Skip to content

Cart

Your cart is empty

PRIVACY POLICY
Emanuele Pantanella Design

  1. INTRODUCTION

With this Privacy Policy, Iulia Domna S.r.l. (hereinafter also referred to as the “Company” or the “Data Controller”) describes how it manages its website, with particular reference to the purposes and methods of collection, recording and use of personal data (hereinafter referred to as “Personal Data”) of users who access it (hereinafter referred to as “Data Subjects” or “Users”).

This document refers exclusively to the website www.emanuelepantanelladesign.com (hereinafter also referred to as the “Website”) and not to other websites that may be consulted by the User through links on the pages of the Website. 

The Website is controlled and managed by Iulia Domna S.r.l., as Data Controller of the Personal Data collected therein.

This privacy policy, intended for those who interact with the Company's web services, is designed to meet the requirements of Regulation (EU) No. 679/2016 (hereinafter, the “Regulation”) and Legislative Decree No. 196/2003.

2. DATA CONTROLLER

The Data Controller is Iulia Domna S.r.l., with registered office in Rome – 00186, Via della Vetrina 4, VAT number 10171851008, e-mail studio@emanuelepantanelladesign.com.

You may contact the Data Controller free of charge by writing to the e-mail address studio@emanuelepantanelladesign.com, or by sending a registered letter with return receipt to the registered office, as identified above.

3. TYPE OF DATA PROCESSED

3.1 Navigation data
During normal operation, the IT systems and software procedures used to operate the Website acquire some Personal Data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified Data Subjects, but by its very nature could, through processing and association with other data, allow Data Subjects to be identified.

This category of data includes personal details (such as name, surname, e-mail address), IP addresses or domain names of computers used by Users connecting to the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User's operating system and IT environment.

3.2 Data provided voluntarily by the User
The Data Controller may also process Personal Data that the User chooses to provide voluntarily and freely during certain interactions with the Website. 

3.2.1. The Data Controller collects Personal Data provided by the User through the Website when purchasing one or more items. The Personal Data processed for the purposes of order management includes:

  • Name and surname;
  • e-mail address;
  • telephone number;
  • shipping address;
  • data necessary for the execution of the payment.

3.2.2. The Data Controller also processes the Personal Data of Users who:

  • subscribe to the “Emanuele Pantanella Design” newsletter, providing their e-mail address, 
  • send a contact request via the e-mail addresses indicated on the Website; in such cases, Users provide their first name, last name and e-mail address, as well as any additional Personal Data included in the message.

4. PURPOSE OF DATA PROCESSING AND NATURE OF DATA PROVISION

  1. Personal data will be used exclusively for the following purposes:
  2. obtain anonymous statistical information about traffic on the Website and enable its proper functioning;
  3. manage sales activities and provide sales and after-sales services, including administration, accounting, returns and warranty management, and customer relationship management;
  4. to ensure compliance with legal obligations, national and European regulations (including anti-money laundering regulations), prevent fraud and exercise rights in court;
  5. send the ‘Emanuele Pantanella Design’ newsletter by e-mail, subject to the consent of the Data Subject;
  6. defend the rights of the Company in any judicial, administrative or extrajudicial proceedings and in disputes arising in relation to the services offered through the Website.
  7. The nature of the provision of Personal Data varies according to the different purposes of the processing and is qualified as follows:
  • for the purpose referred to in point (a), necessary to ensure the proper functioning of the platform; failure to provide such data may limit or prevent navigation on the Website;
  • for the purposes referred to in point (b), necessary, as it is required for the performance of the purchase contract. Failure to provide such data will make it impossible for the Data Controller to process the order and provide the related services;
  • for the purposes referred to in point (c), necessary, as it is required by applicable law. Failure to provide such data will prevent the Data Controller from fulfilling its legal obligations;
  • for the purpose referred to in point (d), optional, as failure to provide such data or withdrawal of consent does not affect the possibility of browsing the Website and/or purchasing products through it;
  • for the purpose referred to in point (e), necessary for the protection of the Data Controller’s right.

