Privacy Policy

Last updated: May 5, 2026

This Privacy Policy describes how GALLERY S.R.L. processes the personal data of users who browse www.spaziogallery.it, make online purchases, request assistance, subscribe to the newsletter, or interact with SPAZIOGALLERY through the channels available on the website.

We invite you to carefully read this information before using the website or completing a purchase.

1. Data Controller

The Data Controller is GALLERY S.R.L., with registered office in Via Giuseppe Garibaldi 6, 84014 Nocera Inferiore (SA), VAT number and Tax ID 04044791202, REA SA - 498332, PEC gallery@pecaruba.it.

For privacy-related requests, you can write to ecommerce@spaziogallery.it or to PEC gallery@pecaruba.it.

2. Scope of Application

This information applies to processing carried out through the website www.spaziogallery.it, the online checkout, the customer area, assistance channels, the newsletter, any contact forms, WhatsApp, and other tools connected to the SPAZIOGALLERY online shopping experience.

Third-party websites, platforms, and services that may be reachable via links are governed by their respective privacy policies.

3. Categories of Personal Data Processed

Depending on the service used, we may process the following categories of data:

identifying and contact data, such as name, surname, billing and shipping address, email, and telephone number;
data related to accounts, orders, purchased products, purchasing preferences, shipments, returns, exchanges, and refunds;
payment data and transactional information managed by the selected providers at checkout, including payment outcome, transaction identifiers, and method used; SPAZIOGALLERY does not store full payment card details;
browsing and technical data, such as IP address, online identifiers, logs, device, browser, visited pages, website interactions, cookies, and similar tools;
data related to newsletters, marketing preferences, consent, interactions with commercial communications, and unsubscribe requests;
content of communications sent via email, form, WhatsApp, chat, or other assistance channels;
data necessary for administrative, accounting, tax, anti-fraud compliance, website security, and protection of the Controller's rights.

4. Purposes, Legal Bases, and Retention Periods

Personal data is processed for the purposes indicated below. Retention periods are indicative and may vary when retention is necessary for legal obligations, dispute management, fraud prevention, or protection of SPAZIOGALLERY's rights.

Purpose	Main Data	Legal Basis	Indicative Retention
Order management and contract	Customer data, addresses, order, products, payment, shipping, return or refund.	Performance of the contract and pre-contractual measures.	Time necessary for order management and subsequent retention for tax, accounting obligations, or protection of rights.
Payments, refunds, and anti-fraud checks	Payment method, outcome, transaction identifiers, technical data, and provider information.	Performance of the contract, legal obligations, and legitimate interest in security.	Time necessary for payment management, refunds, and any checks, in addition to applicable legal terms.
Shipments, returns, exchanges, and customer support	Contact data, order, communications, requests, images or documentation sent by the customer.	Performance of the contract, pre-contractual measures, and legitimate interest.	Time necessary for request management and subsequent retention for any disputes or protection of rights.
Tax, accounting, and administrative compliance	Billing data, orders, payments, accounting, and tax documents.	Legal obligation.	For the terms provided by applicable tax, accounting, and civil law.
Newsletter and marketing communications	Email, consent, preferences, interactions with communications, opt-in/opt-out history.	Consent of the data subject or legitimate interest within the limits permitted by law.	Until consent is withdrawn or objection; consent logs may be retained to demonstrate the lawfulness of processing.
Analytics, advertising, and website improvement	Cookies, online identifiers, browsing data, events, preferences, and interactions.	Consent, when required; legitimate interest for aggregated technical measurements where applicable.	According to expressed preferences and durations indicated in the Cookie Policy and consent management panel.
Website security and abuse prevention	Technical logs, IP, device, anomalies, access attempts or improper use.	Legitimate interest in security and legal obligations where applicable.	For the time necessary for security, event analysis, and protection of rights.
WhatsApp, email, and other contact channels	Contact data, request content, attachments, essential conversation history.	Pre-contractual measures, performance of the contract, or legitimate interest in providing assistance.	For the time necessary to manage the request and, if necessary, to document the service provided.

5. Payments, Installment Solutions, and USDC

Payments are managed through specialized providers available at checkout, including card networks, digital wallets, Shop Pay, PayPal, Klarna, Scalapay, HeyLight, Shopify Payments, and, where available, USDC.

