1

Controller and contacts

The Controller is {controller}, registered at Via Dante Alighieri 148, 62012 Civitanova Marche (MC), Italia, VAT IT01990370437, REA MC-250643. Privacy requests: support@cartechinishop.com, telephone +39 327 202 2680.

2

Data processed

Identity and contact data, protected credentials, addresses, orders, payments and refunds, preferences, support requests, Fidelity data, security technical information and authorised browsing data. We do not store full payment-card details.

3

Purposes and legal bases

We manage accounts, carts, orders, payments, deliveries, returns and support to perform a contract or pre-contractual steps. We comply with tax and legal duties. We prevent abuse and protect the service on the basis of balanced legitimate interests. Newsletter, marketing, optional analytics and third-party content require consent where applicable.

4

CARTECHINI Fidelity

Card requests and management require the necessary data to be sent to EloyPro. Marketing and profiling consents are separate and optional and are never automatically set to positive. Refusing marketing does not prevent purchases.

5

Recipients and providers

Data is shared only for the stated purposes with hosting and security providers, the selected payment provider (Stripe, PayPal, Nexi and connected services), carriers and stores, email and support services, EloyPro/IWesPro for authorised Fidelity and operations, advisers and authorities. Google, Meta, YouTube, Vimeo, Automattic/Gravatar and WhatsApp receive data only after consent or voluntary interaction, depending on the service.

6

Transfers outside the EEA

International providers may process data outside the EEA using adequacy decisions, the Data Privacy Framework where applicable, Standard Contractual Clauses and supplementary safeguards declared by providers.

7

Retention

Accounts and orders are retained for the relationship and applicable tax and civil-law periods. Support data is kept as required for handling and legal protection. Consent lasts until withdrawal and its evidence is kept for 24 months unless legal defence requires otherwise. Cookie durations appear in the Cookie Policy.

8

Required and optional data

Required data is necessary to create an account or conclude and perform an order. Marketing, analytics and external functionality data is optional.

9

Automated decisions

The store does not make solely automated decisions producing legal effects based on cookies. Payment or fraud providers may run automated controls under their own notices and legal duties.

10

Your rights

You may request access, correction, erasure, restriction, portability and objection, and withdraw consent at any time without affecting earlier lawful processing. You may lodge a complaint with the Italian Data Protection Authority.

11

Children

The store is not intentionally directed at children unable to enter a purchase or provide valid consent under applicable law.

12

Updates

This notice may change following legal, technical or service updates. The published version and date identify changes; material changes will be communicated appropriately.