Information provided pursuant to Regulation (EU) 2016/679 (GDPR) on how Art-Squad collects and processes the personal data of users and customers.
1Data Controller
The Data Controller is Franco Mozzillo di Francesco Mozzillo, with registered office at Via Solferino 33 – 81031 Aversa (CE), Italy. VAT no. 03105570612 — Tax code MZZFNC67D19F839K.
Email: contact@art-squad.com — Tel. +39 081 3778773.
2Types of data processed
We process the data you provide directly and data collected automatically while browsing:
- Identification and contact data: name, surname, shipping and billing address, email, phone number.
- Payment data: handled directly by the payment service providers PayPal, Woo Payment, Stripe; we do not store full card details on our systems.
- Purchase data: orders, products purchased, transaction history.
- Browsing data: IP address, browser and device type, pages visited, data collected via cookies and similar technologies (see Cookie Policy).
- Account data (if you register an account): credentials, preferences.
3Purposes and legal bases
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Order management, shipping, after-sales support | Performance of the contract (art. 6.1.b) |
| Tax, accounting and legal obligations (invoicing, document retention) | Legal obligation (art. 6.1.c) |
| Registration and account management | Performance of the contract (art. 6.1.b) |
| Sending newsletters and promotional communications | Consent (art. 6.1.a) |
| Site security and fraud prevention | Legitimate interest (art. 6.1.f) |
| Legal defence and exercise of rights | Legitimate interest (art. 6.1.f) |
Providing the data for order fulfilment is necessary: without it we cannot conclude the contract. Consent to marketing is optional and can be withdrawn at any time.
4Method of processing
Data is processed using electronic and paper tools, adopting technical and organisational measures adequate to ensure its security and confidentiality (art. 32 GDPR).
5Data recipients
Data may be disclosed to parties acting as Data Processors (art. 28 GDPR), including:
- hosting / e-commerce platform provider (Serverplan);
- payment service providers PayPal, Woo Payment, Stripe;
- Gelato (Gelato ASA and group companies) as print-on-demand and shipping provider: it manufactures the products to order and delivers them directly to the customer through its own couriers and global logistics network;
- additional couriers and shippers possibly engaged for delivery;
- email marketing provider Mail Poet;
- consultants (accountant, lawyer) and authorities, where required by law.
Data is neither disseminated nor sold to third parties.
6Transfer of data outside the EU
We sell and ship worldwide and production takes place through a global network of print centres (Gelato operates in numerous countries, including outside the EU/EEA). For this reason, certain strictly necessary data (in particular the recipient’s name and delivery address) may be transferred outside the EU/EEA, both to manufacture the product at the nearest print centre and to deliver to customers located outside the EU/EEA. Such transfers take place in compliance with articles 44-49 GDPR, on the basis of adequate safeguards such as adequacy decisions or Standard Contractual Clauses (SCC) approved by the European Commission. You may request a copy of the safeguards applied.
7Retention period
- Contractual and order data: for the duration of the relationship and in any case 10 years from the transaction, for civil and tax obligations.
- Marketing data: until consent is withdrawn or, in the absence of activity, 24 months.
- Browsing/cookie data: as indicated in the Cookie Policy.
8Rights of the data subject
Pursuant to articles 15-22 GDPR you have the right to: access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent (without prejudice to processing already carried out). You can exercise these rights by writing to contact@art-squad.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority — Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
9Cookies
The site uses cookies and similar technologies. For details and to manage your preferences, see the Cookie Policy.
10Changes
We reserve the right to update this privacy notice. The current version is always published on this page with the date of last update.