Last updated: 9 November 2026

This notice explains how we process the personal data of visitors to www.donalfonso-shop.it and of customers who buy from it, pursuant to articles 13 and 14 of Regulation (EU) 2016/679 («GDPR») and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data controller

Don Alfonso Consulting & Distribution S.r.l.
Corso Sant’Agata 11/13 – 80061 Sant’Agata sui Due Golfi, Massa Lubrense (NA), Italy
VAT no. IT03399551211 – REA NA-596101
Email: shop@donalfonso-shop.it

2. What data we process

• Identification and contact data: first name, surname, billing and shipping address, email, phone number and, where needed for invoicing, tax details (tax code, VAT number).
• Order data: products purchased, amounts, shipping method, gift card messages, order notes and any returns.
• Payment data: payments are handled directly by Nexi and PayPal. We do not receive or store your full card details; we only receive the outcome of the transaction.
• Account data: if you create an account, your login credentials and order history.
• Communications: the data you send us when you write to us by email or WhatsApp.
• Newsletter: the email address you give us when you subscribe.
• Browsing data: IP address, browser and device type, pages visited, collected by the site’s IT systems and, with your consent, through statistics and marketing cookies (see the Cookie Policy).

3. Purposes and legal bases

• Order management (conclusion and performance of the contract, payment, shipping, after-sales support, returns and withdrawal) – legal basis: performance of a contract (art. 6.1.b GDPR).
• Legal obligations (accounting, tax, invoicing) – legal basis: legal obligation (art. 6.1.c).
• Customer account management – legal basis: performance of a contract (art. 6.1.b).
• Answering your requests by email or WhatsApp – legal basis: pre-contractual measures and our legitimate interest in replying (art. 6.1.b and f).
• Sending the newsletter with news, limited editions and gift ideas – legal basis: consent (art. 6.1.a), which you can withdraw at any time using the link in every email or by writing to us.
• Website security and fraud prevention – legal basis: legitimate interest (art. 6.1.f).
• Statistics and personalised advertising through non-technical cookies – legal basis: consent given through the cookie banner (art. 6.1.a).

Providing the data needed for an order is mandatory: without it we cannot process your purchase. Providing your data for the newsletter is optional. We do not make decisions based solely on automated processing.

4. Who we share data with

Your data is processed by our authorised staff and may be disclosed, to the extent necessary, to parties acting as data processors or as independent controllers:

• the website hosting and email provider (Aruba S.p.A., Italy);
• payment providers: Nexi Payments S.p.A. and PayPal (Europe) S.à r.l. et Cie, S.C.A., which act as independent controllers for transaction data;
• couriers and carriers responsible for delivery;
• accounting and tax advisers, for legal obligations;
• providers of technical services for the operation, security and statistics of the website (for example Automattic for Jetpack) and for cookie consent management (Usercentrics – Cookiebot);
• the newsletter sending platform, for subscribers;
• Meta (WhatsApp), if you choose to contact us via WhatsApp;
• public authorities, where required by law.

Your data is not published or sold to third parties.

5. Transfers outside the European Union

Some providers (for example PayPal, Automattic, Meta, Google) may also process data in the United States. In these cases the transfer is based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, for certified providers, or on the Standard Contractual Clauses approved by the Commission.

6. How long we keep data

• Order data and accounting records: 10 years, as required by Italian civil and tax law (art. 2220 of the Civil Code).
• Customer account: until you ask us to delete it.
• Support requests: for as long as needed to handle them and in any case no longer than 24 months after the last contact, unless they relate to an order.
• Newsletter: until you withdraw your consent.
• Browsing data and cookies: for the duration stated in the Cookie Policy.

7. Your rights

At any time you can ask for access to your data, its rectification or erasure, restriction of processing and portability of the data you provided, and you can object to processing based on legitimate interest (articles 15–22 GDPR). You can withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to shop@donalfonso-shop.it. You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. Minors

Purchases on this website are reserved for adults. Alcoholic drinks are not sold to persons under 18.

9. Cookies

For information on cookies and to change your preferences at any time, please see the Cookie Policy.

10. Changes

We may update this notice to reflect new legislation or changes to our services. The current version is always published on this page, with the date of the last update.

This English version is provided for convenience. In case of discrepancy, the Italian version prevails.