Privacy Policy
Last updated: 1 August 2026
This notice is provided pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (as amended by Italian Legislative Decree 101/2018) to users who visit the website https://www.gingermoda.com/en/. The data controller is GINGER di Giulia Maccianti.
Data Controller
GINGER di Giulia Maccianti
Corso Giacomo Matteotti, 56 - 51016 Montecatini Terme (PT) - PEC: giuliamaccianti@pec.it
VAT No. P.IVA 02226430508 - C.F. MCCGLI92D50G702D
info@gingermoda.com
Categories of data processed
Depending on the user's interactions, the Data Controller may process: browsing data (IP address, user agent, pages visited, technical logs), data provided voluntarily through the site's forms, and data collected through cookies and similar technologies, as detailed in the Cookie Policy.
Purposes, legal bases and data
- Contact and quote requests
-
Responding to requests submitted through the site's forms.
Legal basis: Performance of pre-contractual measures and/or consent (Art. 6(1)(b) / 6(1)(a) GDPR).
Data: Name, email, phone number, content of the message. - Newsletter and direct marketing
-
Sending informational and promotional communications.
Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR), which may be withdrawn at any time.
Data: Email, name. - Orders, payments and shipping
-
Management of purchases, payments, shipping and customer support.
Legal basis: Performance of the contract and legal obligations (Art. 6(1)(b) / 6(1)(c) GDPR).
Data: Identification and billing data, address, order data, payment data (handled by the payment circuits). - Registration and restricted area
-
Creation and management of the user account.
Legal basis: Performance of the contract and/or consent (Art. 6(1)(b) / 6(1)(a) GDPR).
Data: Login credentials, identification data. - Contact via WhatsApp
-
Management of conversations initiated by the user via WhatsApp.
Legal basis: Consent/legitimate interest (Art. 6(1)(a) / 6(1)(f) GDPR). WhatsApp is provided by Meta (USA).
Data: Phone number, content of the conversation. - Statistics and marketing via cookies
-
Measurement of site usage and, where active, remarketing/personalised advertising.
Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR). Full list in the Cookie Policy.
Data: Cookie identifiers, browsing data.
Nature of the provision of data
The provision of data for purposes based on legal obligations or on the performance of a contract is necessary: failure to provide it may prevent the provision of the service. The provision of data for purposes based on consent (e.g. marketing, newsletter) is optional, and any refusal does not affect the use of the site.
Recipients and non-EU transfers
Personal data may be disclosed to parties acting as data processors pursuant to Art. 28 GDPR: technology service providers (hosting, maintenance, email), the third-party service providers listed below, as well as parties to whom disclosure is required by law.
External data processors:
- Hosting: Hostinger International Ltd. Newsletter e CRM: Brevo (Sendinblue). Analytics e tag management: Google Ireland Ltd (Google Analytics 4, Google Tag Manager). Advertising e misurazione: Meta Platforms Ireland Ltd (Meta Pixel). Pagamenti: WooPayments/Stripe, PayPal, Klarna. Ogni responsabile tratta i dati per conto del titolare sulla base di un accordo ex art. 28 GDPR.
| Service | Provider | Country | Basis for the transfer |
|---|---|---|---|
| Google Analytics 4 | Google Ireland Ltd | Ireland / USA | EU-US Data Privacy Framework |
| Google Tag Manager | Google Ireland Ltd | Ireland / USA | EU-US Data Privacy Framework |
| Meta Pixel (Facebook) | Meta Platforms Ireland Ltd | Ireland / USA | EU-US Data Privacy Framework |
| Brevo (Sendinblue) | Sendinblue SAS | France (EU) | No non-EU transfers |
Some providers may transfer data to non-EU countries (in particular the USA). Such transfers take place on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR: adherence to the EU-US Data Privacy Framework and/or adoption of the Standard Contractual Clauses approved by the European Commission.
Retention period
I dati di contatto sono conservati per il tempo necessario a gestire la richiesta e, salvo diversi obblighi di legge, per un massimo di 24 mesi. I dati relativi a ordini e fatturazione sono conservati per 10 anni per obblighi fiscali e civilistici. I cookie hanno le durate indicate nella Cookie Policy.
Consent records
In order to be able to demonstrate the consent given (Art. 7 GDPR), the site keeps a record of the choices made on the cookie banner. For each consent the following are stored: date and time, accepted categories, version of the notice and the browser user agent as well as the IP address in anonymised form. This data is retained for 365 days, is not used for any other purpose and is automatically deleted upon expiry.
Profiling and automated decision-making
The site may carry out profiling activities for statistical and marketing purposes through cookies and similar technologies, exclusively subject to the consent of the data subject and with the possibility of withdrawal at any time.
Rights of the data subject
The data subject may exercise, within the limits set by law, the following rights:
- access to data (Art. 15)
- rectification (Art. 16)
- erasure/right to be forgotten (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- objection to processing (Art. 21)
Withdrawal of consent
Where processing is based on consent, the data subject may withdraw it at any time, without affecting the lawfulness of processing based on consent given before its withdrawal. For cookies, you can update your choices through the preferences panel (Manage cookie preferences).
Right to lodge a complaint with the supervisory authority
The data subject has the right to lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali (www.garanteprivacy.it) or with the competent supervisory authority.
How to exercise your rights
Requests may be sent to the Data Controller using the contact details indicated above (info@gingermoda.com). The Data Controller responds without undue delay and in any case within the time limits set by law.
Cookies
The use of cookies and similar technologies is described in detail in the Cookie Policy.
Changes to this notice
The Data Controller reserves the right to update this notice; changes will be published on this page together with the date of the last update.
This text is an automatically generated template based on the configured information: it is recommended to verify its completeness and accuracy and to have it reviewed by a legal advisor before publication.