Information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 30 September 2026.
Data controller
Cristiano De Luca – duedecimi Home Decor, Via Vincenzo Gemito 19, 80128 Naples (NA), Italy.
Email: info@duedecimi.com.
What data we collect and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Name, address, email, phone, products purchased | To manage and ship the order, customer service, returns and guarantee | Performance of the contract (Art. 6(1)(b)) | 10 years for tax and accounting obligations, then deleted |
| Account data (if you create one) | To let you access your orders | Contract (Art. 6(1)(b)) | As long as you keep the account |
| Payment data | To collect the payment | Contract (Art. 6(1)(b)) | Handled by the payment providers: we never see your card details |
| Email for the newsletter (only if you subscribe) | News and offers | Consent (Art. 6(1)(a)), which you can withdraw at any time | Until you unsubscribe |
| Review request after purchase | To ask your opinion on the product you bought | Legitimate interest (Art. 6(1)(f)); you can object at any time | 12 months |
| Messages sent to info@duedecimi.com or through the contact form | To answer your requests | Contract or pre-contractual measures (Art. 6(1)(b)) | 24 months |
| Technical browsing data and cookies | To run the site; statistics only with consent | Legitimate interest / consent | See the Cookie policy |
Providing the data needed for the order is necessary: without it we cannot ship. Everything else is optional.
Who we share data with
Only with the providers we need to sell and ship, appointed as data processors:
- WooPayments (Automattic Inc. and Stripe) for card, Apple Pay and Google Pay payments;
- Klarna Bank AB, if you choose to pay with Klarna: in this case Klarna also processes your data as an independent
controller for its own checks (see Klarna’s privacy notice); - Packlink (Packlink Shipping S.L.) and the chosen courier (InPost, Poste Italiane, BRT) for shipping and tracking;
- Aruba S.p.A. (Italy) for website hosting and email;
- our accountant and public authorities, when required by law.
We do not sell or pass on your data to third parties for marketing purposes.
Transfers outside the European Union
Some providers (for example Automattic and Stripe) may process data in the United States. The transfer is based on the
EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
Your rights
At any time you can ask to access your data, correct it, delete it, restrict its use, object to the
processing, receive it in a readable format (portability) and withdraw the consent already given.
Write to info@duedecimi.com: we reply within 30 days.
If you believe your data is not processed correctly, you can lodge a complaint with the Italian Data Protection
Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your
country of residence.
Security
The site uses an encrypted connection (HTTPS). Data is accessible only to those who need it to manage orders.