Privacy policy
Privacy policy (Art. 13 and 14 of EU Regulation 2016/679, GDPR)
This policy explains how we use your personal data when you visit https://www.micheluzziglass.com (the "website"), create an account, buy from us, write to us or subscribe to our newsletter. It does not cover other websites that you reach through links on our site, or our social media pages, which are also governed by the privacy policy of each platform.
Who is the data controller
The data controller is Micheluzzi Glass S.n.c. di Massimo, Elena e Margherita Micheluzzi, with registered office at Dorsoduro 1071, 30123 Venice, Italy, VAT number 04894690272. You can contact us at info@micheluzziglass.com. In this policy, "we" and "us" mean Micheluzzi Glass.
The website runs on the Shopify platform (Shopify Inc. and its group companies), which hosts the shop and processes data on our behalf.
What data we collect
- Browsing data. Pages visited, date and time of access, device, browser and approximate location, and the page you came from. We collect them with cookies and similar technologies, as explained in our Cookie Policy.
- Account and order data. Name, email address, phone number (if you give it), billing and delivery addresses, order details, and discounts used. You can also buy as a guest, without an account.
- Payment data. You give your card or payment details directly to the payment provider. We do not see or store your full card number.
- Messages. The information you send us by email, through the contact form or on social media.
- Newsletter data. Your email address and, if you give it, your name, and whether you open or click our emails.
We do not ask for special categories of data (such as health data) or criminal-record data.
Why we use your data and on what legal basis
- To run the website and keep it secure (technical cookies). Legal basis: our legitimate interest and Article 122 of the Italian Privacy Code for technical cookies.
- To create your account and process your order: payment, preparation, shipping, invoices, customer service, returns and complaints. Legal basis: performance of the contract with you.
- To meet legal obligations: accounting, tax, customs and consumer law, and to handle requests about your data rights. Legal basis: legal obligation.
- To send you our newsletter and offers. If you are a customer and we email you about similar products, our legitimate interest. In all other cases, your consent. You can unsubscribe at any time with the link in every email.
- To measure how the website is used (analytics) and to show you our advertising on Google, Meta (Facebook and Instagram) and similar platforms, including audiences built from our customer or subscriber lists. Legal basis: your consent, given through the cookie banner or, for audience lists, at the time you subscribe. You can withdraw it at any time.
- To defend our rights in case of disputes. Legal basis: our legitimate interest.
Who receives your data
We share data only as needed, with:
- Shopify, for hosting, the online shop and the checkout.
- Payment providers: Shopify Payments (Stripe), PayPal, Klarna, Shop Pay, Apple Pay, Google Pay and SumUp, according to the method you choose. They act as independent controllers for the payment itself.
- FedEx and our shipping agent, for delivery and customs clearance, who receive your name, address, phone number and email.
- Klaviyo, for newsletters and order emails.
- Google (analytics and Google Ads) and Meta (pixel and advertising), if you accept the related cookies or have given your consent to audience lists.
- Our accountant, consultants and IT providers, who process data for us under our instructions.
- Authorities, where the law requires it.
We do not sell your data.
Transfers outside the European Union
Some of the providers above, such as Shopify, Klaviyo, Google and Meta, may process data outside the European Economic Area, including in the United States. In that case we rely on the safeguards required by the GDPR, such as the European Commission's adequacy decisions (for example the EU–US Data Privacy Framework) or the standard contractual clauses.
How long we keep your data
- Browsing data: according to the cookie settings described in our Cookie Policy.
- Account: until you ask us to delete it, or after five years of inactivity.
- Orders, invoices and customer service: for 10 years from the purchase, as required by Italian accounting and tax law and to defend our rights.
- Newsletter and marketing: until you unsubscribe or withdraw your consent.
- Requests about your rights and disputes: for the time needed to handle them, and for 10 years after the end of any dispute.
Your rights
You can ask us at any time for access to your data, correction, deletion, restriction of processing, a copy in a portable format, and object to processing based on our legitimate interest. You can withdraw your consent at any time, without affecting the processing done before. To exercise your rights write to info@micheluzziglass.com. You can also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, https://www.garanteprivacy.it) or with the authority of your country.
Providing the data needed to process an order is necessary to complete the purchase. Providing data for the newsletter and for marketing is optional.
Changes
We may update this policy. The current version is always published on this page.