Privacy Policy

Transparency, protection of personal data, and compliance with applicable law.

Data Controller

This Privacy Policy is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and describes how personal data of users visiting the website and using the online sales services offered by Mapatec di Manrico Passeri are processed.

The Data Controller is Manrico Passeri, sole proprietor of Mapatec di Manrico Passeri, with registered office at Via Benedetto Croce 21 - 65015 Montesilvano (PE), Italy, reachable at the following e-mail address: info@mapatec.it.

Types of data collected

Identification and contact data

First name, last name, shipping address, billing address, e-mail address, and phone number. For business customers, company name, tax code, VAT number, and SDI code may also be collected. In the case of company purchases, the registered name may correspond to the person responsible for making the purchase on behalf of that company.

Technical and browsing data

IP address, system logs, browser type, device used, browsing information, and further technical data automatically collected by IT systems and platforms used to provide the service. Data relating to saved carts, submitted carts, or incomplete purchase sessions may also be processed.

Purposes of processing and legal basis

Personal data are processed for purposes related to website registration, customer account management, order conclusion and management, payments, invoicing, product shipment, customer support, fiscal, administrative and legal compliance, as well as website security and the prevention of abuse or fraud. In such cases, the legal basis for processing is the performance of a contract or pre-contractual measures, as well as compliance with legal obligations to which the Data Controller is subject.

Data may also be processed for statistical analysis, service improvement, abandoned cart recovery, newsletter delivery, marketing activities, remarketing, commercial profiling, and optimization of advertising campaigns through third-party tools such as Meta, Google, and Bing. For marketing and profiling activities, where required by law, the legal basis is the explicit consent of the data subject.

Methods of processing and payments

Data are processed by electronic and telematic means, using methods strictly related to the purposes described above and by adopting appropriate security measures to prevent unauthorized access, loss, disclosure, or unlawful use of data.

Payments on the website may be made by credit card or bank transfer. Data necessary for payment management may be processed by the relevant payment service providers according to their own privacy policies, to which reference is made for further details.

Disclosure of data to third parties

For the purposes described above, personal data may be disclosed to third parties acting either as independent data controllers or as data processors, including shippers and couriers, tax and administrative consultants, suppliers involved in logistics management or dropshipping activities, technical and IT service providers, hosting providers, and parties supplying marketing, advertising, and traffic analysis tools.

The website is hosted on technical infrastructure provided by Aruba. Some data may also be processed by external platforms for statistical, promotional, or advertising purposes, always in accordance with the configurations adopted by the Data Controller and the consent choices expressed by the user.

Newsletter, cookies, and tracking tools

Users may voluntarily subscribe to the commercial newsletter by giving specific consent. Providing data for this purpose is optional, and failure to provide such consent does not affect the possibility of making purchases through the website.

The website uses technical cookies and may also use statistical, marketing, and profiling cookies, including third-party tools connected to Meta, Google, and Bing. The use of non-technical cookies and other tracking tools is subject, where required, to the user’s consent through a dedicated cookie banner and separate cookie policy.

Data retention period

Data category	Retention period
Orders, payments, invoicing, and fiscal obligations	10 years
Customer account data	Until deletion request or prolonged inactivity
Newsletter and marketing data	24 months from consent or last significant interaction
Profiling and remarketing data	12 months
Technical logs and security data	12 months
Saved or submitted carts	12 months

Data may be retained for different periods where necessary to comply with legal obligations, exercise or defend a right in court, or satisfy requests from competent authorities.

Rights of the data subject

As a data subject, the user may exercise at any time the rights provided for by Articles 15 and following of the GDPR, including the right to obtain access to personal data, rectification, erasure, restriction of processing, data portability, objection to processing, as well as the right to withdraw consent previously given, without affecting the lawfulness of processing carried out before such withdrawal.

The data subject also has the right to lodge a complaint with the competent Data Protection Authority if he or she believes that the processing of personal data is carried out in breach of applicable law.

For any request relating to privacy or the exercise of your rights

you may contact Manrico Passeri directly at info@mapatec.it