Privacy Policy

Last updated: May 22, 2026

This privacy policy describes how we collect, use, store, and share the personal data of users who visit our e-commerce site nottesud, in accordance with Regulation (EU) 2016/679 (GDPR), particularly Articles 13 and 14.

1. Data Controller

  • Controller: Militello Daniele (Sole Proprietorship)
  • Registered office: Via Vittorio Emanuele 112, 90020 Vicari (PA), Italy
  • VAT number: IT07288450823
  • Email: dmilitello04@gmail.com

2. Categories of Data Collected

Navigation data (IP, browser, pages visited, referrer); data provided during purchase (name, surname, email, address, phone); data related to purchases (orders, amounts, history); technical cookies (see Cookie Policy).

3. Purpose and Legal Basis

  • Execution of the sales contract — Art. 6.1.b GDPR
  • Fulfillment of tax and accounting obligations — Art. 6.1.c GDPR
  • Marketing and profiling via cookies (only if activated with consent) — Art. 6.1.a GDPR
  • Fraud prevention and site security — Art. 6.1.f GDPR

4. Recipients of the Data

  • Shopify Inc. (Canada/USA) — Data Processor. Transfer to USA with Standard Contractual Clauses.
  • Shopify Payments / Stripe — Payment processing.
  • PayPal (Europe) S.à r.l. et Cie (Luxembourg) — Payment processing.
  • Shipping couriers (BRT, GLS, Poste Italiane, DHL) — Order delivery.

5. Data Transfer Outside the EU

Transfers to the USA are protected by Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Art. 46 GDPR. Shopify privacy policy: https://www.shopify.com/legal/privacy

6. Retention Period

  • Purchase data and tax documentation: 10 years (D.P.R. 600/73)
  • Navigation data: maximum 24 months
  • Consent records: 5 years

7. Data Subject Rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21). Requests to dmilitello04@gmail.com. Response within 30 days.

Complaint to the supervisory authority: Garante per la Protezione dei Dati Personali (Italian Data Protection Authority).

8. Updates

The Controller reserves the right to make changes to this Policy at any time.