Privacy Policy

PRIVACY POLICY

Last updated: August 22, 2026

This policy describes how [FULL COMPANY NAME], as Data Controller, collects, uses, stores, and protects the personal data of users who visit and use the Elettro Sconto website, currently accessible at https://elettro-sconto.myshopify.com/ and through any associated domains of the store.

This policy is provided in accordance with EU Regulation 2016/679 ("GDPR"), Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, and applicable Italian and European legislation on personal data protection and electronic communications.

1. Data Controller

The Data Controller of personal data is:

PARADISI ADV SRL
Registered Office: Via Battistig 11 – 33100 Udine (UD), Italy
VAT Number: 03092680309
Tax Code: 03092680309
Email: info@elettrosconto.it
Phone: +39 393 366 6999

For any request related to privacy or personal data processing, you can contact the Data Controller at the email address provided above.

If a Data Protection Officer (DPO) is appointed, their contact details will be published in this policy.

2. Types of personal data processed

During the use of the website, various categories of personal data may be collected.

2.1 Identification and contact data

The following may be collected:

  • first and last name;

  • email address;

  • phone number;

  • residential address;

  • billing address;

  • shipping address;

  • any company-related data;

  • tax code and/or VAT number, when necessary for issuing tax documents.

2.2 Data related to orders and purchases

During a purchase, the following may be processed:

  • products purchased;

  • quantity;

  • price;

  • date and time of order;

  • delivery method;

  • delivery address;

  • order status;

  • information regarding returns, refunds, and support;

  • purchase history;

  • any communications related to the order.

2.3 Payment data

The website allows the use of various payment instruments, which may include credit or debit cards and services such as PayPal, Apple Pay, Google Pay, Shop Pay, and Klarna, depending on the methods available at checkout.

Full payment card data is not usually stored directly by the Data Controller but is processed by the payment service providers responsible for handling the transaction.

The Data Controller may receive information such as:

  • payment confirmation;

  • amount;

  • payment method used;

  • transaction ID;

  • transaction status;

  • any information necessary for refunds or disputes.

Payment service providers may act, depending on the processing carried out, as data processors or independent data controllers according to their respective privacy policies.

2.4 Customer account data

If the user creates or uses a customer account, the following may be processed:

  • identification data;

  • email address;

  • login and authentication data;

  • saved addresses;

  • order history;

  • account preferences.

Technical account management may be carried out through services provided by the Shopify platform.

2.5 Data provided via contact requests

When the user contacts Elettro Sconto via email, phone, contact form, or other tools available on the website, the data voluntarily provided by the data subject, including the content of the request, may be processed.

2.6 Newsletter and marketing communications data

In case of newsletter subscription, the following may be collected:

  • email address;

  • any name;

  • date and time of subscription;

  • information regarding consent;

  • information regarding interaction with sent communications, where permitted by applicable law and privacy settings.

2.7 Technical and browsing data

During browsing, the website and the technological services used may automatically collect certain information such as:

  • IP address;

  • device type;

  • operating system;

  • browser used;

  • language;

  • technical identifiers;

  • date and time of requests;

  • pages visited;

  • products viewed;

  • interactions with the website;

  • session information;

  • cart data;

  • referrer and origin of the visit;

  • information necessary for security and fraud prevention.

Such data may be collected through technical logs, cookies, or similar technologies.

3. Purposes, legal bases, and nature of processing

3.1 Order management and contract conclusion

Data is processed to:

  • allow product purchase;

  • manage the cart and checkout;

  • confirm and process orders;

  • manage payments;

  • organize shipment;

  • communicate order-related information;

  • manage returns, refunds, replacements, and warranties;

  • provide after-sales support.

Legal basis: performance of a contract or pre-contractual measures requested by the data subject, pursuant to art. 6, par. 1, letter b) GDPR.

The provision of data necessary for the purchase is mandatory. Without such information, it may not be possible to complete or execute the order.

3.2 Tax, accounting, and legal compliance

Purchase-related data may be processed for:

  • issuing invoices and tax documents;

  • bookkeeping;

  • compliance with tax obligations;

  • compliance with distance selling regulations and consumer protection;

  • management of obligations required by public authorities or by law.

