Home
Home
How negozen.it processes your personal data
Last updated: 05/2026
This policy describes how personal data of users of this service is processed, in accordance with art. 13 of EU Regulation 2016/679 (GDPR) and applicable Italian law.
The data controller is: Giuseppe Campagnolo Via Nilde Iotti 7, Ragusa 97100 (RG) VAT / Tax code: 01836450880 Contact e-mail: giu.campagnolo@gmail.com
We process the following data, provided directly by the user during sign-up and use of the service: • Full name • Phone number • Order history and related details • Technical session data (authentication cookies)
Data is processed to: • Create and manage the user account • Authenticate users and maintain sessions • Process orders and related communications
Processing is based on the performance of a contract to which the user is a party (art. 6(1)(b) GDPR) and, where applicable, on compliance with legal obligations (art. 6(1)(c) GDPR).
Data may be shared with parties acting as data processors, including: • Hosting provider: Vercel Inc. • Database provider: Neon Inc. • Image storage provider: Cloudinary Inc. • Email provider: Resend Inc. • SMS provider: Telnyx Inc. Data is never sold to third parties for marketing purposes.
Some of the providers listed above may process data outside the European Union. In such cases, transfers are based on the Standard Contractual Clauses approved by the European Commission or other appropriate safeguards under arts. 44 et seq. of the GDPR.
Account data is kept while the account is active and deleted within 30 days of a deletion request, except for data related to orders and transactions, which — being necessary to comply with civil and tax obligations (art. 2220 of the Italian Civil Code, Presidential Decree 600/1973) — is kept for 10 years from the date of registration.
You have the right to: • Access your data (art. 15 GDPR) • Request rectification (art. 16) or erasure (art. 17) • Restrict processing (art. 18) • Receive your data in a portable format (art. 20) • Object to processing (art. 21)
To exercise the rights listed above, write to: [PRIVACY CONTACT EMAIL]. We will respond within the time limits set by art. 12 GDPR (typically within one month).
The service only uses technical/functional cookies and local storage, which do not require prior consent under the Italian DPA Guidelines of 10 June 2021: • Session cookies (better-auth) — required for authentication • localStorage "access-phone" — stores the phone prefix to streamline sign-in No profiling cookies, third-party analytics, or advertising trackers are used.