Privacy policy
Latest update: 23 August 2026
This Privacy Policy provides users of www.serenamangiatordi.com (the “Website”) with information concerning the processing of their Personal Data pursuant to Regulation (EU) 2016/679 (the “GDPR”) and Legislative Decree no. 196/2003, as amended (the “Italian Privacy Code”).
In accordance with applicable law, this Privacy Policy explains in particular:
• the categories of Personal Data processed;
• the purposes and legal bases of processing;
• the identity and contact details of the Data Controller;
• the categories of third parties involved in processing;
• international transfers of Personal Data;
• retention periods;
• the security measures adopted to protect Personal Data;
• Users’ rights in relation to their Personal Data.
This Privacy Policy applies to the Website and the services provided through it. It does not apply to third-party websites or platforms that may be linked from the Website.
DATA CONTROLLER
Pursuant to the GDPR, the Data Controller is the entity that determines the purposes and means of processing Personal Data. The Data Controller for Personal Data processed in connection with the Website is:
SERENA MANGIATORDI S.R.L.
Viale dei Ribes I Traversa no. 10
74026 Pulsano (TA)
Italy
Tax code and VAT number: 03486870730
REA: TA-261317
For any privacy-related request, Users may contact: info@serenamangiatordi.com
PERSONAL DATA. PURPOSES OF PROCESSING
“Personal Data” means any information relating to an identified or identifiable natural person. Personal Data may be provided directly by the User, collected automatically when the User accesses or interacts with the Website, or received from service providers involved in providing the Website and its services.
Depending on how the User interacts with the Website, Personal Data may include:
• identification data, such as name and surname;
• contact data, such as email address, telephone number and postal address;
• billing and delivery information;
• order and purchase history;
• account and authentication information;
• return, refund and legal guarantee information;
• communications sent to Serena Mangiatordi;
• photographs or other information submitted in connection with a return, wrong-product request or legal guarantee claim;
• device, browser, IP address and other technical information;
• browsing and interaction data;
• marketing preferences and consent information.
BROWSING DATA
The Website automatically processes certain technical information necessary to enable Users to access and use the Website, maintain its security and verify its correct functioning. This may include IP address, device information, browser type, operating system, date and time of access, pages requested, referring information and technical logs.
Technical data that is strictly necessary for the operation, integrity and security of the Website is processed on the basis of Serena Mangiatordi’s legitimate interest pursuant to Art. 6(1)(f) GDPR in operating and protecting the Website and providing its services. Optional analytics, personalization and marketing technologies are used in accordance with the User’s consent where consent is required.
For further information regarding cookies and similar technologies, please see the Cookie Policy.
ORDERS
When a User places an order through the Website, Serena Mangiatordi processes Personal Data necessary to process and fulfil the purchase. This may include name and surname, email address, telephone number where required, billing address, delivery address, products purchased, order and transaction information, delivery and tracking information and information necessary for invoicing where requested.
The provision of the information indicated as mandatory during checkout is necessary to process the order. Failure to provide required information may prevent the User from completing the purchase.
Personal Data relating to orders may also be processed for order confirmation, payment processing, delivery, returns and refunds, customer assistance, fraud prevention, compliance with tax and accounting obligations and the establishment, exercise or defence of legal claims.
The principal legal basis for processing order data is Art. 6(1)(b) GDPR, as processing is necessary for the performance of the sales contract or to take steps requested by the User before entering into the contract. Where processing is necessary to comply with tax, accounting or other statutory obligations, the legal basis is Art.
6(1)(c) GDPR.
PAYMENTS
Payments made through the Website are processed through Shopify and the payment providers made available at checkout, which may include Shopify Payments, PayPal, Klarna and other supported payment methods where available.
Payment service providers may process Personal Data necessary to authorise and process transactions, prevent fraud, verify payment instruments, process refunds and comply with legal obligations applicable to them.
Serena Mangiatordi does not receive or retain the Customer’s complete payment card details. Payment providers may act as data processors and/or independent data controllers depending on the processing activity concerned. Users should also refer to the privacy information provided by the relevant payment provider.
REGISTRATION ON THE WEBSITE
Users may create or access a customer account using the account functionality provided through Shopify. Personal Data associated with an account may include email address, name, addresses, order history, account preferences, authentication information and information connected with returns and purchases.
Shopify customer accounts may use email-based authentication and one-time verification codes or other authentication methods made available by Shopify.
Processing relating to the creation, access and operation of a customer account is necessary to provide the requested account service and is therefore based on Art. 6(1)(b) GDPR.
CUSTOMER SERVICE, RETURNS AND LEGAL GUARANTEE REQUESTS
When a User contacts Serena Mangiatordi or submits a return, wrong-product request or legal guarantee claim, Serena Mangiatordi processes the information necessary to handle the request. This may include identification data, order information, contact information, correspondence and photographs or other evidence provided by the User.
