This notice explains which personal data we collect on this site, why, for how long we keep them and what you can ask of us. It is provided under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 29 October 2026.
Who is the data controller
Soc. Agr. Artemide
Via dell’Industria 1, Fraz. Dentecane, 83030 Pietradefusi (AV), Italy
VAT no. 02308210646
Email info@mieleartemide.com — phone +39 0825 962316
We do not have a Data Protection Officer: the cases in which article 37 of the Regulation requires one do not apply.
What data we process, why and for how long
| When | What data | Why and on what basis | For how long |
|---|---|---|---|
| You browse the site | IP address, date and time, requested page, browser type: the server’s technical logs. | To make the site work and protect it from abuse. Legitimate interest (art. 6.1.f). | Only as long as strictly necessary for security, then the logs are deleted. |
| You write to us through the contact form | Name, email, phone (optional), reason and text of the message. | To reply to you. Your consent and the pre-contractual steps you ask us for (art. 6.1.a and 6.1.b). | 24 months from the last exchange. The form does not store anything on the site: the request arrives as an email. |
| You ask for wedding favors or made-to-order gift packs | The same data as the contact form, plus the information about the event or occasion that you give us. | To prepare a proposal for you. Pre-contractual steps at your request (art. 6.1.b) and consent. | 24 months from the last exchange; if the request becomes an order, the order retention periods apply. |
| You place an order | First and last name, billing and shipping address, phone, email, the details of what you order. If you ask us for an invoice, also company name, VAT number and recipient code or certified email. | To conclude and ship the order, assist you, issue tax documents. Performance of the contract (art. 6.1.b) and legal tax and accounting obligations (art. 6.1.c). | 10 years, as article 2220 of the Italian Civil Code requires for accounting records. |
| You pay | You enter your card or payment method details in the Stripe form: we do not see them and we do not store them. We receive the outcome of the payment and the last four digits of the card. | To collect the price and prevent fraud. Performance of the contract (art. 6.1.b). | Same as orders. Stripe keeps its data according to its own notice. |
| You withdraw from the purchase | Name, email, order number, any products indicated, date and time of the declaration. | To handle the withdrawal and the refund, and to confirm it to you. Performance of the contract and legal obligations (art. 6.1.b and 6.1.c). | Same as orders. |
| You leave a review on Google | The name under which the review appears and its text, which are already public on our Google listing. | To show visitors real reviews. Legitimate interest (art. 6.1.f). We do not receive or collect any other data about reviewers. | A copy for at most 30 days, updated every week; then it is deleted. |
Do you have to give us this data?
To order, yes: without the delivery and contact details we cannot conclude or ship the order. To write to us we need name, email and message; the phone number is optional. The site does not require you to create an account: orders are placed without registration.
Who we share data with
We do not sell or transfer your data. It is processed, on our behalf or as independent controllers for their own legal purposes, only by the parties that are essential to the service:
- Hetzner Online GmbH (Germany), which hosts the site on servers located in the European Union (Nuremberg). It is our data processor (art. 28 GDPR).
- Stripe Payments Europe, Ltd. (Ireland), which handles payments. It processes payment data as an independent controller, for carrying out the payment and for anti-money-laundering and anti-fraud obligations: its notice is at stripe.com/privacy. Your browser contacts Stripe already from the product pages and the cart (not from the other pages), because its payment tool is loaded there: at that moment Stripe receives your IP address and device information.
- The courier in charge of delivery, which receives the name, address and phone number needed to deliver the parcel to you. It is named in the shipping confirmation.
- The email service provider, with which we send confirmation emails and receive your messages.
- The accountant, for tax and accounting duties, and the advisors who assist us, bound by professional secrecy.
- The authorities, when the law requires it.
[TO BE COMPLETED] state the name and registered office of the email service provider: it appears by itself when SMTP_PROVIDER is set in .env and the script is run again.
Transfers outside the European Union
Our data stays in the European Union. The following cases are the exception:
- Stripe may process some data outside the European Economic Area as well, in particular in the United States, with the safeguards provided for by articles 45 and 46 of the Regulation (adequacy decision or standard contractual clauses). The details are in its notice.
- Google — the contact page can show a map. The map does not load by itself: it appears only if you click the button that asks for it, and only then does Google receive the data about your visit, according to its own notice. We download the Google reviews ourselves, from the server, once a week: Google receives no visitor data.
What you can ask us
You have the right to ask us for access to your data, rectification or erasure, restriction of processing and portability, and to object to processing based on legitimate interest (articles 15 to 22 of the Regulation). Where processing is based on consent you can withdraw it at any time, without affecting the lawfulness of what was done before.
To exercise these rights write to info@mieleartemide.com. We reply within one month.
If you believe the processing violates the Regulation you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the authority of the country where you live or work.
Automated decisions and profiling
We do not carry out profiling and we do not make decisions based solely on automated processing. It should be said that Stripe uses automatic systems to detect fraud and may decline a payment: in that case write to us and we will check the order with a person.
Minors
The site is not aimed at children under fourteen and we do not knowingly collect their data. Alcoholic drinks (grappa and mead) are sold only to adults.
Security
The site opens only over an encrypted connection (HTTPS) and payment data does not pass through our servers.
Cookies and changes
Cookies are described in the cookie policy. If the processing changes, we update this page and the date at the top.