Left Banner

  • LeftBanner 1

Privacy Policy

Nonna Aretusa is committed to protecting the Personal Data of its customers. Respecting privacy is essential to providing a reliable and secure service.

1. Introduction

Nonna Aretusa is the "Data Controller" of your Personal Data. This means that we decide how to collect, process, and store personal data, always in compliance with GDPR regulations. The purpose of this policy is to explain clearly:

  • What data we collect
  • How we use it
  • Who we share it with
  • - Your rights and how to exercise them

2. Key Definitions

  • Personal Data: information that allows you to be identified, such as name, email, telephone number, and payment details.
  • Processing: any operation performed on your data, from collection to deletion.
  • Recipients: the person or company that receives the data (e.g., suppliers, authorities, etc.).
  • Purposes: the reasons why we collect and use the data.
  • Data Controller: the person who decides the purposes and means of processing.
  • Data Processor: the person who processes data on behalf of the Data Controller.
  • Affiliates and Brands: companies and brands associated with Nonna Aretusa.
  • GDPR: EU Regulation 2016/679 on data protection.

3. Collection of Personal Data

We collect data through:

  • Directly from you: account registration, orders, contests, requests, and customer assistance.
  • Automated systems: cookies and online tracking tools.
  • In-store visits: purchases, eye examinations, video surveillance for security and fraud prevention.
  • Social networks: connections or sharing through plugins.
  • Other sources: data providers, marketing, fraud prevention, or analytics.

 

4. Categories of Data Processed

Category Types of Data
Identification Data Name, surname, email, address, telephone number, date of birth, gender.
Payment Information PayPal data, MasterCard details, order details and purchased products. Payments are always secure through SSL protocols.
Profile and Commercial Data Account, password, preferences, purchases, invoices, feedback, interests.
Marketing and Communication Data Preferences regarding commercial communications and contact methods.
Device Information IP address, browser, language, operating system, login, approximate location.
Browsing Data Interactions with websites, emails, advertising, and usage statistics.

 

5. Purposes and Legal Bases for Processing

Purposes Details Legal Basis
Order and Payment Management Purchase of products online or in-store, management of invoices and warranties. Performance of the Contract
After-Sales Services Customer assistance, returns, warranties, and support. Performance of the Contract
User Account Registration, management, and access to online services. Performance of the Contract
Marketing Communications Promotions, newsletters, and personalized offers. Consent
Eye Examinations Eye examinations, prescriptions, optical fittings. Consent
Fraud Prevention Payment verification, fraud protection, and prevention of unlawful activities. Legitimate Interest
Statistical Analysis Evaluation of website, product, and marketing campaign performance. Consent / Legitimate Interest

 

6. Processing of Sensitive Data

Data relating to health and criminal records are processed only:

  • When consent is given
  • With appropriate security measures
  • With explicit consent

If you do not provide consent, some services will not be available.

7. Data Sharing

Data may be shared with:

  • Affiliates and Brands of Nonna Aretusa
  • Service providers (marketing, IT, accounting, legal) as Data Processors
  • Authorities or judicial bodies as required by law
  • - Third parties in the event of mergers, sales, or acquisitions

Data may also be transferred outside your country, with appropriate GDPR safeguards.

8. Secure Payments

Online and in-store payments are processed through secure PayPal platforms and MasterCard networks. All payment data is encrypted using SSL protocols and managed only by certified providers.

9. Data Retention

Data is retained for the time necessary for the purposes indicated, up to a maximum of 10 years unless otherwise required by law. Some data may be anonymized for statistical analysis.

10. Data Security

We adopt technical and organizational measures to prevent unauthorized access, loss, alteration, or accidental disclosure. Only authorized personnel may access the data, in accordance with strict confidentiality rules.

11. User Rights

You can:

  • Access, rectify, or delete your data
  • Restrict or object to processing
  • Withdraw your consent
  • Request data portability
  • - File a complaint with the Privacy Guarantor

To exercise your rights, write to: info@nonna-aretusa.it

12. Contact

Data Controller: Marco Giansiracusa
Data Protection Officer: info@nonna-aretusa.it

13. Updates

This policy may be updated periodically. The latest version will always be available on the website with the date of the latest update.