5. LEGAL BASIS FOR PROCESSING

5.1. The legal basis for the processing of Personal Data referred to in Article 4 above consists of:

  • with reference to the purposes referred to in points a) and e),

the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the GDPR, aimed at ensuring the proper functioning of the Website, preventing fraud and abuse, and protecting its rights in judicial or out-of-court proceedings;

  • with reference to the purpose referred to in point b),

the performance of a contract or pre-contractual measures taken at the request of the Data Subject, pursuant to Article 6(1)(b) of the GDPR;

  • with reference to the purpose referred to in point c),

legal obligations to which the Data Controller is subject, pursuant to Article 6, paragraph 1, letter c) of the GDPR;

  • with reference to the purpose referred to in point d),

consent of the Data Subject, pursuant to Article 6(1)(a) of the GDPR, given through a specific and separate expression of consent, provided only after having reviewed this Privacy Policy. The User may withdraw his/her consent at any time by using the unsubscribe button included in each newsletter or by sending an email to studio@emanuelepantanelladesign.com. 

6. CATEGORIES OF SUBJECTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED

6.1. The Data Subject’s Personal Data shall be processed by the Company’s collaborators and/or employees, within the scope of their respective duties, as “authorized persons” to process the data, as well as by any third parties from time to time duly appointed as “Data Processors” pursuant to Article 28 of the Regulation, in accordance with the instructions provided by the Data Controller, such as suppliers entrusted with the technical management of the Website and sales activities. 

6.2. Where necessary, the data may be made accessible to the judicial authority or law enforcement authorities in the event of a specific request. Where necessary or required by laws, regulations, EU legislation, orders of judges, arbitrators or public authorities, as well as for the performance of contractual obligations (e.g. Public Bodies, Supervisory Authorities, Banking Institutions, etc.), the Personal Data may be disclosed to the relevant recipients. The data may also be disclosed to internet service providers, web administrators, and companies providing data entry and mailing services.

7. METHODS OF PROCESSING AND DATA RETENTION PERIODS

7.1. Personal Data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Personal Data processed to respond to User requests will be stored for the time necessary to perform the requested services and, where applicable, for additional periods of time required by specific legal provisions, in compliance with civil, fiscal and tax obligations currently in force.

Personal Data processed for the purpose of sending commercial communications will be retained until the Data Subject revokes their consent and, in any case, within the time limits permitted by current legislation.

It is understood that data relating to purchase details, if used for sending promotional communications or for processing analyses aimed at personalizing offers, will be stored for a period not exceeding 24 months from their registration, after which they will be deleted or made anonymous, in accordance with the provisions of the Data Protection Authority.

7.2. Specific security measures are taken to prevent data loss, unlawful or incorrect use and unauthorized access. The technical security measures implemented by the Data Controller include antivirus and anti-ransomware systems, firewalls and access passwords, as well as physical measures to prevent access to the premises where the data is stored. Personal Data is also processed using IT systems and cloud services provided by service providers appointed for this purpose as data processors pursuant to Article 28 of the GDPR, which guarantee adequate levels of security, integrity and availability of the data.


8. COOKIES

The Website uses technical cookies and, subject to the consent of the Data Subject, profiling, analytics and social cookies, as well as additional features such as plug-ins and/or buttons. For further information, Data Subjects are invited to consult the Cookie Policy.


9. RIGHTS OF DATA SUBJECTS

The Data subject is entitled the rights provided in Articles 15-22 of the Regulation, including:

  • access to their personal data and information relating to the processing;
  • rectification of inaccurate data or completion of incomplete data;
  • erasure of personal data (“right to be forgotten”), in the cases provided for in Article 17 of the Regulation;
  • restriction of processing, in the circumstances provided for in Article 18 of the Regulation;
  • data portability, where the processing is based on consent or a contract and is carried out by automated means, obtaining the data in a structured, commonly used and machine-readable format, including for the purpose of transmitting it to another controller;
  • objection to processing, at any time, for reasons related to the particular situation of the Data Subject;
  • withdrawal of consent, if the processing is based on consent, without prejudice to the lawfulness of the processing carried out prior to the withdrawal.

The Data Subject retains the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).

The Data Subject may exercise the above rights by sending a request to the Data Controller at the addresses indicated in paragraph 2 of this privacy policy.

10. TRANSFER OF DATA ABROAD

For the performance of certain processing operations on Personal Data, the Company may communicate such data to external parties located in countries outside the European Union (EU) or the European Economic Area (EEA). Such transfers will be carried out in accordance with Articles 44 et seq. of the GDPR, on the basis of adequacy decisions by the European Commission or, failing that, through the adoption of Standard Contractual Clauses and/or additional safeguards necessary to ensure a level of protection of personal data equivalent to that guaranteed in the EU.


Rome, February 2026
Iulia Domna S.r.l.