Privacy Policy

  • PRIVACY POLICY
  • Information provided pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) Last updated: October 2026

    1. Data Controller

    The Data Controller for personal data collected on this website (aurealine.com) is:

  • Bottega Tifernate di Stefano Lazzari Stefano e Francesca S.n.c.
  • Registered Office: Città di Castello (PG), Italy
  • Privacy Contact Email: info@bottegatifernate.com
  • 2. Types of Data Collected

    While navigating and using the services offered by Aurea Line, we collect the following types of personal data:

  • Identification and Contact Data: First name, last name, email address, phone number, shipping and billing address provided during order placement or form submission.
  • Browsing and Tracking Data: IP address, browser type, access times, pages visited (product sheets, cart, checkout), interaction history, and unique session identifiers.
  • Purchase Data: Details of ordered products, transaction amounts, and transaction status.
  • 3. Purposes and Legal Bases for Processing

    Personal data is processed for the following purposes:

  • Order Management and E-commerce Sales: Execution of the sales contract, shipping of artworks, issuing invoices, and customer support management (Legal Basis: Contractual Performance).
  • Abandoned Cart Management: Sending service communications to allow completion of initiated and uncompleted transactions (Legal Basis: Legitimate Interest / Pre-contractual Measures).
  • Email Marketing and Newsletter: Sending updates on collections, promotions, art editorial content, and commercial communications (Legal Basis: Explicit User Consent).
  • Statistical Analysis and Campaign Optimization: Measuring web traffic, advertising effectiveness, and site performance (Legal Basis: Explicit Consent via Cookie Banner).
  • 4. Third-Party Tools and Data Processors

    To deliver its services, Aurea Line uses the following technology service providers appointed as Data Processors:

  • Vbout Inc. (CRM, Email Marketing & E-commerce Automation): Contact database management, automated email delivery, cart tracking, and visitor preference analysis.
  • Google Ireland Limited (Google Analytics 4 & Google Ads): Aggregated statistical monitoring and advertising conversion measurement.
  • WDPro (Hosting Platform and E-commerce Management): Technical infrastructure management and order storage.
  • 5. Data Retention

  • Contractual and Accounting Data: Retained for 10 years in compliance with legal and tax obligations.
  • Marketing Data (Vbout/Newsletter): Retained until consent is withdrawn (unsubscribe) by the user.
  • Browsing and Cart Data: Retained according to timelines defined by analytics and tracking platforms.
  • 6. Rights of the Data Subject

    At any time, under Arts. 15-22 of EU Regulation 2016/679