Updated in accordance with EU Regulation 2016/679 (GDPR) and Privacy Code Legislative Decree 196/03 as amended by Legislative Decree 101/2018
1. Data Controller
The Data Controller is POUPINE SRLS, with registered office in Italy. For any requests regarding the processing of personal data, the Controller can be contacted at the email address: info@poupine.it.
2. Purposes and legal basis of processing
The personal data you provide will be processed for the following purposes:
– Management of orders and shipments
– Tax and accounting obligations
– Commercial and promotional communications (with prior consent)
– Statistical analysis and service improvement
– Fraud prevention and IT security
– Customer support
The legal bases for processing are: performance of a contract, legal obligations, explicit consent, legitimate interest of the Controller.
3. Processing methods
Personal data will be processed using manual, electronic, and telematic tools, in compliance with the principles of lawfulness, fairness, transparency, minimization, and security provided by the GDPR. Appropriate technical and organizational measures are adopted to ensure data protection from unauthorized access, loss, destruction, or disclosure.
4. Communication and disclosure of data
Personal data will not be disclosed, but may be communicated to third parties who carry out activities on behalf of POUPINE SRLS, such as:
– Couriers and shipping companies
– Tax and legal consultants
– IT and hosting service providers
– Public authorities, where required by law
In case of use of services based outside the EU, the Controller guarantees the adoption of standard contractual clauses or other adequate safeguards for data transfer.
5. Data retention
Personal data will be retained:
– For the duration of the contract
– For 10 years in compliance with tax obligations
– Until withdrawal of consent for marketing purposes
– For the time necessary to ensure security and fraud prevention
6. Data subject rights
In accordance with Articles 15 and following of the GDPR, you have the right to:
– Access your personal data
– Request rectification, deletion, or restriction of processing
– Object to processing
– Request data portability
– Withdraw consent at any time
To exercise your rights, you can send a request to info@poupine.it.
7. Consent and withdrawal
The provision of personal data is optional. Consent to processing for commercial and promotional purposes is freely given and may be withdrawn at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.
8. Right to object to the use of data for AI
Pursuant to the legislation integrated with Law No. 132/2025 on Artificial Intelligence, the data subject has the right to object to the use of their data for the training of artificial intelligence systems.