Privacy Policy

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR)

Introduction

This information notice is provided for the website “Fabio Guzzano Art” (Website) owned by FABIO GUZZANO, located at Via G. Marconi, 55 – 37026 Pescantina (VR), with tax code GZZFBA67C07F205F (Data Controller), in its capacity as the Data Controller pursuant to the GDPR.

Purchases on the Website

Upon your provision of data, your personal data will be processed to enable you to make purchases on the Website.

Registration

The information and data required for registration will be used to allow you to access the reserved area of the Website and to use the online services offered by the Data Controller to registered users.

Marketing

With your consent, the Data Controller may process the personal data you provide to send you advertising material and/or newsletters related to its own or third-party products.

In compliance with the GDPR, we hereby inform you that the Data Controller will process your personal data under the following conditions.

Art. 1 – Purposes and Legal Basis of Processing. Mandatory or Optional Provision. Consequences of Refusal to Provide Data.

The processing of personal data is aimed at achieving the following purposes:

To allow registration on the Website and access to services reserved for registered users, as well as compliance with legal or regulatory obligations, particularly in administrative, accounting, and public security matters. The legal basis for processing is the necessity for the Data Controller to take pre-contractual measures at the request of the data subject or to fulfill a legal obligation.
For online purchases, to enable the conclusion of the purchase contract and the correct execution of related operations (and, where required by applicable law, to fulfill tax obligations). The legal basis for processing is the Data Controller's obligation to perform the contract with the data subject or to comply with legal obligations.
For direct email marketing (soft spam): The Data Controller may send promotional emails regarding similar products to those you have purchased, unless you object. The legal basis is the Data Controller’s legitimate interest in sending such communications, which is considered equivalent to the interest of the data subject in receiving them.
For sending newsletters and conducting market research, including customer satisfaction surveys, as well as sending promotional material about the Data Controller’s products or third-party products via email (marketing purposes). The legal basis is the data subject's consent.
To enable the chat service, if available, allowing users to contact and be contacted by the Data Controller while browsing the Website, subject to your consent. The legal basis is the Data Controller’s legitimate interest, which is considered equivalent to the data subject’s interest in using the chat service.
To respond to customer service inquiries via email or phone. Providing data is optional, but refusal will prevent the Data Controller from responding. The legal basis is the Data Controller’s legitimate interest in responding to user inquiries.

Failure to provide data for the purposes mentioned in points (a) and (b) is optional. However, since this processing is necessary for making a purchase on the Website, refusal to provide data will prevent the purchase.

Consent for marketing purposes is entirely optional. However, refusal will result in the inability to receive promotional materials and newsletters.

Regardless of consent for marketing, the Data Controller may still process your personal data solely for compliance with legal obligations and contractual relationships.

You may object to the processing of your personal data at any time via the unsubscribe link in any promotional email.

Payment Card Data

To make a payment using one of the payment cards offered on the Website, users must enter their card details on a secure page that communicates directly with the payment service provider (acting as an independent data controller), without passing through the Data Controller’s servers. The data is encrypted.

For payments via PayPal, users will be redirected to an external page where they must provide their details to PayPal (acting as an independent data controller). Personal data will not transit through the Website’s servers.

The processing of payment data is necessary to complete the purchase contract. Refusal to provide such data will prevent the completion of the purchase.

Art. 2 – Processing Methods

Your personal data will primarily be processed using electronic or automated means, ensuring security and confidentiality in compliance with the GDPR.

The acquired information and processing methods will be relevant and not excessive concerning the services provided. The data will also be managed and stored in controlled-access environments.

Art. 3 – Data Communication and Disclosure

Your data may be shared with:

Public Authorities or entities entitled to access personal data under legal or regulatory provisions.
Third-party companies providing printing, packaging, shipping, and/or delivery services for products purchased on the Website.
Postal offices, couriers, suppliers (e.g., dropshipping vendors), or freight forwarders for product delivery.
Banks and financial institutions managing online payment transactions.
IT service providers handling hardware and software maintenance for the Data Controller.
Third-party companies sending advertising communications on behalf of the Data Controller.
Employees or collaborators of the Data Controller.
Customer care service providers.
Entities managing online payment transactions.
Legal, administrative, and tax consulting firms, judicial authorities, Chambers of Commerce, and labor offices.

Your data will not be disclosed except in anonymous and aggregated form for statistical or research purposes.

Art. 4 – Data Controller

The Data Controller can be contacted at:

FABIO GUZZANO
Via G. Marconi, 55 – 37026 Pescantina (VR)
Phone: 0452213117
Email: fabio@upgrade4.it

Art. 5 – Data Retention

Personal data will be stored and processed for marketing purposes for 24 months. After this period, the Data Controller may request consent renewal or anonymize the data for statistical purposes.

For other processing purposes, data will be retained only as long as necessary to provide services.

If a user account is deleted, its data will be retained for up to 90 days for administrative purposes, except where legal obligations require longer retention.

Art. 6 – Data Subject Rights

Under Article 13 of the GDPR, you have the right to:

Request access, rectification, deletion, or restriction of processing.
Object to processing and request data portability.
Withdraw consent at any time without affecting the lawfulness of prior processing.
File a complaint with a supervisory authority (e.g., the Italian Data Protection Authority).

These rights can be exercised by contacting the Data Controller at the provided contact details.

Art. 7 – Amendments

The Data Controller reserves the right to modify this privacy notice at any time, informing users appropriately. Users are encouraged to review the notice regularly.