Privacy Policy

The data controller for personal data is Planimetrie.net srl, Startup Innovativa, based in Via Camillo Finocchiaro Aprile 126, 95129 Catania (CT) – VAT ID: 06173710879. The Data Protection Officer can be reached at the address tingiricolors@gmail.com.

We collect the following personal data:

• Contact data (first name, last name, email, phone number) provided voluntarily at the time of order or contact
• Shipping data (address, city, zip code, country) necessary to fulfill orders
• Navigation data and technical cookies for the proper functioning of the site
• Email address for newsletter subscription (only upon explicit and separate consent)
• Order-related data (products purchased, amounts, payment method) for accounting and tax purposes
• Data provided in the context of assistance requests, complaints, or returns

Payment data (card number, IBAN, etc.) are never stored on our servers: they are handled directly by certified payment processors (Stripe) in compliance with PCI-DSS standards. We exclusively receive confirmation of the transaction result.

Your data are processed exclusively for the following purposes:

• Management, fulfillment, and tracking of purchase orders
• Communications related to the order (purchase confirmation, shipping notification with tracking, electronic invoice)
• Sending newsletters and promotional communications (only with prior explicit consent, with the possibility to unsubscribe at any time via the "Unsubscribe" link present in every email)
• Management of customer support requests, complaints, and return or refund procedures
• Fulfillment of tax, accounting, and legal obligations required by Italian and European legislation
• Prevention of fraud, unauthorized access, and protection of site security
• Service improvement through aggregate and anonymous analysis of user behavior

The processing of your data is based on the following legal bases pursuant to the GDPR (EU Reg. 2016/679):

• Performance of the contract – for the management of orders, shipments, and after-sales service (art. 6, par. 1, letter b)
• Explicit consent – for sending newsletters and promotional communications (art. 6, par. 1, letter a)
• Legal obligation – for the storage of tax and accounting data and invoices (art. 6, par. 1, letter c)
• Legitimate interest – for customer support, return management, and fraud prevention (art. 6, par. 1, letter f)

• Order and tax data: stored for 10 years as required by Italian tax regulations (D.P.R. 600/1973 and art. 2220 c.c.)
• Newsletter data: stored until consent is withdrawn; deleted within 30 days of the unsubscription request
• Support data (tickets, chats): stored for 3 years from the closing of the case, except for litigation requirements
• Browsing data and technical logs: stored for a maximum of 12 months for cybersecurity requirements

Your personal data may be shared exclusively with the following parties, to the strictly necessary extent:

• Couriers and shipping services (e.g., BRT, GLS, SDA, Poste Italiane) — only name, address, and phone number for delivery
• PCI-DSS certified payment processors (Stripe Inc.) — for secure management of online transactions
• Technology platforms for hosting, transactional email, and site management — bound by data processing agreements (DPA)
• Accountants and tax consultants — within the limits of legal accounting and tax obligations
• Public authorities and law enforcement — exclusively in cases provided by law or by order of the judicial authority

We do not sell, rent, or transfer your data to third parties for commercial, advertising, or profiling purposes.

Some of our technology providers (e.g., Stripe for payments, cloud hosting services) are based or process data outside the European Economic Area (EEA). In such cases, we ensure that the transfer complies with the GDPR through:

• Standard Contractual Clauses (SCC) approved by the European Commission (art. 46, par. 2, letter c GDPR)
• Adequacy decisions issued by the European Commission for countries deemed adequate (art. 45 GDPR)
• Appropriate certifications and safeguards from individual providers (e.g., Stripe is certified under the EU-U.S. Data Privacy Framework)

Pursuant to EU Regulation 2016/679 (GDPR), you may exercise the following rights at any time:

• Access – obtain confirmation of the existence of processing and receive a copy of the data (art. 15)
• Rectification – correct inaccurate or incomplete data concerning you (art. 16)
• Erasure ("right to be forgotten") – request the deletion of your data, except for legal obligations (art. 17)
• Portability – receive your data in a structured, machine-readable format and transfer it to another controller (art. 20)
• Restriction of processing – request the suspension of processing in certain cases (art. 18)
• Opposition – object to processing for direct marketing purposes or legitimate interest (art. 21)
• Withdrawal of consent – withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise your rights, send a written request to tingiricolors@gmail.com. We will respond within 30 days of receipt. In case of complex or numerous requests, the deadline may be extended by another 60 days, with the obligation to inform you within the first month.

We use the following types of cookies:

• Essential technical cookies: necessary for the website's operation (user session, shopping cart, language preferences). They do not require consent.
• Security cookies: used to prevent fraud and protect the integrity of transactions.

We do not use profiling cookies, behavioral tracking cookies, or third-party cookies for advertising purposes. You can manage or disable cookies in your browser settings; disabling technical cookies may compromise some website functionality (e.g., the shopping cart).

If you believe that the processing of your personal data violates the GDPR or current national legislation, you have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali:

• Website: www.garanteprivacy.it
• Postal address: Piazza Venezia 11, 00187 Rome
• Email: garante@gpdp.it
• PEC: protocollo@pec.gpdp.it

However, we invite you to contact us directly first: we will do our best to resolve any issues as quickly as possible.