Privacy policy

Last updated: 4 October 2026

Vetrina Fiorentina, hereinafter “we” or “the Data Controller”, respects your privacy and is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Italian legislation.

1. Data Controller

Vetrina Fiorentina di Pignatiello Andrea
Via San Mamante 43, 50053 Empoli (FI), Italy

Email: info@vetrinafiorentina.it
Certified email (PEC): vetrinafiorentina@pec.it
Landline: +39 0571 143 6615
Mobile: +39 344 794 6009

2. Personal data collected

We collect the following categories of data, only to the extent necessary for the purposes described in this policy:

  • Contact details: first name, surname, email address and telephone number.
  • Shipping and billing details: address, city, postcode and country.
  • Browsing data: IP address, browser type, pages visited and session duration.
  • Purchase data: order history and products purchased. Vetrina Fiorentina does not store full payment card details.
  • Reviews: the content of reviews submitted through Judge.me.

3. Purposes and legal bases for processing

Personal data may be processed for the following purposes:

  • Performance of a contract, under Article 6(1)(b) of the GDPR: managing orders, shipping, payments and customer support.
  • Compliance with legal obligations, under Article 6(1)(c) of the GDPR: fulfilling tax, accounting and administrative obligations.
  • Consent, under Article 6(1)(a) of the GDPR: sending marketing communications and newsletters, and using non-essential cookies and technologies where consent is required.
  • Legitimate interests, under Article 6(1)(f) of the GDPR: fraud prevention, website security and aggregate statistical analysis.
  • Newsletter subscription is optional and is not required to make a purchase. We collect your email address and, if provided, your name to send product news and promotional communications on the basis of your consent. You can withdraw your consent at any time using the unsubscribe link in our emails or by writing to info@vetrinafiorentina.it, without affecting the lawfulness of processing carried out before withdrawal.

4. Cookies and tracking technologies

The website uses technical, analytics, functional and marketing cookies.

Consent to the use of non-essential cookies is collected and managed through Avada Cookie Consent in accordance with applicable legislation.

For the full list of cookies used and to manage your preferences, please consult our Cookie Policy and use the “Manage preferences” button available in the cookie banner or website footer.

5. Sharing data with third parties

Personal data may be shared with the following parties and service providers, only to the extent necessary for the stated purposes:

  • Shopify – e-commerce platform, hosting, newsletter subscription management and sending marketing communications through Shopify Messaging.
  • Shopify Payments and PayPal – payment processing.
  • Google LLC – Google Analytics and Google Ads.
  • Meta Platforms Inc. – Meta Pixel and advertising services.
  • TikTok Inc. – TikTok Pixel and advertising services.
  • Judge.me Inc. – review collection and management.
  • Avada Cookie Consent – cookie consent management.
  • Manifattura Italiana Pelletterie S.R.L.S. – Old Angler, our supplier and manufacturer: receives the data necessary to prepare and ship orders directly and, where necessary, to manage returns, such as the customer's name, delivery address, contact details needed for transport and information about the products ordered.
  • Couriers and shipping providers – order shipping and delivery.
  • Competent authorities – when required by law.

Service providers process data in accordance with their own privacy policies and, when acting on behalf of the Data Controller, under the applicable agreements and instructions.

We do not sell personal data to third parties.

6. Data transfers outside the European Union

Some service providers, including Shopify, Google and Meta, may transfer or process personal data outside the European Economic Area.

Where necessary, appropriate safeguards are adopted to protect the data, including Standard Contractual Clauses approved by the European Commission or other mechanisms provided for by applicable legislation.

7. Data retention

Personal data is retained for the time necessary to fulfil the purposes for which it was collected and subsequently for the period required by legal obligations:

  • Order data: up to 10 years, where necessary to fulfil tax and accounting obligations.
  • Data used for marketing activities: until consent is withdrawn or deletion is requested.
  • Browsing data and logs: for a maximum period of 12 months, unless further security needs or legal obligations apply.
  • Reviews: until account deletion, removal of the review or a request from the data subject, where applicable.

8. Your rights

You have the right to:

  • obtain confirmation as to whether personal data concerning you is being processed;
  • access your personal data;
  • request correction of inaccurate data or completion of incomplete data;
  • request deletion of your data in the cases provided for by law;
  • request restriction of processing;
  • receive your data in a structured, machine-readable format in the cases covered by the right to data portability;
  • object to processing based on legitimate interests;
  • withdraw previously given consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, visit the “GDPR Privacy Requests” page or write to info@vetrinafiorentina.it.

9. Right to lodge a complaint

If you believe that the processing of your personal data infringes applicable legislation, you have the right to lodge a complaint with the Italian Data Protection Authority:

www.garanteprivacy.it

10. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect legislative, technical or organisational changes.

Any changes will be published on this page together with the relevant update date.