Privacy Policy and Cookie Policy

Last updated: November 2025

This information is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 ("GDPR") and describes how we process the personal data of users who visit or use the website www.originecalabria.store ("Site").

This policy does not apply to third-party websites accessible via external links.

1. Data controller

Catherine Sydney Balogh
VAT number: 03911820789
REA: CS – 265086
Registered office: Via R. Misasi 129, Cosenza (CS), Italy
Email: info@originecalabria.store

2. Types of data processed

2.1 Data provided voluntarily by the user

• Name, surname
• Shipping/Billing Address
• Telephone, email
• Payment data (not processed directly, but through external providers e.g. PayPal/Stripe)
• Content of messages, requests and information sent via forms

2.2 Third party data

For example, the order recipient's address provided by the buyer.

2.3 Browsing data

Collected automatically when using the Site:

• IP address
• Browser and device type
• Pages visited
• System log
• Cookies (see section 9)

3. Purpose of processing and legal bases

4. Processing methods and security

The data is processed electronically in compliance with the principles of lawfulness, fairness, and transparency. Appropriate technical and organizational measures are adopted to prevent unauthorized access, disclosure, modification, or destruction of personal data.

5. Communication of data to third parties (independent Data Processors and Owners)

Personal data may be disclosed to:

Data Controllers (Article 28 GDPR)

• Shopify International Ltd. (e-commerce platform, hosting)
• Logistics and courier companies (e.g. DHL, GLS, SDA, UPS)
• Technical and IT suppliers
• Email Marketing Service Provider
• Administrative/accounting consultants

Independent data controllers

• PayPal Europe , Stripe , Shopify Payments (payment management)
• Meta Platforms Inc. (if Meta Pixel is used)
• Google LLC (if using Google Analytics or Google Ads)

These entities process the data in accordance with their respective privacy policies.

6. Transfer of data outside the European Union

Using Shopify, Meta, Google, and some technical services may result in data transfers to the United States , Canada , or other non-EU countries.

Data transfer takes place in compliance with Articles 44-49 of the GDPR, via:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Additional technical and organizational measures adopted by suppliers

7. Data retention

• Order data: retained for 10 years in compliance with legal obligations.
• Account data: retained until the user requests deletion.
• Data for newsletter purposes: retained until consent is revoked.
• Cookies: stored for the duration indicated in the cookie policy and/or browser settings.

8. Rights of the interested party

The user may exercise the rights provided for in Articles 15–22 of the GDPR at any time, including:

• Right of access to personal data
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent, without prejudice to the lawfulness of processing based on consent before its withdrawal
• Right to lodge a complaint with the Italian Data Protection Authority ( www.garanteprivacy.it )

To exercise these rights, the user can write to: info@originecalabria.store .

9. Cookie Policy

9.1 What are cookies?

Cookies are small text files that the Site stores on the user's device to improve the browsing experience, remember preferences, and collect anonymous or aggregate information on site usage.

9.2 Types of cookies used

Technical cookies (necessary)

They are essential for the correct functioning of the Site and the services offered, for example for:

• Cart Management
• Authentication and session management
• Site Security

These cookies are mainly generated by Shopify.

Legal basis: legitimate interest / technical necessity.
Consent: Not required.

Analytical cookies

Used to collect statistical information, in aggregate form, on the number of users and how they visit the Site.

If the data is anonymized (for example, by masking significant portions of the IP address), consent may not be required. Otherwise, the use of such cookies will only occur with the user's prior consent.

Profiling and marketing cookies

(if active)

• Meta Pixel
• Google Ads
• Google Analytics not anonymized
• Shopify or third-party marketing cookies

These cookies track user navigation to show personalized ads.

Legal basis: explicit user consent via cookie banner.

9.3 Cookie management

The user can:

• Accept or reject cookies via the initial banner
• Change your cookie preferences at any time (if there is a specific link or button on the Site)
• Disable the use of cookies from your browser settings, although disabling technical cookies may compromise the correct functioning of the Site.

10. Minors

The Site is not intended for children under 16 and does not knowingly collect personal data from minors. If the Data Controller becomes aware that data from minors has been collected without parental or legal guardian consent, it will immediately delete such data.

11. Exercise of rights

To exercise your data protection rights, you may contact the Data Controller at the following addresses:

📧 Email: info@originecalabria.store
📬 Postal address: Via R. Misasi 129, Cosenza (CS), Italy

12. Updates to the information

This policy may be subject to change due to regulatory updates or changes in data processing methods. Changes will be posted on this page and will take effect from the date of publication.