This is a translation of the Italian text. In case of any discrepancy, the Italian version applies.
PRIVACY POLICY — Information notice under art. 13 of EU Reg. 2016/679 (GDPR)
Last updated: July 2026
DATA CONTROLLER
EDENCICLI S.R.L., registered office at S.P. per Inveruno 224/226, 20025 Legnano (MI), Italy, VAT no. 08457740960.
Privacy contacts: info@edenciclisrl.it · Tel. +39 0331 411451
DATA PROCESSED AND PURPOSES
a) Order management (legal basis: contract) — personal details, shipping and billing address, e-mail, phone, order history: to complete the sale, process the payment, ship the products, handle returns and warranties and issue tax documents.
b) Payments (contract) — payment data is processed directly by the payment service providers (e.g. Shopify Payments, PayPal, card schemes); the Controller does not keep full card numbers.
c) Contact requests (consent / pre-contractual measures) — name, e-mail and message sent through the contact form or via WhatsApp/phone: to answer your request.
d) Newsletter and marketing communications (consent) — e-mail: until consent is withdrawn, with one-click unsubscribe in every e-mail.
e) Browsing and cookies — see the Cookie Policy.
RECIPIENTS
Data may be disclosed to parties carrying out activities connected with and instrumental to the sale, appointed where necessary as data processors under art. 28 GDPR: Shopify International Ltd. (e-commerce platform and hosting), payment service providers, couriers and carriers, banks, consultants and professionals, and public bodies where required by law. Data is not sold or transferred to third parties for their own purposes.
TRANSFERS OUTSIDE THE EU
The Shopify platform may involve transfers of data to countries outside the EU (e.g. Canada, USA); such transfers take place on the basis of adequacy decisions of the European Commission or of standard contractual clauses (SCC).
RETENTION
Orders and tax documents: 10 years (legal obligations). Contact requests: until the request is dealt with. Newsletter: until unsubscription. Profiling (where consented): 12 months at most.
YOUR RIGHTS
By writing to info@edenciclisrl.it you can exercise your rights of access, rectification, erasure, restriction, objection and portability (art. 15-22 GDPR), and withdraw the consent you have given. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
PROVISION OF DATA
Providing the data marked as mandatory is necessary to complete the order or deal with your request; without it we cannot handle either. Optional consents (newsletter, profiling) are not a condition of purchase.
SECURITY
We apply appropriate technical and organisational measures (TLS encryption, access control, protected systems). Checkout is handled by Shopify to PCI-DSS standards.