Privacy policy

Privacy Policy

Pursuant to Article 13 of EU Regulation 2016/679 - GDPR

This Privacy Policy describes how Adamo S.r.l. collects, uses, stores and protects the personal data of users who browse the website, create an account, make purchases or interact with our services.

1. Data Controller

The Data Controller is:

  • Company Name: Adamo S.r.l.
  • Registered and Operating Office: Via Francesco Culcasi 1/B Z.I.R., 91100 Trapani (TP), Italy
  • VAT No. / Tax Code: 02454830817
  • Telephone: +39 0923 558778
  • Email: info@adamosrl.com
  • Certified Email (PEC): gadamo@pec.it

2. Types of Personal Data Collected

Depending on the type of interaction with our website, Adamo S.r.l. may collect the following categories of data:

  • Personal and contact details: First name, surname, company or organisation, tax code or VAT number, residential or registered office address, email address and telephone number.
  • Shipping and billing details: Delivery address, billing address and SDI code/PEC address for electronic invoicing.
  • Payment and transaction data: Chosen payment method and transaction details (full credit/debit card details are not stored on our servers, but are processed directly by the integrated secure payment providers).
  • User account data: Login credentials (email and encrypted password), order history and saved preferences.
  • Browsing and technical data: IP address, browser type, access times, pages visited and data collected through cookies and similar technologies (please refer to our Cookie Policy for details).
  • Data provided voluntarily: Information submitted through contact forms, technical support requests or communications with our Customer Service.

3. Purposes of Processing, Legal Bases and Retention Periods

Purpose of Processing Legal Basis (GDPR) Retention Period
A. Order fulfilment and online sales
(Shopping cart management, product shipping, invoicing, after-sales support and warranty)		 Performance of a contract or steps taken prior to entering into a contract (Art. 6(1)(b)) For the time required to perform the contract and manage statutory warranties.
B. Accounting and tax obligations
(Issuing invoices and maintaining accounting records)		 Compliance with a legal obligation (Art. 6(1)(c)) 10 years (pursuant to Article 2220 of the Italian Civil Code and applicable tax legislation).
C. Customer account registration and management
(Access to the reserved area and order history)		 Performance of contractual measures/user request (Art. 6(1)(b)) Until the user requests deletion of the account or after 24 months of inactivity.
D. Customer support and Customer Care
(Responding to technical queries and requests for information)		 Steps taken prior to entering into a contract or performance of a contract (Art. 6(1)(b)) For the time required to handle and close the request (maximum 12 months).
E. Fraud prevention and website security
(Protecting systems and establishing liability in the event of cybercrime)		 Legitimate interests of the Data Controller (Art. 6(1)(f)) For the period strictly necessary to protect security and within the limits established by law.
F. Direct marketing and newsletters
(Sending commercial communications, promotions and news about products and services)		 Express and optional consent (Art. 6(1)(a)) Until consent is withdrawn (opt-out/unsubscription using the link at the bottom of each email).
G. Soft spam / Communications concerning similar products
(Sending email offers regarding products similar to those purchased, pursuant to Article 130(4) of Italian Legislative Decree No. 196/2003)		 Legitimate interests of the Data Controller Until the data subject objects (the right to opt out may be exercised at any time).

4. Shopify Platform and Recipients of Personal Data

Our online store is hosted on the Shopify platform (provided by Shopify International Limited / Shopify Inc.), which supplies the e-commerce infrastructure and order-processing systems.

Your personal data may be disclosed to third parties strictly necessary for the purposes described above, specifically appointed as Data Processors (Art. 28 GDPR) or acting as independent Data Controllers:

  • IT service and platform providers: Shopify and the related integrated applications used to manage the store.
  • Banks and payment gateways: Electronic payment platforms (e.g. credit card networks, PayPal and Stripe) used to process transactions securely.
  • Logistics providers and express couriers: For the collection, transport and delivery of purchased products.
  • Tax and legal advisers: For administrative, accounting and tax compliance.
  • Competent authorities: Where required to comply with legal orders or judicial proceedings.

Under no circumstances will personal data be disclosed to unspecified recipients or sold to third parties for their own promotional purposes.

5. Transfers of Personal Data Outside the EU

The use of the Shopify platform and certain cloud or payment services may involve the transfer of personal data to countries outside the European Economic Area (EEA), particularly Canada and the United States.

Such transfers take place in full compliance with Chapter V of the GDPR through:

  • Adequacy decisions adopted by the European Commission (e.g. for Canada or for the United States through participation in the EU-US Data Privacy Framework);
  • The adoption of Standard Contractual Clauses (SCCs) approved by the European Commission, together with supplementary technical and organisational security measures.

6. Processing Methods and Security

Personal data is processed using electronic/IT systems and, where necessary, in paper form, in accordance with the principles of fairness, lawfulness and transparency.

All transactions and communications containing sensitive or payment data are protected by advanced encryption protocols (SSL/TLS technology). Appropriate technical and organisational security measures are implemented to prevent data loss, unlawful use, unauthorised access or alteration.

7. Rights of the Data Subject (Articles 15-22 GDPR)

Users may exercise the following rights guaranteed by the GDPR at any time:

  • Right of access (Art. 15): To obtain confirmation as to whether their personal data is being processed and to receive a copy.
  • Right to rectification (Art. 16): To request the updating or correction of inaccurate or incomplete data.
  • Right to erasure / Right to be forgotten (Art. 17): To request the deletion of personal data where there are no longer legitimate grounds for processing or mandatory tax retention periods have expired.
  • Right to restriction of processing (Art. 18): To request the temporary restriction of processing where the conditions established by law apply.
  • Right to data portability (Art. 20): To receive personal data in a structured, commonly used and machine-readable format.
  • Right to object (Art. 21): To object at any time to processing based on legitimate interests or to processing for direct marketing purposes.
  • Right to withdraw consent: To withdraw consent given for marketing or newsletters at any time, without affecting the lawfulness of processing carried out before its withdrawal.

How to exercise your rights

Requests may be submitted to the Data Controller without any particular formalities:

  • By registered letter with acknowledgement of receipt to: Adamo S.r.l., Via Francesco Culcasi 1/B Z.I.R., 91100 Trapani (TP), Italy
  • By email: info@adamosrl.com
  • By certified email (PEC): gadamo@pec.it

Data subjects also have the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority - Piazza Venezia 11, 00187 Rome, website: www.garanteprivacy.it).

8. Cookies and Tracking

The website uses technical cookies that are essential for the operation of the e-commerce service (e.g. session maintenance and shopping cart management), as well as third-party analytics and profiling cookies subject to the user's prior express consent. For further information and to manage your preferences, please refer to our dedicated Cookie Policy, available through the banner on the website.

9. Changes to this Privacy Policy

Adamo S.r.l. reserves the right to update this Privacy Policy in response to changes in legislation or organisational/functional changes to the platform. The date of the latest update will always be shown at the bottom of the document.

Last updated: September 2026