Privacy Policy

1. Data controller

SETTE MONDI, Ditta individuale, with registered office at Via Del Campo 45/R, 16124 Genova (GE), Italia, VAT number 03109810998, REA number GE-533663.

Privacy contact: [email protected].

2. Data we process

We process only the data needed to provide and protect the service.

• Account and profile details, language preference and verification status.
• Addresses, contact details, orders, returns, refunds and support communications.
• Technical and security data such as IP address, user agent, sessions and sign-in attempts.
• Reviews, newsletter preferences and evidence of consent.
• We do not store complete payment-card details in the store.

3. Purposes and legal bases

• Performance of a contract: account, cart, order, payment, delivery, return and support.
• Legal obligations: accounting, taxation, guarantees and consumer-rights handling.
• Legitimate interests: security, fraud prevention, system protection and legal claims.
• Consent: newsletters and optional features that require it; consent may be withdrawn.

4. Recipients and transfers

Data may be shared with hosting, email, payment, delivery and support providers only as necessary. Any transfer outside the European Economic Area is made using the safeguards required by the GDPR.

5. Retention

Data is kept only for as long as necessary for the stated purposes and legal obligations. Order and billing data follows applicable tax-retention periods; security data is retained for periods proportionate to abuse prevention.

6. Your rights

Where applicable, you may request access, correction, deletion, restriction, portability or object to processing by contacting the controller. You may also lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.