Legal basis: fulfillment of a legal obligation pursuant to art. 6, par. 1, letter c) GDPR.

3.3 Customer account creation and management

Data is processed to allow the user to create, use, and manage their account, consult orders, and use related features.

Legal basis: performance of a contract or pre-contractual measures pursuant to art. 6, par. 1, letter b) GDPR.

3.4 Assistance and information requests

Data provided by the user is used to respond to commercial, technical, administrative, or support requests.

Legal basis: performance of pre-contractual or contractual measures pursuant to art. 6, par. 1, letter b) GDPR or, for requests not directly linked to a contract, the legitimate interest of the Data Controller in managing communications with users pursuant to art. 6, par. 1, letter f) GDPR.

3.5 Newsletter and marketing

Subject to specific consent, the user's email address may be used to send:

  • newsletters;

  • promotional communications;

  • information about offers and discounts;

  • product news;

  • Elettro Sconto commercial initiatives.

Legal basis: consent of the data subject pursuant to art. 6, par. 1, letter a) GDPR.

Consent is optional and can be revoked at any time, without affecting the lawfulness of processing carried out before revocation.

The user can unsubscribe through the link provided in the communications received or by contacting info@elettrosconto.it.

Failure to consent to marketing does not prevent purchases on the website.

Where applicable, the possibility of sending communications relating to products similar to those already purchased remains, within the limits permitted by art. 130, paragraph 4, of Legislative Decree 196/2003, without prejudice to the data subject's right to object at any time.

3.6 Security and fraud prevention

Data may be processed to:

  • protect the website;

  • prevent unauthorized access;

  • identify suspicious activities;

  • prevent fraud and abuse;

  • ensure the security of accounts, payments, and transactions;

  • protect the rights of the Data Controller and users.

Legal basis: legitimate interest of the Data Controller in the security of its systems and fraud prevention pursuant to art. 6, par. 1, letter f) GDPR.

3.7 Dispute management and rights protection

Data may be stored and used when necessary to ascertain, exercise, or defend a right of the Data Controller in judicial or extrajudicial proceedings.

Legal basis: legitimate interest pursuant to art. 6, par. 1, letter f) GDPR and, where applicable, fulfillment of legal obligations.

3.8 Statistical analysis and website improvement

In compliance with the user's preferences regarding cookies and tracking technologies, information relating to website usage may be collected for the purpose of:

  • analyzing traffic;

  • understanding store operations;

  • improving the browsing experience;

  • measuring website performance;

  • understanding interest in products and content.

When such activities require the use of cookies or technologies that are not strictly necessary, processing will only take place after obtaining the user's consent.

Legal basis: consent of the data subject pursuant to art. 6, par. 1, letter a) GDPR, when required.

4. Shopify Platform

The Elettro Sconto online store uses the Shopify platform, provided by companies belonging to the Shopify group.

Shopify provides the technological infrastructure necessary for the operation of the website, catalog, cart, checkout, customer accounts, and other e-commerce functionalities.

Within the services provided to the Data Controller, Shopify may process personal data of customers on behalf of the merchant according to the applicable data processing agreements.

For certain additional features and services, Shopify may also process some data as an independent data controller, as provided by its terms and privacy policy.

Shopify may use infrastructure and providers located in different countries. Any international data transfers are carried out based on the instruments provided by applicable law.

For more information on the processing carried out directly by Shopify, please consult Shopify's official privacy policy and privacy portal.

5. Payment service providers

To allow payment for orders, data may be communicated to the providers of the payment method chosen by the user.

Depending on the options available at checkout, such providers may include, by way of example:

  • Shopify Payments;

  • Visa circuits;

  • Mastercard;

  • Maestro;

  • American Express;

  • PayPal;

  • Apple Pay;

  • Google Pay;

  • Shop Pay;

  • Klarna;

  • other payment service providers made available in the checkout.

The processing carried out by payment service providers is also governed by their respective privacy policies.

Elettro Sconto does not control the processing that these entities carry out as independent controllers.

6. Klarna and installment payment services

If the user chooses Klarna or another installment payment service, some personal data and order-related information may be transmitted to the relevant provider to allow for:

  • customer identification;

  • payment processing;

  • assessment of service eligibility;

  • fraud prevention;

  • management of the payment relationship.

