This notice explains how personal data are processed in accordance with EU Regulation 2016/679 (GDPR).
Data Controller: RAVINALE S.r.l., Via del Cittadino, 87, 59100 Prato (PO), Italy.
Processing contact: privacy@massimoravinale.com.
Data categories
Identification data, contact data, shipping/billing data, order and payment metadata, account credentials, and technical navigation data.
Purposes and legal bases
Contract execution (orders, shipping, support), legal obligations (tax/accounting), legitimate interests (security, fraud prevention), and consent-based activities (optional marketing/cookies).
Retention
Contractual and accounting data are generally retained up to 10 years, unless longer retention is required for legal defense.
Recipients
Authorized staff and external processors (hosting, payment, shipping, IT support, professional advisors) strictly for service delivery.
Data subject rights
You can request access, rectification, erasure, restriction, portability, objection, and consent withdrawal by writing to privacy@massimoravinale.com.
Supervisory authority
You may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).