Privacy Policy

The controller of personal data is Planimetrie.net srl, Innovative Startup, based in Via Camillo Finocchiaro Aprile 126, 95129 Catania (CT) – VAT ID: 06173710879. The Data Protection Officer can be reached at the address tingiricolors@gmail.com.

We collect the following personal data:

• Contact data (name, surname, email, phone number) provided voluntarily at the time of ordering or contact
• Shipping data (address, city, zip code, country) necessary to fulfill orders
• Navigation data and technical cookies for the proper functioning of the site
• Email address for newsletter subscription (only with explicit and separate consent)
• Order-related data (purchased products, amounts, payment method) for accounting and tax purposes
• Data provided in the context of assistance requests, complaints, or returns

Payment data (card number, IBAN, etc.) is never stored on our servers: it is handled directly by certified payment processors (Stripe) in compliance with PCI-DSS standards. We only receive confirmation of the transaction outcome.

Your data is processed exclusively for the following purposes:

• Management, fulfillment, and tracking of purchase orders
• Communications related to the order (purchase confirmation, shipping notice with tracking, electronic invoice)
• Sending newsletters and promotional communications (only with prior explicit consent, with the possibility to unsubscribe at any time via the "Unsubscribe" link present in every email)
• Management of customer support requests, complaints, and return or refund procedures
• Fulfillment of tax, accounting, and legal obligations required by Italian and European regulations
• Prevention of fraud, unauthorized access, and protection of site security
• Improvement of service through aggregate and anonymous analysis of user behavior

The processing of your data is based on the following legal bases pursuant to the GDPR (EU Reg. 2016/679):

• Execution of the contract – for the management of orders, shipments, and after-sales service (art. 6, par. 1, lett. b)
• Explicit consent – for sending the newsletter and promotional communications (art. 6, par. 1, lett. a)
• Legal obligation – for the retention of tax, accounting, and invoice data (art. 6, par. 1, lett. c)
• Legitimate interest – for customer support, return management, and fraud prevention (art. 6, par. 1, lett. f)

• Order and tax data: retained for 10 years as required by Italian tax regulations (D.P.R. 600/1973 and art. 2220 c.c.)
• Newsletter data: retained until consent is revoked; deleted within 30 days of the cancellation request
• Support data (tickets, chat): retained for 3 years from the closure of the case, unless required for litigation purposes
• Navigation and technical log data: retained for a maximum of 12 months for cybersecurity needs

Your personal data may be shared exclusively with the following parties, to the extent strictly necessary:

• Couriers and shipping services (e.g., BRT, GLS, SDA, Poste Italiane) — only name, address, and phone number for delivery
• PCI-DSS certified payment processors (Stripe Inc.) — for the secure management of online transactions
• Technological platforms for hosting, transactional email, and site management — bound by Data Processing Agreements (DPA)
• Accountants and tax advisors — within the limits of legal accounting and tax obligations
• Public authorities and law enforcement — exclusively in cases provided for by law or by order of the judicial authority

We do not sell, rent, or transfer your data to third parties for commercial, advertising, or profiling purposes.

Some of our technology providers (e.g., Stripe for payments, cloud hosting services) are based or process data outside the European Economic Area (EEA). In such cases, we ensure that the transfer takes place in compliance with the GDPR, through:

• Standard Contractual Clauses (SCC) approved by the European Commission (Art. 46, para. 2, let. c GDPR)
• Adequacy decisions issued by the European Commission for countries deemed adequate (Art. 45 GDPR)
• Appropriate certifications and guarantees from individual providers (e.g., Stripe is certified under the EU-U.S. Data Privacy Framework)

Pursuant to EU Regulation 2016/679 (GDPR), you may exercise the following rights at any time:

• Access – obtain confirmation of the existence of processing and receive a copy of the data (Art. 15)
• Rectification – correct inaccurate or incomplete data concerning you (Art. 16)
• Erasure ("right to be forgotten") – request the deletion of your data, subject to legal obligations (Art. 17)
• Portability – receive your data in a structured, machine-readable format and transfer it to another controller (Art. 20)
• Restriction of processing – request the suspension of processing in certain cases (Art. 18)
• Opposition – object to processing for direct marketing purposes or legitimate interest (Art. 21)
• Withdrawal of consent – withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal

To exercise your rights, please send a written request to tingiricolors@gmail.com. We will respond within 30 days of receipt. In case of complex or numerous requests, the deadline may be extended by another 60 days, with the obligation to inform you within the first month.

We use the following types of cookies:

• Essential technical cookies: necessary for the operation of the site (user session, shopping cart, language preferences). They do not require consent.
• Security cookies: used to prevent fraud and protect the integrity of transactions.

We do not use profiling, behavioral tracking, or third-party cookies for advertising purposes. You can manage or disable cookies in your browser settings; disabling technical cookies may compromise some site functionality (e.g., the shopping cart).

If you believe that the processing of your personal data violates the GDPR or current national legislation, you have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali:

• Website: www.garanteprivacy.it
• Postal address: Piazza Venezia 11, 00187 Roma
• Email: garante@gpdp.it
• PEC: protocollo@pec.gpdp.it

However, we invite you to contact us directly first: we will do our best to resolve any issue as quickly as possible.