Privacy Policy

Privacy Policy

This policy describes how personal data of this website's users is processed, in accordance with Regulation (EU) 2016/679 (GDPR).

Data controller

Cavallini Luca, VAT IT02438610392, Via Madonna 10, 48123 Ravenna (RA), Italy. Email: shop@presta365.com

Data we process

  • Account data: name, email, password (stored encrypted);
  • Order and billing data required for the purchase and tax obligations;
  • IP address and server technical logs, for security and diagnostics;
  • License data: the shop domain you link to the license and, when installed modules check the license and updates or you open their configuration page, the domain, IP address, user agent and module version;
  • Reviews you choose to publish, with the name you provide;
  • Browsing data and cookies (see the cookie banner).
  • Proof of consent to the immediate supply of digital content: date and time, accepted text, language and IP address, kept as evidence of the waiver of the right of withdrawal;
  • Campaign measurement, only with your consent to statistics or marketing cookies: order data (value, products, email and phone hashed, IP address and browser) are sent to Google Ireland (Google Analytics) and Meta Platforms Ireland (Meta Pixel and Conversions API); IP address and browser are kept with the cart until the order, for at most 30 days;

Purposes and legal bases

  • Performance of the contract: orders, licenses, downloads, updates and support, including license verification;
  • Legal and tax obligations: invoicing and accounting;
  • Legitimate interest: site security, prevention of abuse and of unauthorised use of the modules, identifying the country of origin from the IP address, and an email inviting you to review the module after purchase (you can object at any time);
  • Consent: statistics/marketing cookies, newsletter subscription and sign-in with a Google account.

Whether providing data is required

Account, order and billing data are required to conclude and perform the contract: without them a purchase is not possible. All other data (newsletter, reviews, non-essential cookies, Google sign-in) is optional.

Recipients and processors

Besides the controller, data is processed only to the extent necessary by:

  • the provider of the infrastructure the site's server runs on, in Italy;
  • Google (Google Workspace), for sending and receiving the shop's emails;
  • PayPal and PrestaShop SA (PrestaShop Checkout), for payments; PayPal processes payment data as an independent controller;
  • Fatture in Cloud, for issuing invoices, and the tax authorities for tax obligations;
  • Google, for sign-in with a Google account if you choose it, and for Google Analytics 4 only with your consent.

Data is not sold or disclosed to third parties for their own marketing purposes.

Transfers outside the European Union

Some providers (Google, PayPal) may also process data in the United States. In those cases the transfer relies on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the Commission (Articles 45 and 46 GDPR).

Payments

Payments are handled by PrestaShop Checkout / PayPal. Card details are processed directly by the payment provider; the site neither receives nor stores them.

Social login

If you choose to sign in with your Google account, we only receive the essential data (name and email) from Google to create or link your account.

Cookies and statistics

Statistics and marketing cookies (e.g. Google Analytics) are activated only with your consent via the cookie banner, where you can accept, reject or customise them at any time.

Hosting

The site is hosted on a server managed directly by the controller (Debian/Apache environment), located in Italy. The country of origin is derived from the IP address using MaxMind's GeoLite2 database installed on the server itself: the IP address is not sent to third parties for this purpose.

Retention

Data is kept for the duration of the relationship and, where required, for statutory periods (e.g. tax documents up to 10 years).

Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection, as well as withdraw consent, by writing to shop@presta365.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Back to top