Information provided pursuant to Regulation (EU) 2016/679 (GDPR) on how Art-Squad collects and processes the personal data of users and customers.
1Data Controller
The Data Controller is Franco Mozzillo di Francesco Mozzillo, with registered office at Via Solferino 33 – 81031 Aversa (CE), Italy. VAT no. 03105570612 — Tax code MZZFNC67D19F839K.
Email: contact@art-squad.com — Tel. +39 081 3778773.
2Types of data processed
We process the data you provide directly and data collected automatically while browsing:
- Identification and contact data: name, surname, shipping and billing address, email, phone number.
- Payment data: handled directly by the payment service providers PayPal, Woo Payment, Stripe; we do not store full card details on our systems.
- Purchase data: orders, products purchased, transaction history.
- Browsing data: IP address, browser and device type, pages visited, data collected via cookies and similar technologies (see Cookie Policy).
- Account data (if you register an account): credentials, preferences.
3Purposes and legal bases
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Order management, shipping, after-sales support | Performance of the contract (art. 6.1.b) |
| Tax, accounting and legal obligations (invoicing, document retention) | Legal obligation (art. 6.1.c) |
| Registration and account management | Performance of the contract (art. 6.1.b) |
| Sending newsletters and promotional communications | Consent (art. 6.1.a) |
| Site security and fraud prevention | Legitimate interest (art. 6.1.f) |
| Legal defence and exercise of rights | Legitimate interest (art. 6.1.f) |
Providing the data for order fulfilment is necessary: without it we cannot conclude the contract. Consent to marketing is optional and can be withdrawn at any time.
4Method of processing
Data is processed using electronic and paper tools, adopting technical and organisational measures adequate to ensure its security and confidentiality (art. 32 GDPR).
5Data recipients
Data may be disclosed to parties acting as Data Processors (art. 28 GDPR), including:
- hosting / e-commerce platform provider (Serverplan);
- our printing and fulfilment partner, based in Italy, as print-on-demand and dispatch provider: it manufactures the products to order and hands them over to the courier for delivery;
- additional couriers and shippers possibly engaged for delivery;
- email marketing provider Mail Poet;
- consultants (accountant, lawyer) and authorities, where required by law.
Data is neither disseminated nor sold to third parties.
6Transfer of data outside the EU
Our products are manufactured in Italy, within the European Union: no transfer of data outside the EU/EEA takes place for production purposes.
A transfer may however occur when an order is shipped to a country outside the EU/EEA: in that case only the data strictly necessary for delivery (the recipient’s name, address and contact details) is passed to the carrier handling the shipment in the destination country. This transfer is necessary for the performance of the contract you have entered into with us (art. 49.1.b GDPR).
Some of the providers listed above (for example payment or email services) may also process data outside the EU/EEA: in those cases the transfer takes place in compliance with articles 44-49 GDPR, on the basis of adequacy decisions or Standard Contractual Clauses (SCC) approved by the European Commission. You may request a copy of the safeguards applied.
7Retention period
- Contractual and order data: for the duration of the relationship and in any case 10 years from the transaction, for civil and tax obligations.
- Marketing data: until consent is withdrawn or, in the absence of activity, 24 months.
- Browsing/cookie data: as indicated in the Cookie Policy.
8Rights of the data subject
Pursuant to articles 15-22 GDPR you have the right to: access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent (without prejudice to processing already carried out). You can exercise these rights by writing to contact@art-squad.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority — Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
9Cookies
The site uses cookies and similar technologies. For details and to manage your preferences, see the Cookie Policy.
10Changes
We reserve the right to update this privacy notice. The current version is always published on this page with the date of last update.