Processing may be necessary for performance of the sales contract pursuant to Art. 6(1)(b) GDPR, to comply with legal obligations under applicable consumer law pursuant to Art. 6(1)(c) GDPR, or to establish, exercise or defend legal claims pursuant to Art. 6(1)(f) GDPR.
SOFT SPAM
Where the conditions established by Art. 130(4) of the Italian Privacy Code are met, Serena Mangiatordi may use the email address provided by a Customer in connection with a completed purchase to send communications concerning Serena Mangiatordi products or services similar to those previously purchased, without requesting separate marketing consent.
The Customer may refuse such use when the email address is collected and may object at any later time, easily and free of charge, including by using the unsubscribe link contained in each relevant communication.
This processing is carried out pursuant to the specific exception provided by Art. 130(4) of the Italian Privacy Code.
NEWSLETTERS AND MARKETING COMMUNICATIONS
Users may choose to receive newsletters and commercial communications from Serena Mangiatordi. Where consent is required, these communications will be sent only after the User has given free, specific and informed consent.
The legal basis for such processing is Art. 6(1)(a) GDPR together with the applicable provisions of the Italian Privacy Code concerning electronic communications.
Users may withdraw their consent at any time by clicking the unsubscribe link contained in marketing emails or by contacting info@serenamangiatordi.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
SHOPIFY AND SHOPIFY NETWORK INTELLIGENCE
The Website is hosted by Shopify. Shopify collects and processes Personal Data when Users visit or interact with the Website, create or access customer accounts, use Shopify services or make purchases.
Shopify Network Intelligence is enabled for the Website. When this feature is enabled, Shopify may process information relating to a User’s interactions with this Website together with information relating to their interactions with Shopify and other Shopify merchants in order to provide advanced services (“Enhanced Services”).
These Enhanced Services may enable Serena Mangiatordi and Shopify to provide Users with a more personalised experience, serve more relevant advertising and better understand how Users interact with the Website and advertising.
Information concerning Users’ activity on the Website may be shared with Shopify and with third parties involved in providing these services, including parties located in countries other than the User’s country of residence.
Where consent is required, non-essential processing through cookies and similar technologies is carried out in accordance with the User’s choices made through the Cookie and Privacy Preferences panel.
Further information is available in the Shopify Consumer Privacy Policy. Users may also access the Shopify Privacy Portal to exercise applicable privacy choices and rights relating to Shopify’s processing.
Where applicable, Users may also exercise statutory opt-out rights relating to data sharing or targeted advertising through the Data Sharing Opt-Out / Your Privacy Choices mechanism made available on the Website.
LEGAL DEFENCE
Personal Data may be processed where necessary to establish, exercise or defend Serena Mangiatordi’s rights, including in judicial and extrajudicial proceedings. Such processing is based on Serena Mangiatordi’s legitimate interest pursuant to Art. 6(1)(f) GDPR in protecting and enforcing its rights.
COOKIES
Information relating to cookies and similar technologies used on the Website, including how Users can manage their choices, is available in the Cookie Policy.
SHARING AND TRANSFER OF PERSONAL DATA
Serena Mangiatordi may disclose Personal Data to third parties where necessary to operate the Website, fulfil orders, provide services requested by Users or comply with legal obligations.
These recipients may include:
• Shopify and providers supporting the Website and e-commerce infrastructure;
• payment service providers;
• banks and financial institutions where applicable;
• couriers, postal operators and logistics providers;
• return and delivery service providers;
• IT, hosting, security and technical service providers;
• email and communications service providers;
• professional advisers, accountants and legal advisers;
• public authorities, courts or law-enforcement bodies where required by law;
• other providers necessary to operate the Website or fulfil contracts with Customers.
Depending on the circumstances, these recipients may act as data processors on behalf of Serena Mangiatordi or as independent data controllers. Serena Mangiatordi may also disclose Personal Data where reasonably necessary to establish, exercise or defend its rights or the rights of third parties, or in connection with a corporate restructuring, merger, acquisition or transfer of business, subject to applicable law.
Users may request information about the categories of recipients processing their Personal Data by contacting info@serenamangiatordi.com.
INTERNATIONAL TRANSFERS OF PERSONAL DATA
Some service providers used by Serena Mangiatordi operate internationally and may process Personal Data outside the European Economic Area (“EEA”).
In particular, Shopify operates internationally. For Users located in the EEA, Shopify states that Personal Data is received by Shopify International Ltd. in Ireland and may subsequently be transferred to other Shopify entities and service providers, including in Canada and the United States.
Where Personal Data is transferred outside the EEA, such transfers will take place in accordance with applicable data-protection law and, where required, using safeguards such as an adequacy decision adopted by the European Commission, Standard Contractual Clauses, Binding Corporate Rules or another legally recognised transfer mechanism.
Further information regarding Shopify’s international transfers is available in the Shopify Privacy Policy.