SPAZIOGALLERY does not store full payment card details. Providers may process data as data processors, independent controllers, or according to the different roles provided by their respective services and conditions.

Installment payment solutions are subject to availability, eligibility requirements, approval, and conditions indicated by the partner before order confirmation. In the event of a return or refund, any update to the installment plan is managed by the selected provider.

When available at checkout, USDC payment is managed through Shopify Payments and may require the use of compatible wallets, networks, or technical tools. Any refunds related to orders paid in USDC are handled according to the procedures provided by Shopify Payments and the conditions applicable to the selected method.

6. Shopify and E-commerce Platform

The website www.spaziogallery.it is built on the Shopify platform. Shopify and related services may process personal data necessary for the operation of the store, checkout, security, order management, payments, privacy preferences, and technical functionalities of the site.

The use of specific Shopify functionalities may involve further processing, depending on the store settings and applicable regulations.

If you subscribe to the newsletter or consent to receive commercial communications, SPAZIOGALLERY may use your email address to send you updates on products, initiatives, promotions, editorial content, and benefits reserved for subscribers.

You can withdraw your consent or object to receiving marketing communications at any time via the unsubscribe link in the emails or by writing to ecommerce@spaziogallery.it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Any communications relating to orders, payments, shipments, returns, security, or customer service do not constitute marketing and may be sent even without promotional consent, when necessary for the management of the contractual relationship or the fulfillment of legal obligations.

8. WhatsApp and Assistance Channels

If you contact SPAZIOGALLERY via WhatsApp, email, form, chat, or other assistance channels, we will process the data provided to respond to the request, offer support on products, sizes, orders, payments, shipments, returns, and after-sales activities.

The use of WhatsApp or other communication services may involve the processing of data by their respective providers, according to their respective terms and privacy policies.

The use of cookies and similar tools is governed by the Cookie Policy. Technical cookies are necessary for the website to function. Analytics, marketing, profiling, retargeting cookies, advertising pixels, or equivalent tools are used according to the preferences expressed through the banner or consent management panel, when required by applicable regulations.

You can change your cookie preferences through the tools made available on the website, where applicable.

10. Data Recipients

Personal data may be communicated, to the extent necessary for the indicated purposes, to the following categories of subjects:

e-commerce platform, hosting, technical infrastructure, security, maintenance, and IT service providers;
payment providers, networks, digital wallets, installment services, Shopify Payments, and anti-fraud tools;
couriers, logistics operators, warehouses, boutiques, and parties involved in delivery, collection, or return management;
email marketing, CRM, newsletter, customer care, chat, WhatsApp, or communication tool providers;
analytics, advertising, pixel, campaign measurement, and cookie consent tool providers;
tax, accounting, legal, administrative consultants, banks, insurance companies, and parties necessary for legal compliance or protection of rights;
public authorities, supervisory bodies, or authorized parties, when required by applicable regulations.

Such subjects process data, as the case may be, as data processors, independent controllers, or authorized parties.

11. Data Transfers Outside the European Economic Area

Some technology providers may also process personal data outside the European Economic Area. In such cases, the transfer takes place in compliance with the guarantees provided by applicable law, including adequacy decisions, standard contractual clauses, or other appropriate measures.

12. Minors

The website and online sales services are not intended for minors. Purchases must be made by adults or those otherwise capable of validly concluding a contract according to applicable law.

13. Data Subject Rights

Within the limits provided by applicable law, you can exercise the following rights:

access to personal data;
rectification of inaccurate data or integration of incomplete data;
erasure of data in the cases provided;
restriction of processing;
objection to processing;
data portability, where applicable;
withdrawal of consent, without affecting the lawfulness of processing based on consent before withdrawal.

To exercise your rights, you can write to ecommerce@spaziogallery.it or to PEC gallery@pecaruba.it. You can also lodge a complaint with the competent supervisory authority, in Italy the Garante per la protezione dei dati personali.

14. Privacy Policy Updates

This Privacy Policy may be updated to reflect regulatory, technical, organizational, or service-related changes. The updated version will be published on this page with an indication of the last update date.