Privacy policy

Privacy Policy

 

1. Data Controller

The data controller is VASO s.r.l., with registered office VIA IV GIUGNO 15/17 – 20013 – MAGENTA (MI), P. VAT IT10567910962.

2. Type of data collected

a) Data provided voluntarily: name, surname, email address, shipping address, telephone number, payment data, etc., when you place orders, sign up for the newsletter, contact support or use the WhatsApp button.

b) Technical / navigation data: IP address, browser type, operating system, data on how you navigate the site (pages visited, time, traffic origin), server logs.

c) Cookies and similar technologies (see Cookie Policy) which allow the collection of data for technical, analytical and (with consent) profiling / marketing purposes.

3. Purpose of the processing

Your data may be processed for:

  • execute the sales contract (order, shipping, invoicing);

  • manage the subscription to the newsletter and sending promotional communications, if you consent;

  • provide customer support;

  • fulfill legal and accounting obligations;

  • carry out statistical analyzes and improve the site;

  • personalized marketing activities, if you consent (e.g. sending offers based on your purchases / interests).

4. Legal basis of the processing

  • Contract / execution of contract (for orders).

  • Express consent (for the newsletter, marketing, profiling).

  • Legal obligations.

  • Legitimate interest of the owner (e.g. site security, fraud prevention, service improvement), to the extent that your interest and rights do not prevail.

5. Data retention

The data will be kept for the time necessary to fulfill the purposes for which they were collected (e.g. until the order is completed, until the end of the commercial relationship) and for the times prescribed by law (e.g. tax legislation).
The data collected via newsletter / consent may be retained until you revoke your consent.

6. Recipients of the data

The data can be communicated to:

  • service providers (shipping, payment, hosting, customer support);

  • internal collaborators who need the data to carry out their tasks;

  • competent authorities if required by law;

  • marketing / advertising partners, only if you have given specific consent.

7. Transfer to third countries

If data is transferred outside the European Union, this will only happen in compliance with current EU regulations (e.g. via standard contractual clauses) and ensuring an adequate level of protection.

8. Rights of the interested party

You have the right to:

  • obtain access to your data;

  • rectify inaccurate data;

  • delete data (“right to be forgotten”);

  • limit treatment;

  • oppose the processing, including marketing / profiling activities;

  • data portability (in the cases provided).

You can exercise these rights by contacting the owner at the contact details indicated.

9. Revocation of consent

When the processing is based on your consent (newsletter, profiling, marketing), you can revoke your consent at any time, without prejudice to the lawfulness of the processing carried out before the revocation.

10. Data security

We adopt adequate technical and organizational measures to protect data from unauthorized access, loss, destruction or alteration.

11. Policy Changes

This privacy policy may be updated. The most recent version is always available on the site.
Any substantial changes will be communicated.