Legal
Privacy & Cookies
STUDIO DIPROFILO – Privacy Policy
In accordance with Arts. 13 and 14 of EU Regulation 2016/679 (GDPR), this document describes how the personal data of people who visit this site, contact us or place an order is processed.
Data Controller
DI PROFILO DI BONGIOVANNI SANDRA
Via Gerbole 30, Volvera (TO)
VAT / Tax ID: 10867430018
Email: info@diprofilo.it
Data, Purposes and Retention
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Shop orders | Full name, email, phone, shipping address (street, city, province, ZIP, country), optional notes, language, amounts, payment method and transaction identifier. We do not store payment card data. | Performance of the contract (Art. 6.1.b); accounting and tax obligations (Art. 6.1.c) | 10 years from the order date for completed orders. Cancelled or never-paid orders are anonymized after 24 months. On expiry, personal data is irreversibly erased; only amounts and dates remain, anonymously. |
| Contact form | Name, email, subject and message text; a non-reversible code derived from your IP address, used only to limit repeated submissions. | Pre-contractual steps and legitimate interest in answering enquiries (Art. 6.1.b and 6.1.f) | Messages: 12 months, then deleted automatically. IP-derived code: 7 days. |
| Visit statistics | Page visited, language, referring site and an anonymous identifier that changes every day, computed from IP and browser without storing them. No cookies, no third-party tools. | Legitimate interest in knowing how the site is used in aggregate form (Art. 6.1.f) | 90 days for detailed data; afterwards only aggregated daily totals. |
| Security of the admin area and private albums | IP address and context of failed access attempts, also as a code derived from the user name typed. | Legitimate interest in security (Art. 6.1.f) | 7 days. |
| Admin area access log (administrators only) | Date, IP address and outcome of every access attempt. | Legitimate interest in security (Art. 6.1.f) | 90 days. |
| Technical logs | Site errors and payment notifications received from the payment service provider; they may contain technical identifiers and email addresses. | Legitimate interest in security and correct operation (Art. 6.1.f) | 90 days. |
Providing the data marked as required in the forms is necessary to complete the order or answer the request; without it we cannot proceed. No profiling and no automated decision-making takes place. The hosting provider may additionally record technical access data (server logs) under its own policies.
Recipients
Data is not sold or used for marketing. It may be disclosed, only as far as necessary, to: the hosting and email provider of the site (data processors); Satispay S.p.A. if you choose to pay with Satispay; the courier in charge of delivery; professionals handling accounting and tax compliance; authorities where required by law. The controller does not transfer data outside the European Economic Area. All fonts and resources of the pages are served by this site itself: visiting it does not trigger connections to third-party services.
Your Rights
Under GDPR Arts. 15–22 you have the right to: access your data, request its rectification or erasure (within the retention obligations above), restrict processing, object to processing based on legitimate interest, and request data portability. To exercise these rights write to info@diprofilo.it; we reply within one month.
You also have the right to lodge a complaint with your national data protection authority (in Italy: www.garanteprivacy.it).
Cookie Policy
This site uses only technical cookies necessary for its correct operation. No profiling, marketing, or third-party analytics cookies are used.
Cookies in Use
| Name | Type | Purpose | Duration |
|---|---|---|---|
PHPSESSID |
Technical | Session management (cart, authentication) | Session |
diprofilo_lang |
Technical | Stores the selected language preference | 1 year |
diprofilo_cookie_consent |
Technical (localStorage) | Records acceptance of the cookie notice | Persistent (local) |
How to Disable Cookies
You can configure your browser to block or delete cookies. Note that disabling technical cookies may impair site functionality (e.g. the shopping cart will not work correctly).
Last updated: 20 October 2026