Privacy Policy

PRIVACY POLICY — ACTIVESHIFT

This page describes the management of the ActiveShift website regarding the processing of personal data of users who visit it and make purchases.

1. Data Controller

The Data Controller for data collected through this site is:

  • Controller: Marco Tondi

  • Website: ActiveShift

  • VAT ID / Tax ID: TNDMRC02L19F356N

  • Address: Via Amedeo Venuti, 17, Turriaco, 34070, GO, Italy

  • Contact email for privacy: Marcotondi2002@gmail.com

2. Type of Data Collected

During navigation or when placing an order, the website collects the following categories of data:

  • Identification and contact data: Name, surname, email address, phone number, shipping and billing address.

  • Payment data: Credit/debit card data is processed directly by payment service providers (e.g., Shopify Payments, PayPal) in an encrypted manner and is not stored on our servers.

  • Navigation data: IP address, browser type, access times, pages visited (collected via technical or analytical cookies).

3. Purpose of Processing and Legal Basis

Personal data is processed for the following purposes:

  1. Order Management and Execution (Contract Execution): Processing purchases, shipping products, managing returns, and customer support.

  2. Fulfillment of Legal Obligations (Legal Obligation): Issuing invoices, accounting, and tax compliance.

  3. Marketing and Newsletter (Consent): Sending promotions, discounts, or commercial communications related to ActiveShift (with the user's explicit consent).

  4. Security and Fraud Prevention (Legitimate Interest): Protecting the website and preventing illegal activities.

4. Processing Methods and Data Retention

Processing is carried out using IT and telematic tools with logic strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of the data.

Data will be retained for the time strictly necessary to manage the order and to comply with legal obligations (e.g., 10 years for the retention of tax and accounting documents). Data collected for marketing purposes will be retained until the user withdraws consent.

5. Communication and Data Sharing

The user's personal data may be shared with third parties only and exclusively for the execution of the contract or due to a legal obligation, including:

  • E-commerce and Hosting Platforms: Shopify.

  • Couriers and Logistics Companies: For the physical delivery of goods.

  • Payment Service Providers: For secure management of financial transactions.

  • Tax Consultants / Accountants: For accounting compliance.

6. Data Subject Rights (GDPR)

As a data subject, pursuant to articles 15-22 of the GDPR, the user has the right at any time to:

  • Access their personal data and request a copy.

  • Request the rectification or updating of inaccurate data.

  • Request the erasure of data ("right to be forgotten"), where applicable.

  • Request the restriction of processing or object to it.

  • Request data portability.

  • Withdraw consent at any time (without affecting the lawfulness of processing based on consent given before withdrawal).

To exercise their rights, the user can send a written request to the Controller at the email address: Marcotondi2002@gmail.com