Privacy policy

PRIVACY POLICY

Pursuant to Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree no. 196 of June 30, 2003, as amended by Italian Legislative Decree no. 101 of August 10, 2018 ("Privacy Code"), we hereby inform you about the methods of collection and processing of your personal data within the scope of using the website and the services offered by Archivio Tessile.

1. Data Controller
The Data Controller for the processing of personal data is:

BRAND di Mario Salvatore, trading as "Archivio Tessile"

Registered Office: Via Domenico Cimarosa 91/D, 80127 Naples (NA), Italy Operational

Headquarters and Returns Management: Via Montagna Spaccata 290, i.s. 4B c/o Mario Salvatore - 80126 Naples (NA), Italy

VAT Number: IT10095051214

Email: info@archiviotessile.it

2. Personal Data Collected
We collect the following categories of personal data based on your interaction with our Services.

2.1 Data provided directly by you

  • Identity and contact data: first name, last name, billing address, shipping address, telephone number, email address.
  • Payment data: credit/debit card numbers, financial account details, transaction details (the actual payment is handled through secure payment platforms; full card data is not stored on our servers).
  • Account data: username, password (encrypted), account preferences and settings.
  • Communications: content of communications with our customer service.

2.2 Data collected automatically

  • Browsing and device data: IP address, browser type, operating system, unique device identifiers.
  • Usage data: pages visited, products viewed, items added to the shopping cart or wishlist, purchase history.

2.3 Data collected from third parties

  • Service providers: data provided by our partners to complete transactions (e.g., payment confirmations from payment platforms).
  • Shopify: data collected through the Shopify platform, which hosts our store (see Section 9).

3. Purposes and Legal Bases of Processing



Purpose

Data processed

Legal basis

Performance of the contract: order management, payments, shipments, order-related communications, returns and refunds management, customer support.

Contact details, payment data, account data, transaction data.

Art. 6, par. 1, lit. b), GDPR – performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract.

Legal obligations: issuance and storage of invoices, tax and accounting compliance, responding to requests from authorities.

Contact details, payment data, transaction data.

Art. 6, par. 1, lit. c), GDPR – legal obligation to which the Controller is subject (Art. 22 Italian D.P.R. 633/1972 – VAT; Art. 2214 et seq. of the Italian Civil Code – accounting records).

Direct marketing (newsletter and offers): sending promotional communications, newsletters, personalized offers via email.

Email address, name, purchase history.

Art. 6, par. 1, lit. a), GDPR – explicit, specific, free, and revocable consent.

Profiling and targeted advertising (Meta Pixel): analysis of browsing and purchasing preferences to show personalized ads on Instagram and Facebook.

Browsing data, purchase history, interactions with the website.

Art. 6, par. 1, lit. a), GDPR – explicit, specific, free, and revocable consent, provided via the cookie banner.

Legitimate interest: improvement of the website, fraud prevention, security of IT systems.

Browsing data, device data.

Art. 6, par. 1, lit. f), GDPR – legitimate interest of the Controller, balanced with the rights of the data subjects.


4. Newsletter and Marketing

4.1 The collection of the email address for sending the newsletter and promotional communications takes place exclusively subject to the explicit and optional consent of the data subject, provided through the specific form on the website (footer and pop-up). In the event of subscription via a pop-up offering a 10% discount, obtaining the discount is not conditioned upon remaining subscribed to the newsletter: the data subject may revoke consent at any time without losing the benefit already received.

4.2 Consent for marketing is specific, free, and revocable at any time. Failure to provide consent or its revocation does not affect in any way the possibility to purchase on the website or the performance of the contract.

4.3 Marketing communications concern the apparel and textile products of Archivio Tessile (clothing items, fashion accessories) and may include offers, new arrivals, sales, and promotional initiatives.

4.4 To revoke consent, simply click the "Unsubscribe" link present in every promotional email, or write to info@archiviotessile.it. The revocation does not affect the lawfulness of the processing based on consent before its revocation.

5. Meta Pixel (Facebook/Instagram) and Cookies
5.1 The Meta Pixel is installed on the website, which allows tracking user interactions with the site and displaying personalized ads on Facebook and Instagram. The activation of the Pixel and the subsequent processing of data for profiling and targeted advertising purposes take place exclusively subject to explicit and optional consent, provided through the cookie banner present upon accessing the website.

5.2 Consent is provided separately from other purposes and can be revoked at any time by changing cookie preferences via the dedicated panel accessible from the website.

5.3 For information on the use of data by Meta, please refer to the Privacy Policy of Meta Platforms, Inc., available on Meta's website.

6. Recipients of Personal Data
Personal data may be communicated to the following categories of recipients:

  • Shopify Inc. and affiliates, as the e-commerce platform provider and data processor, for hosting the online store, order management, and payment processing (see Section 9).
  • Payment service providers (e.g., PayPal, Shopify Payments, Stripe), for processing transactions.
  • Couriers and shipping agents (Poste Italiane, BRT/DPD), limited to the data necessary for the delivery of orders.
  • IT and cloud service providers, for system maintenance and security.
  • Professional consultants (accountant, employment consultant), for tax and accounting obligations.
  • Public and supervisory authorities, in cases provided for by law.
  • Meta Platforms, Inc., limited to data collected via Pixel and only subject to prior consent (see Section 5).