METHODS OF PROCESSING AND SECURITY MEASURES
Personal Data is processed using electronic, automated and digital systems and, where necessary, through manual means. Serena Mangiatordi takes appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access and other unlawful processing.
Access to Personal Data is limited to persons and service providers who require access for the purposes described in this Privacy Policy. However, no method of electronic transmission or storage can guarantee absolute security.
RETENTION OF PERSONAL DATA
Serena Mangiatordi retains Personal Data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal, tax, accounting and contractual requirements. Personal Data that is no longer necessary and is not required to be retained by law will be deleted or anonymised.
|
Activity |
Data processed |
Legal basis |
Retention |
|
Browsing and technical security |
IP address, device and technical logs |
Legitimate interest - Art. 6(1)(f) GDPR |
For the period strictly necessary for operation, security and troubleshooting; anonymous or aggregated information may be retained longer |
|
Orders and purchases |
Identification, contact, order, delivery and transaction information |
Contract - Art. 6(1)(b) GDPR; legal obligations - Art. 6(1)(c) GDPR |
Generally 10 years from the relevant transaction or accounting record, and longer where required in connection with an ongoing tax assessment, legal claim, dispute or other legal obligation |
|
Customer accounts |
Account and contact information |
Contract - Art. 6(1)(b) GDPR |
For as long as the account remains active; after deletion, data not otherwise required for orders, legal obligations or claims will be deleted or anonymised |
|
Returns, refunds and legal guarantee requests |
Order information, correspondence, evidence and claim information |
Contract / legal obligation / legitimate interest as applicable |
For the period necessary to handle the request and thereafter where necessary for applicable legal or limitation periods |
|
Newsletter and consensual marketing |
Email address, contact information and marketing preferences |
Consent - Art. 6(1)(a) GDPR |
Up to 24 months from collection or the latest renewal of consent, unless consent is withdrawn earlier; limited information may be retained thereafter to document withdrawal and prevent further communications |
|
Soft spam |
Customer email address and relevant purchase information |
Art. 130(4) Italian Privacy Code |
Up to 24 months from the relevant completed purchase, unless the Customer objects earlier; underlying purchase information may continue to be retained for independent legal purposes |
|
Optional analytics, personalization and marketing |
Interaction, device and preference information |
Consent where required |
According to the applicable consent, cookie duration and service-provider retention rules described in the Cookie Policy |
|
Legal defence |
Information relevant to claims or disputes |
Legitimate interest - Art. 6(1)(f) GDPR |
For the period necessary under applicable limitation periods and until any dispute is finally resolved |
LINKS TO THIRD-PARTY WEBSITES OR PLATFORMS
The Website may contain links to third-party websites, platforms or services. Serena Mangiatordi does not determine how those independent third parties process Personal Data and is not responsible for their privacy practices. Users are encouraged to review the privacy policies of any third-party service they visit.
USERS’ RIGHTS
Subject to the conditions and limitations provided by the GDPR and applicable law, Users have the right to:
• obtain confirmation as to whether their Personal Data is being processed and obtain access to it;
• request correction of inaccurate Personal Data and completion of incomplete Personal Data;
• request erasure of Personal Data where the applicable conditions are met;
• request restriction of processing where the applicable conditions are met;
• receive Personal Data in a structured, commonly used and machine-readable format where the right to data portability applies;
• object to processing based on legitimate interests where the applicable conditions are met;
• object to direct marketing at any time;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
• exercise rights relating to automated decision-making where applicable;
• lodge a complaint with a competent supervisory authority.
Requests relating to Personal Data processed by Serena Mangiatordi may be sent to
info@serenamangiatordi.com. Serena Mangiatordi may request information necessary to verify the identity of the person making the request.
Users may also have rights in relation to processing carried out directly by Shopify. Relevant requests and privacy choices can be exercised through the Shopify Privacy Portal.
RIGHT TO LODGE A COMPLAINT
Users have the right to lodge a complaint with the competent data-protection supervisory authority. In Italy, the supervisory authority is:
Garante per la protezione dei dati personali
Piazza Venezia no. 11
00187 Rome
Italy
The right to lodge a complaint is without prejudice to any other administrative or judicial remedy available to the User.
CHANGES TO THIS PRIVACY POLICY
Serena Mangiatordi may update this Privacy Policy from time to time, including where necessary to reflect changes in applicable law, Website functionality, service providers, Shopify services or settings, or the purposes or methods of processing Personal Data.
The updated version will be published on the Website with a revised “Latest update” date. Where required by law, Users will also be informed of material changes through appropriate means.
FURTHER INFORMATION
For further information concerning cookies and similar technologies, please see the Cookie Policy.
For information about the terms governing purchases through the Website, please see the General Terms and Conditions of Sale.
For questions concerning privacy or to exercise privacy rights, please contact: info@serenamangiatordi.com
