Privacy Policy

This policy is provided pursuant to articles 13-14 of EU Regulation 2016/679 (GDPR) and describes how we collect, use, and protect your personal data when you use the website www.nurariviera.it

1. Data Controller

The Data Controller is A.S. Code di Andrea – VAT ID 09847451219

Registered office: Via Bologna 124 Villaricca (NA) 80010

Contact: nura.assistenza@gmail.com

2. Types of data collected

We may collect the following categories of data:

Personal and contact data (name, surname, address, phone number, email).
Payment data (only through secure payment providers like Shopify Payments; we do not store card details).
Browsing data (IP address, device information, access logs)
Cookies and similar technologies (see Cookie Policy section).

3. Purpose of processing

Your data is processed for:

Managing orders, payments, and shipments.
Providing customer support.
Sending you order-related communications.
(With your consent) sending newsletters or promotional communications.
Ensuring security and preventing fraudulent activities.

4. Legal basis for processing

Data processing is based on:

Contract performance (for orders, payments, deliveries).
Legal obligations (invoicing and accounting).
Consent (for newsletters and marketing).
Legitimate interest (for website security and service improvement).

5. Processing methods and retention

Data is processed using electronic tools and stored for the time necessary for the stated purposes.

Order data: retained for 10 years for tax and accounting purposes.
Marketing data: until consent is withdrawn.

6. Data sharing

Your data may be shared with:

Service providers (e.g., couriers, payment systems, hosting, Shopify).
Legal and tax advisors.
Competent authorities, if required by law.
We never sell or transfer your personal data to third parties for commercial purposes.

7. Transfer of data outside the EU

Shopify may transfer data to countries outside the EU (e.g., Canada, USA). In these cases, appropriate protective measures are applied in accordance with the GDPR.

8. User rights

At any time, you can exercise the rights provided by the GDPR (Articles 15-22), including:

Accessing your personal data.
Requesting its rectification or erasure.
Restricting or objecting to processing.
Requesting data portability.
Withdrawing consent (without affecting the lawfulness of processing already carried out).

To exercise your rights, please write to: nura.assistenza@gmail.com.