The installment payment provider may independently carry out assessments and checks according to its own regulations and privacy policy.

Any decisions regarding the granting of credit or the use of the installment payment service are made by the relevant provider and not directly by Elettro Sconto.

7. Shipping and logistics

To fulfill orders, some personal data may be communicated to:

  • couriers;

  • shippers;

  • logistics operators;

  • parties responsible for order preparation and delivery;

  • any collection points.

Only data necessary for shipping management is communicated, such as first name, last name, address, phone number, email, and delivery information.

Legal basis: performance of the contract pursuant to art. 6, par. 1, letter b) GDPR.

8. Entities to whom data may be communicated

In addition to the entities already indicated, personal data may be communicated, when necessary, to:

  • IT service providers;

  • hosting and cloud infrastructure providers;

  • website developers and maintainers;

  • email service providers;

  • customer support service providers;

  • administrative, tax, and accounting consultants;

  • legal consultants;

  • banks;

  • anti-fraud system providers;

  • public, judicial, or administrative authorities when required by law.

Providers who process data on behalf of the Data Controller are, where necessary, appointed as Data Processors pursuant to art. 28 GDPR.

Personal data is not publicly disseminated.

9. Cookies and tracking technologies

The website uses cookies and similar technologies.

Technical and strictly necessary cookies

They are necessary to ensure the proper functioning of the site and can be used, for example, to:

  • maintain the session;

  • manage the shopping cart;

  • remember preferences;

  • process checkout;

  • manage authentication;

  • ensure security;

  • prevent fraudulent activities;

  • remember privacy choices.

For these tools, when strictly necessary for the provision of the service requested by the user, prior consent is not required.

Analytical, functional, advertising, and profiling cookies

The site may use, directly or through third-party services, additional technologies for statistical, measurement, personalization, or marketing purposes.

When required by law, such technologies are activated only after the user has expressed their choice through the cookie management system on the site.

Users can modify or revoke their preferences at any time through the privacy/cookie settings available on the site.

Revocation of consent does not affect the lawfulness of processing carried out before the revocation.

For detailed information on individual cookies and tools potentially used by the site, a specific Cookie Policy or cookie preference management panel may be made available.

10. Transfer of data outside the European Economic Area

Some providers used by the Data Controller, including the e-commerce platform provider, may also process data outside the European Economic Area.

In such cases, the transfer occurs in compliance with Articles 44 et seq. of the GDPR and, depending on the country and the provider concerned, may be based on:

  • adequacy decisions adopted by the European Commission;

  • EU-US Data Privacy Framework, where applicable;

  • Standard Contractual Clauses approved by the European Commission;

  • additional safeguards provided by the GDPR.

The Data Controller adopts, within the limits of its competence, appropriate measures to ensure that transferred data receive a level of protection substantially equivalent to that guaranteed in the European Union.

11. Processing methods and security measures

Personal data is processed using electronic and, where necessary, paper-based tools, adopting technical and organizational measures appropriate to the risk.

Measures are adopted to reduce the risk of:

  • data loss;

  • unauthorized access;

  • unlawful use;

  • unauthorized modification;

  • disclosure;

  • accidental or unlawful destruction.

Access to data is limited to authorized parties and providers who need such information to carry out their respective activities.

Despite the adoption of adequate security measures, no computer system or data transmission can be considered completely risk-free.

12. Data retention period

Personal data is stored for the time necessary to achieve the purposes for which it was collected and, subsequently, for any periods required by law.

In particular:

Data relating to orders, invoices, and administrative-accounting documentation: generally stored for at least 10 years, according to applicable tax, accounting, and civil law.

Data necessary for managing the contractual relationship: stored for the duration of the relationship and subsequently for the period necessary to protect the rights of the Data Controller or the data subject.

Customer account data: stored until the account is closed or deleted, except for data that must be stored for legal obligations or to protect rights.

Assistance and contact requests: stored for the period necessary to manage the request and subsequently, when necessary, to document the activity carried out or protect any rights.

Data used for newsletters and marketing: stored until consent is revoked or until processing is reasonably necessary for the purpose for which consent was collected. Consents and marketing lists are periodically reviewed.

Technical and security data: stored for the period necessary to ensure system security, prevent fraud, and document any incidents.

