Privacy policy

Last updated: 03/05/2025
1. Data Controller
The data controller of your personal data is LVLA S.R.L.S., with registered office at Via Manzoni 39, 20121 Milan, Italy. For any inquiries regarding this policy, please contact: info@lucalarenza.com.

The Data Controller may appoint Data Processors for specific processing activities. A complete list of appointed Data Processors is available upon request.
2. Types of Data Collected
We collect and process personal data including:
- Identifying information (e.g., name, address, email, phone number)
- Purchase data (e.g., order history, payment method, shipping and billing addresses)
- Browsing data (e.g., IP address, browser type, cookies, usage data)
- Marketing and profiling data (e.g., preferences, interests, purchase behavior), only with explicit consent
3. Purpose and Legal Basis for Processing
We process your personal data for the following purposes:

- Fulfilling orders, providing services, and customer support (Art. 6(1)(b) GDPR)
- Complying with legal obligations (Art. 6(1)(c) GDPR)
- Sending marketing communications (Art. 6(1)(a) GDPR – with your consent)
- Profiling and personalized content (Art. 6(1)(a) GDPR – with your consent)
- Security and fraud prevention (Art. 6(1)(f) GDPR – legitimate interest)

Data will be retained only as long as necessary to fulfill the purposes for which it was collected, and in line with applicable legal obligations.
4. International Transfers
Your data may be transferred outside the European Economic Area (EEA), including to countries that may not provide the same level of data protection. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms in line with GDPR requirements.
5. Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including SSL encryption, secure servers, restricted access, and regularly updated antivirus and firewall protection.
6. Your Rights
As a data subject under GDPR, you have the right to:
- Access your personal data
- Rectify or update inaccurate data
- Request erasure (right to be forgotten)
- Restrict or object to processing
- Withdraw consent at any time
- Data portability
- Lodge a complaint with a Data Protection Authority

To exercise your rights, contact us at info@lucalarenza.com.
7. Cookie Policy
We use cookies and similar technologies to enhance user experience and provide personalized content. Cookies are small text files stored on your device. They may be session cookies (deleted when browser is closed) or persistent cookies (stored for longer periods).

Types of cookies we use:
- Technical cookies: ensure proper functionality of the site
- Analytics cookies: collect aggregated, anonymous statistics (e.g., via Google Analytics with IP anonymization)
- Marketing cookies: display personalized ads based on your browsing behavior
- Social media cookies: enable sharing through social networks

You can manage cookie preferences at any time through your browser settings or via www.youronlinechoices.com. We do not activate non-essential cookies without your prior consent through the cookie banner.