Privacy policy

Privacy Policy of Split‑Toe.it

(Compliant with EU Regulation 2016/679 – GDPR)

1. Data Controller

The Data Controller responsible for the processing of personal data is: Split‑Toe by Pietro Maria Sbrugnera VAT Number: IT04587040249 Registered office: Piazzetta delle Poste, 36028, Rossano Veneto (VI), IT Email: floorplan.exe@gmail.com | info@split-toe.it PEC: pietro.sbrugnera@pec.it

2. Types of Data Collected

The website processes the following categories of personal data:

Identification data: first name, last name, shipping and billing address.
Contact data: email address, phone number.
Payment data: processed exclusively by external payment providers (e.g., PayPal, Stripe, Shopify Payments). The website does not store credit card numbers.
Technical data: IP address, browsing logs, cookies identifiers, user‑agent.
Order‑related data: purchased items, amounts, purchase preferences.
Data submitted through forms: customer support requests, returns, commercial inquiries.

3. Purposes and Legal Bases of Processing

Personal data is processed for the following purposes:

Purpose	Legal Basis
Order management, payments, shipping	Performance of a contract
Customer support	Performance of a contract
Tax and accounting obligations	Legal obligation
Fraud prevention and website security	Legitimate interest
Marketing communications (newsletter, if enabled)	Consent
Traffic analytics and statistics	Consent (non‑essential cookies)

4. Processing Methods

Data is processed using electronic and telematic tools, adopting appropriate technical and organizational measures to ensure security, integrity, and confidentiality.

5. Data Retention

Order‑related data: 10 years (legal obligation).
Customer support data: up to 24 months.
Newsletter data: until consent is withdrawn.
Cookies: according to the durations specified in the Cookie Policy.

6. Data Recipients

Personal data may be shared with:

Shipping and courier services
Payment service providers (e.g., PayPal, Stripe)
E‑commerce platform (e.g., Shopify)
Accounting and tax consultants
Technical service providers (hosting, email, CDN)

All third‑party providers are appointed as Data Processors under Article 28 GDPR.

7. Data Transfers Outside the EU

Some services (e.g., Shopify, Google Analytics, email marketing tools) may involve data transfers outside the EU. Such transfers occur under Standard Contractual Clauses (SCCs) or other mechanisms compliant with Articles 44–49 GDPR.