Privacy Policy

The controller of personal data is Planimetrie.net srl, Startup Innovativa, based in Via Camillo Finocchiaro Aprile 126, 95129 Catania (CT) – VAT No.: 06173710879. The Data Protection Officer can be reached at the address tingiricolors@gmail.com.

We collect the following personal data:

• Contact details (name, surname, email, phone number) provided voluntarily at the time of order or contact
• Shipping details (address, city, ZIP code, country) necessary to process orders
• Navigation data and technical cookies for the proper functioning of the site
• Email address for newsletter subscription (only upon explicit and separate consent)
• Order-related data (purchased products, amounts, payment method) for accounting and tax purposes
• Data provided as part of assistance requests, complaints, or returns

Payment data (card number, IBAN, etc.) are never stored on our servers: they are managed directly by certified payment processors (Stripe) in compliance with PCI-DSS standards. We only receive confirmation of the transaction outcome.

Your data is processed exclusively for the following purposes:

• Management, fulfillment, and tracking of purchase orders
• Order-related communications (purchase confirmation, shipping notification with tracking, electronic invoice)
• Sending of newsletters and promotional communications (only with prior explicit consent, with the possibility to unsubscribe at any time via the "Unsubscribe" link present in every email)
• Management of customer support requests, complaints, and return or refund procedures
• Fulfillment of tax, accounting, and legal obligations provided by Italian and European regulations
• Prevention of fraud, unauthorized access, and protection of site security
• Service improvement through aggregate and anonymous analysis of user behavior

The processing of your data is based on the following legal bases pursuant to the GDPR (EU Reg. 2016/679):

• Performance of a contract – for order management, shipping, and after-sales service (Art. 6, par. 1, lit. b)
• Explicit consent – for sending newsletters and promotional communications (Art. 6, par. 1, lit. a)
• Legal obligation – for the storage of tax and accounting data and invoices (Art. 6, par. 1, lit. c)
• Legitimate interest – for customer support, return management, and fraud prevention (Art. 6, par. 1, lit. f)

• Order and tax data: retained for 10 years as required by Italian tax regulations (D.P.R. 600/1973 and Art. 2220 of the Civil Code)
• Newsletter data: retained until consent is withdrawn; deleted within 30 days of the cancellation request
• Support data (tickets, chat): retained for 3 years from the closure of the file, unless required for litigation purposes
• Browsing data and technical logs: retained for a maximum of 12 months for cybersecurity purposes

Your personal data may be shared exclusively with the following parties, to the extent strictly necessary:

• Couriers and shipping services (e.g., BRT, GLS, SDA, Poste Italiane) — name, address, and telephone number only for delivery
• PCI-DSS certified payment processors (Stripe Inc.) — for secure online transaction management
• Technological platforms for hosting, transactional email, and website management — bound by Data Processing Agreements (DPA)
• Accountants and tax consultants — within the limits of legal accounting and tax obligations
• Public authorities and law enforcement agencies — exclusively in cases provided by law or by order of the judicial authority

We do not sell, rent, or transfer your data to third parties for commercial, advertising, or profiling purposes.

Some of our technology providers (e.g., Stripe for payments, cloud hosting services) are based or process data outside the European Economic Area (EEA). In such cases, we ensure that the transfer complies with the GDPR, through:

• Standard Contractual Clauses (SCC) approved by the European Commission (Art. 46, par. 2, lit. c GDPR)
• Adequacy decisions issued by the European Commission for countries deemed adequate (Art. 45 GDPR)
• Appropriate certifications and guarantees from individual providers (e.g., Stripe is certified under the EU-U.S. Data Privacy Framework)

Under EU Regulation 2016/679 (GDPR), you may exercise the following rights at any time:

• Access – obtain confirmation of the existence of processing and receive a copy of the data (Art. 15)
• Rectification – correct inaccurate or incomplete data concerning you (Art. 16)
• Erasure ("right to be forgotten") – request the deletion of your data, subject to legal obligations (Art. 17)
• Portability – receive your data in a structured, machine-readable format and transfer it to another controller (Art. 20)
• Restriction of processing – request the suspension of processing in certain cases (art. 18)
• Objection – object to processing for direct marketing purposes or legitimate interest (art. 21)
• Withdrawal of consent – withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise your rights, send a written request to tingiricolors@gmail.com. We will respond within 30 days of receipt. In case of complex or numerous requests, the deadline may be extended by another 60 days, with the obligation to inform you within the first month.

We use the following types of cookies:

• Essential technical cookies: necessary for the site to function (user session, shopping cart, language preferences). They do not require consent.
• Security cookies: used to prevent fraud and protect the integrity of transactions.

We do not use profiling, behavioral tracking, or third-party cookies for advertising purposes. You can manage or disable cookies in your browser settings; disabling technical cookies may compromise some site functionalities (e.g., the shopping cart).

If you believe that the processing of your personal data violates the GDPR or current national legislation, you have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali:

• Website: www.garanteprivacy.it
• Postal address: Piazza Venezia 11, 00187 Rome
• Email: garante@gpdp.it
• PEC: protocollo@pec.gpdp.it

However, we invite you to contact us directly first: we will do our best to resolve any issue as quickly as possible.