PRIVACY POLICY Information provided pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) Last updated: October 2026 1. Data Controller The Data Controller for personal data collected on this website (
aurealine.com) is:
Bottega Tifernate di Stefano Lazzari Stefano e Francesca S.n.c. Registered Office: Città di Castello (PG), Italy Privacy Contact Email: info@bottegatifernate.com 2. Types of Data Collected While navigating and using the services offered by Aurea Line, we collect the following types of personal data:
Identification and Contact Data: First name, last name, email address, phone number, shipping and billing address provided during order placement or form submission. Browsing and Tracking Data: IP address, browser type, access times, pages visited (product sheets, cart, checkout), interaction history, and unique session identifiers. Purchase Data: Details of ordered products, transaction amounts, and transaction status. 3. Purposes and Legal Bases for Processing Personal data is processed for the following purposes:
Order Management and E-commerce Sales: Execution of the sales contract, shipping of artworks, issuing invoices, and customer support management (Legal Basis: Contractual Performance). Abandoned Cart Management: Sending service communications to allow completion of initiated and uncompleted transactions (Legal Basis: Legitimate Interest / Pre-contractual Measures). Email Marketing and Newsletter: Sending updates on collections, promotions, art editorial content, and commercial communications (Legal Basis: Explicit User Consent). Statistical Analysis and Campaign Optimization: Measuring web traffic, advertising effectiveness, and site performance (Legal Basis: Explicit Consent via Cookie Banner). 4. Third-Party Tools and Data Processors To deliver its services, Aurea Line uses the following technology service providers appointed as Data Processors:
Vbout Inc. (CRM, Email Marketing & E-commerce Automation): Contact database management, automated email delivery, cart tracking, and visitor preference analysis. Google Ireland Limited (Google Analytics 4 & Google Ads): Aggregated statistical monitoring and advertising conversion measurement. WDPro (Hosting Platform and E-commerce Management): Technical infrastructure management and order storage. 5. Data Retention
Contractual and Accounting Data: Retained for 10 years in compliance with legal and tax obligations. Marketing Data (Vbout/Newsletter): Retained until consent is withdrawn (unsubscribe) by the user. Browsing and Cart Data: Retained according to timelines defined by analytics and tracking platforms. 6. Rights of the Data Subject At any time, under Arts. 15-22 of EU Regulation 2016/679