    The complete and updated list of data processors is available upon request by writing to info@archiviotessile.it.

7. Transfer of Data Outside the European Economic Area (EEA)
7.1 Some of our service providers, including Shopify Inc. and Meta Platforms, Inc., are based in non-EU countries, particularly in the United States.

7.2 Data transfers to non-EU countries take place exclusively in the presence of appropriate safeguards, such as the Standard Contractual Clauses (SCCs) approved by the European Commission, or on the basis of an adequacy decision, or other conditions provided for by Chapter V of the GDPR.

7.3 For Shopify, transfers are governed by the Standard Contractual Clauses integrated into Shopify's Data Processing Agreement (DPA). For more information, you can consult the privacy documentation on Shopify's website.

8. Data Retention Period
Personal data is retained for the time necessary to achieve the purposes for which it was collected:

Category

Retention period

Data relating to orders and transactions

10 years from the date of the order (tax and accounting obligations pursuant to Art. 2220 of the Italian Civil Code; Art. 22 Italian D.P.R. 600/1973).

Account data

Until the account is deleted by the user or after 24 months of inactivity, unless legal obligations apply.

Marketing data (newsletter)

Until the revocation of consent or, in the absence of revocation, for 24 months from the last interaction with our communications.

Profiling data (cookies/Pixel)

In accordance with the periods indicated in the cookie banner and in any case no later than 12 months from consent, unless renewed.

Browsing data (logs)

6 months, unless retention is necessary for security purposes or the investigation of offenses.

Once the retention terms have expired, the data is deleted or irreversibly anonymized.

9. Relationship with Shopify
9.1 Our online store is hosted on the Shopify platform. Shopify International Ltd. acts as a Data Processor on behalf of Archivio Tessile, based on a Data Processing Agreement (DPA), for purposes connected to the provision of the Services.

9.2 Shopify may also process your personal data as an independent Data Controller for its own purposes, including platform improvement and fraud prevention. For such processing, Shopify is independently responsible. For more information on how Shopify uses your personal data as a Controller and on your rights, you can consult Shopify's Privacy Policy at: https://privacy.shopify.com.

9.3 To exercise your rights regarding personal data processed within the scope of our Services, please contact us at info@archiviotessile.it. If your request concerns data processed by Shopify as an independent Controller, we may direct you to the appropriate channel provided by Shopify.

10. Data Subject Rights
In accordance with Articles 15-22 of the GDPR, you have the right to:

  • Access (Art. 15): obtain confirmation as to whether or not your data is being processed and access your personal data.
  • Rectification (Art. 16): obtain the correction of inaccurate data or the integration of incomplete data.
  • Erasure / Right to be forgotten (Art. 17): obtain the erasure of your personal data, in cases provided for by law.
  • Restriction of processing (Art. 18): obtain the restriction of processing, in cases provided for by law.
  • Data Portability (Art. 20): receive your data in a structured format and transmit it to another Controller.
  • Objection (Art. 21): object to processing based on legitimate interest, for reasons related to your particular situation.
  • Withdrawal of consent (Art. 7, par. 3): withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.


To exercise your rights, write to info@archiviotessile.it. We will respond within one month, extendable by two months in cases of particular complexity. Before processing the request, we may need to verify your identity.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali - www.garanteprivacy.it), pursuant to Article 77 of the GDPR, if you believe that the processing of your data violates applicable regulations.

You will not suffer any discrimination for exercising your rights.

11. Minors’ Data
11.1 Our Services are not intended for minors. Pursuant to Article 2-quinquies of Italian Legislative Decree no. 196/2003, a minor who has reached the age of 14 may independently give consent to the processing of their personal data in relation to information society services. For minors under the age of 14, consent must be given by the person exercising parental responsibility.
11.2 If you are a parent or guardian of a minor who has provided us with their personal data without your consent, you can contact us at info@archiviotessile.it to request its deletion.

12. Data Security
We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, or disclosure, including SSL/TLS encryption protocols for transactions, multi-factor authentication for system access, and continuous platform monitoring.
We invite you to use secure channels to communicate confidential information to us and not to share your account credentials with third parties.

13. Amendments to This Policy
This Privacy Policy may be updated periodically. We will publish the updated version on the website, indicating the date of the last update. In the event of material changes, we will inform registered users via email and with a notice on the website.

14. Contact Information
For any questions regarding this Policy or to exercise your rights, please contact us:

Email: info@archiviotessile.it

Controller: Brand di Mario Salvatore, trading as “Archivio Tessile”

Registered Office: Via Domenico Cimarosa 91/D, 80127 Naples (NA), Italy

Operational Headquarters and Returns Management: Via Montagna Spaccata 290, i.s. 4B c/o Mario Salvatore - 80126 Naples (NA), Italy