Privacy Policy
Last updated: 21 October 2026
This English version is a translation of the Italian text and is still being reviewed. In case of any difference, the Italian version prevails.
Who is the data controller
La Ceramica di Elena Ricciardi e C. S.a.s.
Via San Giovanni 108, 53037 San Gimignano (SI), Italy
VAT no. 01577700527
Email: info@laceramicadiele.it · Phone: +39 334 585 3225
What data we collect
- Order data: first and last name, email, phone number, shipping address and billing address (if different), products purchased.
- Gift voucher data: name and email of the buyer and, if you fill them in, the recipient's name and the message printed on the voucher. We use them only to send the voucher and manage its use.
- Contact form data: name, email and the text of your message.
- Payment data: payments are processed by PayPal. We do not receive or store your card or account details: PayPal handles them directly.
- Browsing data: IP address, browser type and pages visited, collected automatically by the servers for technical and security reasons.
Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing your order, shipping, returns and customer service | Performance of a contract (Art. 6.1.b GDPR) |
| Issuing invoices and meeting tax and accounting obligations | Legal obligation (Art. 6.1.c GDPR) |
| Replying to messages sent through the contact form | Pre-contractual measures at your request (Art. 6.1.b GDPR) |
| Protecting the website from abuse and fraud | Legitimate interest (Art. 6.1.f GDPR) |
If you do not provide your data
The data requested for an order is necessary to complete the purchase. Without it we cannot ship the products to you. The contact form data is needed to reply to you.
Who we share your data with
Only with those we need to provide the service:
- Amazon Web Services (website hosting and sending emails), as data processor;
- Zoho Corporation (our mailbox: messages from the contact form and order emails arrive there), as data processor;
- PayPal (Europe) S.à r.l. et Cie, S.C.A., for payments, as independent data controller;
- couriers (DHL, UPS, FedEx, BRT) for delivery;
- Google, only if you choose to display the map on the Contact page;
- our accountant and the authorities, when required by law.
We do not sell or pass on your data to third parties for commercial purposes.
Transfers outside the European Union
Some providers (for example Amazon Web Services, Zoho, PayPal and Google) may also process data outside the EU, in particular in the United States. In these cases the transfer is based on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission. The website and order data are hosted by Amazon Web Services in the eu-north-1 region (Stockholm, Sweden), within the European Union.
How long we keep your data
- Order data and invoices: 10 years, as required by tax law (Art. 2220 of the Italian Civil Code).
- Contact form messages: up to 12 months after our last exchange.
- Browsing data: no longer than 30 days, unless needed to investigate abuse.
Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its processing, object to its processing or receive it in a readable format (Arts. 15–22 GDPR). If you have given consent, you can withdraw it whenever you like. Write to info@laceramicadiele.it.
If you believe your data is not being processed correctly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
We do not make decisions based solely on automated processing, and we do not carry out profiling.