GDPR
1. Legal Basis
This data protection policy is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and current legislation on data protection in Italy.
It governs how personal data processed through the website is collected, processed, stored and protected.
Data processing is carried out in compliance with the principles of lawfulness, fairness, transparency, purpose limitation and data minimization.
2. Data Controller
The data controller of personal data is the store management unit, responsible for the technical and organizational administration of information provided by users in the context of using the digital services offered through the website.
Data processing is carried out exclusively for purposes related to order management, communication with users and the proper functioning of services.
3. Types of Data Collected
The following categories of personal data may be collected during the use of the website:
Contact data: e-mail address, telephone number (optional), shipping or billing address
Data relating to orders and transactions: products purchased, amounts, payment method used
Technical and usage data: IP address, browser type, date and time of access, preferences, cookies
Data may be provided directly by the user or collected through technical tools necessary for the proper functioning of the website.
4. Purposes and Legal Basis of Processing
Personal data is processed for the following purposes:
execution of purchase contracts and order management
fulfillment of legal and administrative obligations
protection of the legitimate interests of store management, including service improvement and prevention of misuse
guarantee of the security and proper technical functioning of the website
Processing is based on contract performance, legal obligations, legitimate interests or the user's explicit consent.
The user may revoke any consent given at any time, without prejudice to the lawfulness of processing carried out before the revocation.
5. Data Retention and Security
Personal data is stored only for the time necessary to achieve the purposes indicated above.
For administrative and legal reasons, order data may be retained for up to 10 years.
Data processed on the basis of consent is retained until such consent is revoked.
Appropriate technical and organizational measures are adopted to prevent unauthorized access, loss, disclosure or alteration of data.
Information is archived on servers protected by security protocols and SSL encryption systems.
6. User Rights
Pursuant to articles 15 to 22 of the GDPR, the user has the right to:
· obtain information on processed personal data
· request the rectification or updating of data
· request the deletion of data
· obtain the restriction of processing
· request data portability
· object to processing for legitimate reasons
· withdraw consent at any time
· lodge a complaint with the competent supervisory authority in Italy
Requests relating to the exercise of these rights can be sent via e-mail to customer service.
7. Policy Updates
This data protection policy may be updated periodically to reflect regulatory changes or technical adjustments.
Changes come into effect upon their publication on the website. Users are advised to consult this policy regularly.
8. Contacts
For any questions regarding this data protection policy, you can contact us via:
E-mail: info@michaelcandle.com
Phone: +39 02 2052 0555
Address: C.so Buenos Aires, 2，20124 Milano MI，Italia
Monday to Friday, 9:00 AM to 6:00 PM (CET)
Service area: Italy