us or purchase our products.
The data controller is:
LA GICLEE DI MILANO DI BORAN ALTUN
Via Quintino di Vona, 32
20062 Cassano d'Adda (MI)
Italy
VAT Number: 14807750964
REA: MI-2808303
Email: b.altun@lagiclee.com
PEC: b.altun@pec.it
Our operational workshop and shipping address is:
Via Giuseppe Mazzini, 8
24045 Fara Gera d'Adda (BG)
Italy
The workshop address is used for operational activities, shipping and, where specifically instructed by us, returns or other physical correspondence.
2. Personal Data We Collect
Depending on how you interact with our website, we may collect and process different categories of personal data, including:
- name and surname;
- billing and shipping address;
- email address;
- telephone number;
- order and transaction information;
- information relating to products purchased or requested;
- communications you send to us;
- information provided when you contact customer support;
- technical information relating to your use of our website, such as IP address, browser type, device information and website activity;
- cookie and similar technology information, where applicable.
We only request or process information that is relevant to the purposes described in this Privacy Policy.
3. How We Collect Personal Data
We may collect personal data when you:
- browse or use our website;
- create or use a customer account, where available;
- place an order;
- provide information during checkout;
- contact us;
- subscribe to our newsletter or other marketing communications;
- interact with our website through cookies or similar technologies, where applicable.
4. Why We Use Your Personal Data
We may process your personal data for the following purposes:
Processing and fulfilling orders
We use your personal data to process your order, produce the artwork you have purchased, arrange payment, prepare shipment and deliver your order.
Customer service
We use your information to respond to questions, requests, complaints and other communications concerning our products or services.
Returns, refunds and legal guarantees
We may process information relating to your order, delivery and communications with us in order to handle returns, withdrawal requests, refunds, damaged deliveries, production defects and legal guarantee claims.
Legal and accounting obligations
We may process and retain personal data where necessary to comply with legal, tax, accounting or other regulatory obligations applicable to our business.
Website operation and security
We may process technical information to operate, maintain and secure our website, prevent fraud or abuse, and investigate technical or security incidents.
Marketing communications
Where required by applicable law, we will send marketing communications only where we have an appropriate legal basis, such as your consent.
You can withdraw your consent to marketing communications at any time.
5. Legal Bases for Processing
Depending on the circumstances, we process personal data on the following legal bases:
- Performance of a contract: where processing is necessary to process and fulfil your order or provide a service you have requested.
- Legal obligation: where processing is necessary to comply with legal, tax, accounting or regulatory obligations.
- Legitimate interests: where processing is necessary for purposes such as website security, fraud prevention, business administration, protection of our legal rights or responding to enquiries, provided that these interests do not override your rights and freedoms.
- Consent: where applicable law requires your consent, including certain marketing or non-essential cookie activities.
The applicable legal basis depends on the specific processing activity.
6. Sharing Personal Data
We may share personal data with service providers and third parties where this is necessary for the purposes described in this Privacy Policy.
Depending on the services used by our store, these may include:
- Shopify, which provides the e-commerce platform hosting and operating our online store;
- payment service providers;
- shipping and delivery companies;
- IT, hosting, technical support and security service providers;
- accounting, tax, legal or professional advisers where necessary;
- analytics, advertising or marketing service providers where these services are used and where the applicable legal requirements are satisfied;
- public authorities or other recipients where disclosure is required by law.
We do not sell your personal data.
Where third parties process personal data on our behalf, we take appropriate steps to ensure that the processing is carried out in accordance with applicable data protection requirements.
Shopify provides tools and contractual arrangements intended to support merchants with GDPR obligations, but each merchant remains responsible for its own processing practices and configuration.
7. International Data Transfers
Some service providers we use may process personal data outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, we will use appropriate safeguards as required by applicable data protection law.
These safeguards may include an adequacy decision of the European Commission, Standard Contractual Clauses or another legally recognised transfer mechanism.
8. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected.
The retention period depends on the type of information and the reason for processing.
For example:
- order and transaction information may be retained for as long as necessary to fulfil the contract and comply with applicable accounting, tax and legal obligations;
- customer service communications may be retained for as long as reasonably necessary to handle the request and protect our legitimate interests;
- marketing data processed on the basis of consent is retained until consent is withdrawn or the data is otherwise no longer required;
- technical and security information may be retained for periods appropriate to the relevant security and operational purposes.
When personal data is no longer required, it will be deleted or anonymised where appropriate, subject to any legal retention obligations.
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies to operate the website, provide requested functionality, understand how the website is used and, where applicable, support analytics and marketing activities.
Some cookies may be necessary for the operation and security of the website, while others may require your consent under applicable law.
Further information about the cookies and similar technologies used on our website is provided in our Cookie Policy.
Where required, you can manage your preferences through the cookie consent mechanism provided on our website.
10. Your Data Protection Rights
Subject to the conditions and limitations provided by applicable law, you may have the right to:
- obtain confirmation as to whether we process your personal data;
- access your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing activities;
- request data portability where applicable;
- withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to legal exceptions or limitations.
The European Commission confirms these rights under the GDPR, including access, rectification, erasure, restriction, portability and objection.
11. How to Exercise Your Rights
To exercise your data protection rights or ask questions about the processing of your personal data, please contact us at:
Email: b.altun@lagiclee.com
You may also contact us by post at our registered office:
LA GICLEE DI MILANO DI BORAN ALTUN
Via Quintino di Vona, 32
20062 Cassano d'Adda (MI)
Italy
We may request additional information where reasonably necessary to verify your identity and protect personal data from unauthorised disclosure.
We will respond to valid requests within the time limits required by applicable law. Under the GDPR, requests should generally be answered without undue delay and, in principle, within one month.
12. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.
For Italy, the supervisory authority is:
Garante per la protezione dei dati personali
Piazza Venezia, 11
00187 Roma
Italy
The Garante provides procedures for individuals to submit complaints concerning alleged violations of data protection law.
13. Data Security
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction, alteration or unlawful processing.
However, no method of transmission or storage over the internet can be guaranteed to be completely secure.
14. Third-Party Websites and Services
Our website may contain links to websites or services operated by third parties.
This Privacy Policy does not apply to third-party websites or services. We recommend reviewing the privacy policies of those third parties before providing them with personal data.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, services or applicable legal requirements.
The updated version will be published on this page with the revised date where appropriate.
16. Contact
If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:
LA GICLEE DI MILANO DI BORAN ALTUN
Via Quintino di Vona, 32
20062 Cassano d'Adda (MI)
Italy
Email: b.altun@lagiclee.com
PEC: b.altun@pec.it
VAT Number: 14807750964