Data Controller

The Data Controller is DProject snc di TRALLI DANIELE & C., with registered office at Via Castelfranco 22/D, Zona Industriale, 40017 San Giovanni in Persiceto (BO), Italy, Tax Code 00624970372, VAT No. 00519591200, in the person of its pro tempore legal representative.

Privacy contacts: privacy@linea-garden.it — Tel. +39 051.822062.

This notice is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR) for the website www.linea-garden.it and does not extend to any other websites that may be reached via links from this site.

Types of data processed

• Browsing data: IP addresses, URI addresses of requested resources, time of the request, device and browser parameters. This data is used in aggregate form for statistical and security purposes.
• Data provided voluntarily: name, surname, addresses, email, telephone number and other data provided through the website's forms, the creation of a customer account, newsletter sign-up or contact requests.
• Order-related data: products purchased, customisations requested, billing and delivery addresses, order history.
• Payment data: handled directly by payment service providers; the Controller does not store full card details.
• Cookies: see the "Cookies" section of this notice.

Purposes and legal bases of processing

1. Managing orders and the sales contract (performance of a contract, Art. 6.1.b GDPR): order processing, production of customised items, payments, deliveries, customer service.
2. Legal obligations (legal obligation, Art. 6.1.c GDPR): invoicing, accounting and tax obligations.
3. Responding to contact requests (pre-contractual measures, Art. 6.1.b GDPR).
4. Sending the newsletter and marketing communications (consent, Art. 6.1.a GDPR): may be withdrawn at any time.
5. Statistics and website improvement (consent for non-technical cookies; legitimate interest for aggregate statistics, Art. 6.1.f GDPR).
6. Security and fraud prevention (legitimate interest, Art. 6.1.f GDPR).

Providing data for purposes 1–3 is necessary: failure to provide it will prevent the order or request from being fulfilled. Providing data for purposes 4–5 is optional.

Recipients of the data

The data may be shared with:

• Shopify International Ltd (Ireland) and the Shopify group companies, which host the e-commerce platform, acting as data processor;
• payment service providers (Shopify Payments, PayPal);
• couriers and shipping companies responsible for delivering orders;
• technical and communication service providers acting on behalf of the Controller;
• administrative, tax and legal consultants;
• parties authorised and appointed by the Controller.

The data will not be disclosed to the public.

Transfers outside the EU

Use of the Shopify platform may involve the transfer of data to Canada (a country subject to an adequacy decision by the European Commission) and to other third countries on the basis of the safeguards provided for in Articles 44 et seq. GDPR (standard contractual clauses).

Retention period

• Order and invoicing data: 10 years (civil and tax obligations).
• Data for contact requests: for as long as needed to handle the request.
• Newsletter data: until consent is withdrawn.
• Browsing data: for the technical time strictly necessary.

Cookies

The site uses technical cookies, necessary for the shop to function (browsing, basket, checkout, security), and — subject to consent — statistical and marketing cookies.

On your first visit, the cookie management banner provided by the Shopify platform lets you accept or reject non-technical cookies and change your preferences at any time via the dedicated link on the site. Refusing non-technical cookies does not affect browsing or the ability to make purchases.

Third-party cookies are subject to the privacy policies of their respective providers.

Data subjects' rights

Data subjects may at any time exercise the rights set out in Articles 15–22 GDPR: access, rectification, erasure, restriction, portability, objection to processing and withdrawal of consent (without affecting the lawfulness of processing carried out beforehand). Requests should be sent to privacy@linea-garden.it or to the registered office address.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

Changes to this notice

The Data Controller reserves the right to update this notice to reflect changes in legislation and in the services used. Substantial changes will be published prominently on the site.