PRIVACY POLICY

1. Introduction

At lindevecchio.com (“Website,” “we,” “us,” or “our”), we are committed to protecting your privacy and upholding the highest standards of data protection. Your personal information is treated with the utmost care and processed in accordance with applicable data privacy laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”). This Privacy Policy explains how we collect, use, store, and safeguard your data when you use lindevecchio.com and our related services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all visitors, users, and others who access or use the Website. lindevecchio.com is the data controller of your personal information where we determine the purposes and means of processing personal data. This policy applies to information collected through the Website and related online interactions.

By using lindevecchio.com, you acknowledge that your personal data may be collected and processed under the terms of this Privacy Policy.

3. Categories of Data Processed

We may collect and process the following categories of personal data:

a. Usage Data

– Browser type and version
– IP address
– Time zone setting and location
– Referring URLs
– Clickstream behavior
– Session duration
– Date and time of visits

b. Account Data

– Full name
– Postal address
– Email address
– Telephone number
– Login credentials (encrypted)

c. Profile Data

– Purchase history
– Browsing preferences
– User behavior and interaction with products
– Saved favorites or preferences

d. Communication Data

– Inquiries and messages sent through our contact forms
– Support tickets and related correspondence
– Email exchange related to user support and product/service inquiries

e. Technical Data

– Device model and operating system
– Internet service provider
– System configurations
– Log files and diagnostic data

f. Transaction Data

– Payment method (processed by third-party payment providers)
– Order details
– Billing and shipping addresses
– Delivery confirmations

g. Preference Data

– Marketing preferences
– Communication opt-in or opt-out status
– Product interest selections

We may combine these data categories for analytical and operational purposes only within the bounds of this policy.

4. Legal Bases for Processing

We rely on the following legal bases for processing your personal data:

– Consent: Where you have given clear and informed consent for processing (e.g., signing up for newsletters).
– Contract: Where processing is necessary for the performance of a contract with you (e.g., order fulfillment).
– Legal Obligation: Where we must comply with a statutory or regulatory requirement.
– Legitimate Interest: To improve our Website, personalize user experiences, detect fraud, and maintain security, provided such interests are not overridden by your fundamental rights.

5. Your Rights Under Applicable Laws

Subject to certain legal limitations, you have the following rights regarding your personal data:

– Right of Access: You may request a copy of your personal data held by us.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to be Forgotten”): You may request that your personal data be deleted.
– Right to Restriction: You may request that processing of your data be limited in certain circumstances.
– Right to Data Portability: You can request to receive your data in a structured, commonly used format and have it transmitted directly to another controller, where technically feasible.
– Right to Object: You can object to the processing of your data when it is based on legitimate interests or for direct marketing purposes.
– Right Not to be Subject to Automated Decision-Making: We do not engage in profiling decisions that produce legal effects using automated processing.

To exercise any of the above rights, please contact us at [email protected].

6. Security Measures

We implement appropriate technical and organizational safeguards to ensure the integrity and confidentiality of your personal data. These include but are not limited to:

– Industry-standard encryption during data transmission and storage
– Multi-factor authentication and role-based access controls
– Regular data backups and secure storage
– Internal policies and staff privacy training

Despite our efforts, the transmission of information via the internet is never 100% secure, and we cannot guarantee absolute security.

7. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside of your jurisdiction, including the United States. Where such transfers occur, we ensure a comparable level of data protection by implementing appropriate safeguards, such as:

– Standard Contractual Clauses issued by the European Commission
– Adequacy decisions by the European Commission
– Binding corporate rules or other lawful transfer mechanisms under applicable laws

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, regulatory, tax, accounting, or reporting obligations.

– Usage & Technical Data: 12 months
– Account Data: Retained until account deletion
– Communication & Support Data: 24 months
– Transaction Data: 7 years (in compliance with financial regulations)
– Marketing & Preference Data: Until withdrawal of consent or inactivity for 24 months

Data may be anonymized or securely deleted when no longer required.

9. Cookie Policy

lindevecchio.com uses cookies and similar tracking technologies to collect information and enhance your experience. Cookies are small data files stored on your device.

We use the following categories:

a. Essential Cookies
Required for Website functionality, such as navigation and access to secure areas.

b. Functional Cookies
Enable enhanced features like remembering your preferences.

c. Analytics Cookies
Help us understand user behavior and improve Website performance (e.g., Google Analytics).

d. Performance Cookies
Assist in load balancing and uptime monitoring to maintain optimal user experience.

10. Cookie Management and Compliance

In accordance with GDPR and CCPA, you have the right to manage cookie preferences. On your first visit to the Website, a cookie banner allows you to opt in or out of non-essential cookies.

You can also manage cookies through your browser settings or by using dedicated third-party tools. Note that disabling certain cookies may impact site functionality.

For California residents, you have the additional right to “Do Not Sell or Share My Personal Information,” which can be exercised using our cookie settings interface or by contacting [email protected].

11. Children’s Privacy

Our Website is not designed for or directed to individuals under the age of 13. We do not knowingly collect personal data from children. If we become aware that information has been collected from a child, we will take prompt steps to delete it.

If you believe that we might have information from a child under 13, please contact us immediately at [email protected].

12. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or to comply with legal obligations. In the event of material changes, we will notify users through the Website or via email (when appropriate) to ensure your continued understanding and consent.

We encourage you to review this policy periodically for the latest information on our data practices.

13. Contact Us

If you have any questions, requests, or concerns related to this Privacy Policy or the processing of your personal data, please contact us at:

Email: [email protected]

We are committed to addressing your inquiries promptly and seriously.

lindevecchio.com is dedicated to full compliance with applicable privacy laws and supports your rights to transparency, autonomy, and control over your personal information. Please contact us at [email protected] for any privacy-related questions or to exercise your data rights.