1. Data Controllers

The data controllers are BI&DO S.r.l., with registered office at Via Panà 56/BIS, 35027 (PD), tax code and VAT number 04307300287, and BLUMORE S.r.l., with registered office at Via Donizetti 6, Fermo (FM), tax code and VAT number 02366680441, each for the processing within their respective competence.

For information regarding personal data protection and to exercise your rights, you may write to customerservice@albertoguardiani.it

Requests regarding orders, shipments, returns, and customer service can be sent to customerservice@albertoguardiani.it

2. Personal data processed

The categories of data processed depend on the features used and the information communicated by the user.

Identification and contact data: first name, last name, email address, phone number, billing and shipping addresses, and any necessary tax data.

Account data: information provided during registration and required for managing the personal area.

Purchase data: products ordered, amounts, payment status, deliveries, returns, refunds, and support requests.

Communications: information contained in messages sent to Customer Service or through contact forms.

Browsing data: technical information generated during the use of the site, such as IP address, device and browser characteristics, access logs, and page interactions.

Data collected via cookies and similar tools: information whose processing is described in the dedicated cookie policy.

3. Purposes and legal bases

Purchases and order management

Data is used to receive and process orders, manage payments, organize deliveries, and provide support regarding returns, refunds, and warranties.

The legal basis is the performance of the contract or pre-contractual measures requested by the user.

Registration and personal account

Data provided during registration is processed to create and manage the account and make related features available.

The legal basis is the performance of the service requested by the user.

Information and support requests

Contact details and message content are used to respond to requests and provide support. When the request concerns a purchase or service, the processing is necessary for the performance of a contract or pre-contractual measures. For other requests, the processing is based on the legitimate interest in responding to received communications.

Regulatory compliance

Data is processed to comply with tax, accounting, administrative, and other obligations required by applicable law.

The legal basis is the fulfillment of a legal obligation.

Promotional communications

With the user's consent, data may be used to send newsletters, updates on collections, offers, and commercial initiatives.

Consent is optional and may be revoked at any time via the unsubscribe link in the communications or by writing to the privacy contact.

Security and protection of rights

Data may be processed to prevent illicit use, protect IT systems, and establish, exercise, or defend a legal claim.

The legal basis is the legitimate interest in the security of the services and the protection of rights, while respecting the user's fundamental interests and freedoms.

Analysis and advertising personalization

Any processing carried out through analysis, profiling, and advertising tools is described in the cookie and tracking services policy. Where required, such tools are used based on the user's consent.

4. Provision of data

The provision of data necessary for the purchase, delivery, and compliance with regulatory obligations is indispensable for order management. Failure to provide it may prevent the service from being rendered.

Data required to create an account or respond to a request is necessary to provide the related functionality.

Consent for promotional purposes and optional tracking is free: refusing it does not prevent making purchases.

5. Payments via cards, PayPal, and Klarna

Available payment methods include Visa and Mastercard, PayPal, and Klarna, according to the options shown at checkout.

Data necessary for the execution of the transaction is communicated to the selected service provider. Payment information is processed according to the security procedures and policies applicable to each service.

If Klarna is selected, information necessary for the management of the purchase and payment is transmitted to the relevant provider. Depending on the service chosen, Klarna may perform identity checks, fraud prevention, and payment eligibility assessments.

To understand the processing methods, any automated assessments, and the rights exercisable against the providers, the user is invited to consult the information provided by PayPal, Klarna, and other suppliers during the payment process.

6. Processing methods and recipients

Data is processed using electronic and, where necessary, paper-based tools, adopting technical and organizational measures appropriate to the risks.

Access to the data may be granted to authorized persons and entities that perform activities necessary for providing the services, such as IT providers, logistics operators, couriers, payment processors, consultants, and support providers.

These entities act as data processors or independent controllers, depending on the activities performed and their respective obligations. Data may also be disclosed to authorities when required by law.

7. Transfers outside the European Economic Area

The use of international technology suppliers and payment services may involve the processing of data outside the European Economic Area.

When such transfers occur, they must comply with the conditions set out in the GDPR, through European Commission adequacy decisions or other applicable safeguards, such as standard contractual clauses and any necessary supplementary measures.

For information on transfers regarding your data and the safeguards adopted, you may contact the controllers at the provided privacy address.

8. Data retention

Data is retained for the time necessary for the purposes for which it is collected, according to the following criteria:

• purchase data is retained to manage the contractual relationship, support, and legal obligations;
• accounting documents are retained for the terms prescribed by applicable law;
• account data is retained for the duration of the service, except for data that must be kept for legal obligations or the protection of rights;
• support requests are retained for the time necessary for their management and the resolution of any disputes;
• data used for marketing is processed until consent is withdrawn or the purpose ceases, with periodic verification of the need to retain it;
• technical data is retained for the time necessary for system operation and security;
• the durations of cookies and tracking tools are indicated in the relevant policy.

In the event of disputes, relevant data may be retained for the time necessary to protect the rights involved.

9. Cookies and third-party services

The site uses cookies and similar technologies for its operation and, according to the user's preferences, for further purposes.

Information on declared services, data processed, and related tracking tools can be found in the dedicated policy, which also contains a link to the Cookie Policy.

Consents regarding optional tracking can be modified or revoked using the preference management tools available on the site.

10. User rights

In the cases and limits provided by the GDPR, the user may:

• obtain access to their data and information on processing;
•  request the rectification of inaccurate data or the completion of incomplete data;
• request the deletion or limitation of processing;
• obtain data portability;
• object to processing based on legitimate interest;
• object at any time to direct marketing;
• withdraw consent, without affecting the lawfulness of previous processing.

Requests can be sent to info@albertoguardiani.it. When necessary, proportionate information may be requested to verify the identity of the requester.

The user also has the right to lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali), through the procedures indicated at www.garanteprivacy.it.

11. Updates to the policy

This policy may be updated in relation to changes in regulations, organization, or services offered.

Updates are published on this page and, when necessary, communicated to users in an appropriate manner.