Data controller

The data controller for personal data collected through efori.it is:

Personal data we process

The categories of data processed depend on how the user interacts with the website and with EFORI's services.

• identification data, such as first and last name;
• contact details, such as email address and phone number;
• shipping and billing address;
• information relating to orders and purchases;
• items viewed, added to cart, purchased, returned or cancelled;
• information relating to payment status;
• information relating to the customer account;
• support requests and communications sent to EFORI;
• IP address and technical information relating to device, browser and connection;
• information about website use and browsing activity;
• preferences relating to marketing communications, where applicable.

How we collect data

Data may be collected directly from the user, for example when the user:

• places an order;
• creates or uses a customer account;
• enters billing or shipping information;
• requests a return or refund;
• contacts support;
• subscribes to the newsletter;
• uses features available on the website.

Certain technical information may also be collected automatically while the website is being used, including through cookies and similar technologies.

Certain information may also be received from service providers used to deliver the service, such as Shopify, payment providers and parties involved in managing shipments.

Why we use personal data

Newsletter and email marketing

EFORI may use the email address to send marketing communications where such processing is permitted by the applicable legislation.

Communications may concern, for example:

• new products and collections;
• new drops;
• promotions;
• discount codes;
• products viewed or left in the cart, where the legal and technical conditions for such communication are met;
• other communications relating to the EFORI brand.

Where processing is based on consent, the user may withdraw consent at any time.

Each promotional email includes, where required, a function allowing the user to unsubscribe from marketing communications.

Unsubscribing from promotional communications does not prevent EFORI from sending service communications necessary to manage orders, payments, deliveries, returns or customer accounts.

Shopify platform

EFORI uses Shopify as the technology platform for operating its e-commerce store.

Shopify may process information relating to the use of the store to the extent necessary to provide and improve the technology services used by EFORI.

Information entered while using the website may therefore be transmitted and processed through Shopify's infrastructure and related services.

For processing activities carried out by Shopify independently, Shopify's own privacy notices also apply.

Payment data

EFORI offers the following payment methods:

During payment, the providers used may receive the information necessary to process the transaction, verify security, prevent fraud and handle any refunds.

Full payment card details are managed through the systems of the relevant payment providers and are not normally stored directly by EFORI.

Processing carried out independently by individual providers is also subject to their respective privacy notices.

Data used for shipping

To prepare and deliver orders, EFORI may disclose to parties involved in shipping only the data necessary to perform the service.

This information may include:

• first and last name;
• delivery address;
• phone number;
• email address;
• information necessary to identify and deliver the shipment.

Data may be disclosed to couriers, logistics operators and platforms used by EFORI to organise domestic and international shipments.

Who we may share data with

Where necessary to provide services or comply with applicable obligations, data may be disclosed to categories of recipients such as:

• Shopify;
• payment providers;
• couriers and logistics providers;
• technical and IT service providers;
• parties appointed to provide support or manage services;
• administrative, accounting, tax or legal advisers;
• public authorities or parties to whom disclosure is required by applicable law.

Cookies and similar technologies

EFORI may use cookies and similar technologies that are necessary for the proper functioning of the e-commerce store.

These technologies may be used, among other things, to:

• enable website navigation;
• maintain cart functionality;
• make checkout available;
• protect website security;
• remember certain user preferences;
• provide technical functions necessary to use the store.

Any cookies or technologies that are not strictly necessary are used in accordance with the user's choices and the applicable legal requirements.

This policy does not list advertising or analytics tools that have not been confirmed as actually being used by EFORI.

International data transfers

Some technology providers used to deliver the services may process information in countries outside the European Economic Area.

Where an international transfer requires specific safeguards, the mechanisms provided by applicable law are used, such as adequacy decisions, standard contractual clauses or other recognised safeguards.

How long we retain data

EFORI retains personal data for as long as necessary to fulfil the purposes for which it was collected.

The actual retention period also depends on the type of data and the relationship with the customer.

Certain information may be retained for longer where necessary to:

• comply with tax obligations;
• comply with accounting obligations;
• comply with other legal obligations;
• manage complaints or disputes;
• establish, exercise or defend legal rights.

Data used for marketing communications based on consent is processed until consent is withdrawn or until the processing is no longer necessary and lawful.

Your rights

Where provided by law, data subjects may exercise their rights in relation to their personal data.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

In Italy, data subjects may also contact the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) .

Required and optional data

Certain data is necessary to complete a purchase and provide the related services.

For example, without the information needed to identify the customer, receive payment and determine the delivery address, EFORI may be unable to process an order.

Providing data used solely for promotional activities is optional, subject to any other legal bases provided by applicable law.

Data relating to minors

EFORI's services are not specifically intended for minors and EFORI does not intend to knowingly collect personal data from minors in breach of applicable law.

If a parent or guardian believes that a minor's personal data has been provided inappropriately, they may contact EFORI to request verification and, where the relevant conditions are met, deletion.

Changes to this policy

EFORI may update this Privacy Policy to reflect legal, technical, organisational or service-related changes.

The updated version is published on the website together with the date of the latest update.