1. Draft to be reviewed
This text is a draft created as a starting point. It must be reviewed and completed by the data controller or a legal advisor before final publication. It can be edited in the admin panel (Website → Privacy policy).
2. Data controller
The data controller is Hidrogarant, Siena: 53100 Taverne D'Arbia Via G.del tondo 1 P.Iva 01593360520. For any privacy matter write to info@hidrogarant.com or call +393515759199.
3. What data we process
- Registration data: name, email address, password (stored hashed).
- Order and shipping data: name, address, phone, billing data (company name, VAT / tax code if provided).
- Payment data: card payments are handled by Stripe; we never see or store full card details.
- Messages sent through the contact form.
- Technical data: IP address, browser type, technical cookies and, only with your consent, preference, statistics and marketing cookies.
4. Purposes and legal bases
- Account and order management (delivery, invoicing, support): performance of a contract, Art. 6(1)(b) GDPR.
- Legal obligations (accounting, tax): Art. 6(1)(c) GDPR.
- Marketing emails and newsletter: only with your consent, Art. 6(1)(a) GDPR, withdrawable at any time.
- Website security and fraud prevention: legitimate interest, Art. 6(1)(f) GDPR.
5. Recipients
Data may be shared, only for the purposes above, with: Stripe (payments), couriers such as GLS (delivery), hosting and email providers, accountants and authorities where required by law.
6. Transfers outside the EU
Some providers (e.g. Stripe) may process data outside the European Economic Area, based on adequacy decisions (e.g. EU-US Data Privacy Framework) or Standard Contractual Clauses.
7. How long we keep data
- Account data: until the account is deleted.
- Orders and invoices: 10 years, as required by tax law.
- Marketing consent: until withdrawn.
- Cookie consent log: up to 2 years.
- Contact messages: up to 24 months.
8. Cookies
We use technical cookies needed for the site to work (session, cart, language, security). Preference, statistics and marketing cookies are set only after your consent, which you can change at any time from the "Cookie settings" link at the bottom of the page.
9. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection (Art. 15-22 GDPR) and may withdraw consent at any time. You may also lodge a complaint with the supervisory authority (in Italy: Garante per la protezione dei dati personali).
10. How to exercise your rights
In your account, under Privacy, you can change your marketing consent, download your data as JSON and request deletion of your account. Or write to info@hidrogarant.com.
11. Changes
We may update this notice. The current version is always published on this page.