In the event of disputes or checks by authorities, the periods indicated above may be extended until the conclusion of the relevant procedure.

13. Provision of data

The provision of data may be:

mandatory, when necessary to:

  • place an order;

  • receive products;

  • make a payment;

  • receive assistance related to a purchase;

  • comply with tax and regulatory obligations;

or optional, when used, for example, for:

  • newsletter subscription;

  • marketing;

  • non-essential analytical and advertising cookies.

Failure to provide mandatory data may prevent the conclusion or execution of the purchase.

Failure to provide optional data does not prevent the use of essential site features.

14. Automated decisions

The Data Controller does not normally adopt decisions based solely on automated processing that produce legal effects or similarly significant effects on the data subject within the meaning of Art. 22 GDPR.

Some third parties, such as payment service providers, anti-fraud systems, or installment payment service providers, may perform automated assessments as part of their services.

Such processing is carried out under the responsibility of the relevant provider and is described in their respective privacy notices.

15. Minors

The site and the products sold are not specifically intended for minors.

The Data Controller does not intend to knowingly collect personal data from minors in violation of applicable regulations.

Should a parent or guardian believe that a minor has provided personal data without the necessary authorizations, they can contact info@elettrosconto.it to request verification or deletion.

16. Data Subject Rights

Pursuant to Articles 15-22 of the GDPR, the data subject may, in cases provided by law:

  • obtain confirmation of the existence or non-existence of personal data concerning them;

  • obtain access to their data;

  • obtain the rectification of inaccurate data;

  • obtain the integration of incomplete data;

  • request the deletion of data;

  • request the restriction of processing;

  • object to processing;

  • receive their data in a structured, commonly used, and machine-readable format and, where applicable, transmit it to another controller;

  • withdraw consent previously given at any time;

  • not be subject, in cases provided by the GDPR, to decisions based solely on automated processing;

  • lodge a complaint with the Data Protection Authority.

The withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

17. Right to object to marketing

The data subject has the right to object at any time to the processing of their personal data for direct marketing purposes.

In the event of an objection, personal data will no longer be used for such purposes.

This right can be exercised by:

  • using the unsubscribe link in promotional emails;

  • modifying account preferences, where available;

  • writing to info@elettrosconto.it.

18. How to exercise rights

Requests relating to the exercise of privacy rights can be sent to:

Email: info@elettrosconto.it

or to:

[FULL COMPANY NAME]
Via Battistig 11
33100 Udine (UD)
Italy

The Data Controller may request necessary information to verify the identity of the applicant solely to prevent unauthorized access or deletions.

Requests will be handled within the terms provided by the GDPR.

19. Complaint to the Supervisory Authority

Should the data subject believe that the processing of their personal data violates the GDPR, they may lodge a complaint with the competent supervisory authority.

For Italy, the competent authority is:

Garante per la protezione dei dati personali
Piazza Venezia, 11
00187 Rome
Italy

The possibility of appealing to the supervisory authority of the Member State in which the data subject habitually resides, works, or where the alleged infringement occurred remains unaffected.

20. Links and third-party services

The site may contain links to sites, platforms, or services managed by third parties.

When the user accesses such services, the processing of personal data may be governed by the privacy policies of the respective providers.

The Data Controller is not responsible for the processing methods adopted by third-party sites or services over which it has no control.

21. Changes to the Privacy Policy

The Data Controller may modify or update this Privacy Policy to:

  • adapt it to regulatory changes;

  • introduce new services;

  • change the providers used;

  • reflect changes in data processing methods;

  • improve the transparency of information provided to users.

The updated version will be published on the site with an indication of the last update date.

In the event of substantial changes, further communication methods may be adopted when required by applicable law.

22. Contacts

For questions, requests, or clarifications relating to this Privacy Policy or the processing of personal data:

PARADISI ADV SRL
Via Battistig 11 – 33100 Udine (UD)
Email: info@elettrosconto.it
Phone: +39 393 366 6999
VAT ID: 03092680309

Last updated: August 22, 2026

Contact us

Address

Via Battistig 11 33100 Udine (UD)

WhatsApp

353 4967217

Email

info@elettrosconto.com

Opening hours

Mon-Fri: 9:00 AM - 6:00 PM

Send us a message