Privacy Policy

1. Data Controller

The Data Controller is Elle Design Srl,
registered office: Via delle Ortensie 6/8, 70026 Modugno (BA), Italy
VAT No. 07978310725
Email: info@elledesignitalia.com

Phone: +39 080 918 4980


2. Types of Data Collected

The Elle Design Srl e-commerce website collects and processes the following categories of personal data:

Identification data: name, surname, shipping and billing address.

Contact data: phone number, email address.

Payment data: information necessary for payment processing (amount, method, order reference).

Technical data: IP address, device type, browser, cookies, and access logs.

Browsing and preference data: viewed products, shopping cart, order history.



3. Purposes of Data Processing

Personal data is collected and processed for the following purposes:

1. Management and fulfillment of orders placed on the website.

2. Issuance of invoices and fulfillment of accounting and tax obligations.

3. Communications related to orders or customer service.

4. Sending of promotional communications, offers, and newsletters (subject to consent).

5. Statistical analysis and user experience improvements on the website.

6. Compliance with legal or regulatory obligations.



4. Legal Basis for Processing

Data processing is based on:

Performance of a contract or pre-contractual measures (Art. 6, para. 1, letter b GDPR);

Consent of the data subject (Art. 6, para. 1, letter a GDPR);

Compliance with legal obligations (Art. 6, para. 1, letter c GDPR);

Legitimate interest of the Data Controller (Art. 6, para. 1, letter f GDPR).



5. Methods of Processing

Personal data is processed using electronic and telematic tools, adopting appropriate security measures to ensure confidentiality, integrity, and availability of the data.



6. Data Retention

Purchase and billing data: retained for 10 years (for accounting and tax compliance).

Marketing data: retained until consent is withdrawn.

Browsing data: retained for up to 12 months.



7. Data Communication and Disclosure

Data may be communicated to:

Couriers and logistics companies for product delivery.

Payment institutions and banks.

Accounting and tax consultants.

IT service providers, hosting companies, and e-commerce platforms.

Public authorities, when required by law.

Data will not be disclosed or transferred to third parties for unauthorised commercial purposes.



8. Data Transfer Outside the EU

Personal data is stored on servers located within the European Union.
If a transfer to non-EU countries becomes necessary, appropriate safeguards will be implemented in accordance with Articles 44–49 of the GDPR.



9. Rights of the Data Subject

Pursuant to Articles 15–22 of the GDPR, users may exercise the following rights:

Obtain confirmation as to whether their personal data is being processed;

Request correction, updating, or deletion of data;

Restrict or object to processing;

Withdraw consent at any time;

Request data portability.

File a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Requests should be sent to: l.losacco@elledesign.it