Skip to content
Ship to
mensola.shop
Track orderCart

Privacy policy

Last updated: November 5, 2026

This policy explains what personal data we collect when you visit mensola.shop and buy, why we do it and what rights you have (Article 13 of Regulation (EU) 2016/679, “GDPR”).

1. Data controller

The controller is [Ragione sociale], [Sede legale], VAT no. [Partita IVA]. For any privacy request write to [email di assistenza].

2. What data we process

  • Order data: first and last name, email, phone, delivery address, products bought and amounts.
  • Payment data: handled by Mollie; we only receive the method used and the outcome of the payment.
  • Technical data: IP address and server logs, collected automatically to run and secure the site.
  • Messages you send us, for example for support or returns.

3. Why we process it

  • To handle the order, delivery, returns and support: necessary to perform the contract (Art. 6(1)(b) GDPR).
  • To meet tax and accounting obligations (Art. 6(1)(c) GDPR).
  • To protect the site, prevent fraud and defend our rights: our legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for marketing or profiling. If we offer a newsletter in the future, we will ask for separate consent.

Without the data requested at checkout we cannot fulfil the order.

4. Who we share it with

We share only the data needed with providers that process it on our behalf:

  • Mollie B.V. (Netherlands), for payments.
  • Our appointed logistics providers and couriers, to prepare and deliver the order.
  • Vercel Inc. (site hosting) and our database and email providers.
  • Tax advisers and authorities, where required by law.

Some providers, such as Vercel, may process data in the United States. Such transfers are protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

5. How long we keep it

  • Order data and tax records: 10 years, as required by law.
  • Carts not purchased: 60 days from the last change.
  • Technical server logs: only as long as needed for security, usually a few days.

6. Your rights

You can ask at any time to access, correct or delete your data, restrict its processing, receive it in a portable format or object to processing based on legitimate interest. Write to [email di assistenza]: we reply within one month.

You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of the country where you live.

We do not make decisions based solely on automated processing.