INFORMATION ON THE PROTECTION OF PERSONAL DATA

1. Data Controller

The Data Controller is Soleg – contact email: info@soleg.it

2. Types of data collected

We collect the following categories of data:

  • Identification data: name, surname, email, shipping and billing address
  • Payment data: managed through third-party providers (e.g. Stripe, PayPal), not processed directly by Soleg
  • Technical and navigation data: IP address, browser type, time spent on the site
  • Marketing data: email activity, campaigns, advertising pixels (with consent)

3. Purpose of the processing

The data is collected for the following purposes:

  • Order and shipping management
  • Customer service and after-sales assistance
  • Legal and tax compliance
  • Sending promotional communications, newsletters and updates (only with consent)
  • Anonymous statistical analysis to improve user experience

4. Legal basis for processing

  • Contract: for the management of orders and shipments
  • Legal obligation: for tax data retention
  • Consent: for newsletters, promotions and advertising tracking
  • Legitimate interest: for site security and navigation optimization

5. Processing methods

The data is processed using secure electronic tools and is protected by appropriate technical and organizational measures to ensure confidentiality and integrity.

6. Data retention

The data is stored:

  • for tax purposes: 10 years
  • for marketing purposes: until consent is revoked
  • for user accounts: as long as active or upon request for deletion

7. Data recipients

The data may be shared with:

  • Payment service providers (Stripe, PayPal)
  • Logistics and shipping providers
  • E-commerce platforms (e.g. Shopify/WooCommerce)
  • Marketing and analytics tools (Google, Meta, Mailchimp)
  • Accounting and tax professionals

We never share your data with third parties for their own commercial purposes.

8. User rights

You can request at any time:

  • Access to your data
  • Rectification or cancellation
  • Limitation or opposition to processing
  • Data portability
  • Withdrawal of consent (without affecting processing already carried out)

9. Data transfer outside the EU

Some tools used (e.g., Meta, Google, Mailchimp) may involve transfers to non-EU countries, which adopt standard contractual clauses approved by the European Commission.