Select Page

Privacy Policy

This Privacy Policy explains how personal data is collected and processed through aestheticidentity.com (the “Website”) in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection law.

1. Data Controller

The Data Controller is:

Gabriele Strani, operating under the name Aesthetic Identity®
Borgata Borello, Rubiana (TO), Italy
Email: aestheticidentity.official@gmail.com
Website: https://aestheticidentity.com

For any question concerning this Privacy Policy or the processing of personal data, you may contact the Data Controller using the email address above.

2. Personal Data We Collect

Depending on how you use the Website, we may process the following categories of personal data.

Website and technical data

When you visit the Website, the server and the services used by the Website may automatically process technical information such as:

  • IP address;
  • browser and device type;
  • operating system;
  • language and approximate geographic area;
  • referring page;
  • pages visited and date and time of access;
  • technical logs and security information;
  • cookie and consent preferences.

Orders and purchases

When you place or attempt to place an order, we may collect:

  • first and last name;
  • company name, if provided;
  • billing and shipping addresses;
  • country, region, city and postal code;
  • email address;
  • telephone number, if provided;
  • products ordered and selected options;
  • order value, shipping method and transaction status;
  • customer notes and communications relating to the order;
  • IP address and information necessary to prevent fraud and document the transaction.

Customer accounts

If you create a customer account, we may process your login credentials, contact information, saved addresses and order history.

Passwords are stored in protected form and are not readable in plain text by the Data Controller.

Payments

Payments are processed through external payment providers.

The Website currently uses WooPayments, a service provided by Automattic and powered by Stripe. Payment-card information is entered into interfaces supplied by the payment provider. Aesthetic Identity does not normally receive or store the complete card number or security code.

We may receive limited payment information, such as the transaction identifier, payment status, payment method, card brand and partial card details.

Where offered as a payment option, payments may also be processed through PayPal. The selected payment provider processes personal data under its own privacy policy and security procedures.

Communications

If you contact us by email or through another available communication channel, we process the information you provide in order to answer your request and retain a record of the communication.

The Website does not currently operate a promotional newsletter. Transactional messages concerning orders, payments, shipping, refunds or customer assistance are not marketing communications.

Analytics and advertising data

Subject to your cookie preferences and consent, the Website may use Google Analytics, Google Tag Manager and Google Ads to measure Website traffic, understand how visitors interact with the Website and evaluate advertising campaign conversions.

These services may process information such as page views, referring sources, campaign identifiers, device information, approximate location and interactions or purchases attributed to an advertising campaign.

More information is available in our Cookie Policy:

https://aestheticidentity.com/cookie-policy-eu/

3. Purposes and Legal Bases

Personal data is processed for the following purposes and legal bases.

Operating and securing the Website

Technical data and essential cookies are processed to display the Website, maintain the shopping cart, manage sessions, prevent abuse and ensure security.

The legal basis is the legitimate interest of the Data Controller in operating and protecting the Website pursuant to Article 6(1)(f) GDPR and, where applicable, the provision of a service requested by the user.

Processing orders and providing customer service

Order, contact, billing and shipping data is processed to prepare, conclude and perform the purchase contract, deliver products, provide assistance and manage refunds or complaints.

The legal basis is Article 6(1)(b) GDPR: processing necessary to take steps at the customer’s request and to perform a contract.

Accounting and legal obligations

Transaction and order information may be retained and processed to comply with accounting, tax, consumer-protection and other legal obligations.

The legal basis is Article 6(1)(c) GDPR.

Payments and fraud prevention

Payment and technical information may be processed to complete transactions, verify payment status and detect fraudulent or abusive activity.

The legal bases are performance of the purchase contract under Article 6(1)(b) GDPR and the legitimate interest in preventing fraud and protecting the Website under Article 6(1)(f) GDPR.

Analytics and advertising measurement

Non-essential analytics and advertising technologies are used on the basis of consent pursuant to Article 6(1)(a) GDPR.

Consent may be refused or withdrawn at any time through the Website’s cookie-preference controls, without affecting the lawfulness of processing performed before withdrawal.

Communications

Information submitted through direct communications is processed to respond to requests, provide customer support and manage possible disputes.

The legal basis is performance of a contract or pre-contractual measures under Article 6(1)(b) GDPR, or the legitimate interest in responding to communications under Article 6(1)(f) GDPR.

4. Mandatory and Optional Data

Information marked as required during checkout is necessary to process payment, fulfil the order and deliver the purchased products.

If you do not provide the required information, we may be unable to accept or complete the order.

Optional information, such as a telephone number or secondary address details, may be omitted unless it becomes necessary for delivery or customer assistance.

Consent to analytics or marketing cookies is optional. Refusing consent does not prevent access to the Website or the completion of an order, although some non-essential features may be unavailable.

5. Recipients of Personal Data

Personal data may be disclosed, only where necessary, to the following categories of recipients:

  • hosting, infrastructure, security and technical-support providers;
  • WooCommerce and Automattic services used to operate the online store;
  • WooPayments and Stripe for payment processing and fraud prevention;
  • PayPal, when selected or offered as a payment method;
  • postal operators, couriers and logistics providers responsible for delivery;
  • Google, where Analytics or advertising services have been accepted;
  • Complianz, for cookie-consent management;
  • accountants, legal advisers or other professional consultants;
  • public authorities, tax authorities, courts or law-enforcement bodies where disclosure is required by law.

Personal data is not sold.

Service providers receive only the information reasonably necessary to perform their respective functions and process it according to their contractual and legal obligations.

Relevant third-party privacy policies include:

6. International Data Transfers

Some service providers, including Google, Automattic, Stripe and PayPal, may process information outside the European Economic Area.

Where required, international transfers are carried out using safeguards recognised under Chapter V of the GDPR, such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms adopted by the relevant provider.

Further information about the locations and safeguards used by each provider is available in the respective privacy policies linked above.

7. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected.

In particular:

  • order, payment and accounting records may be retained for up to ten years, or longer where required by law or necessary for a legal dispute;
  • customer-account information is retained while the account remains active and may be deleted upon request, except for information that must be retained for legal or accounting purposes;
  • customer-service communications are normally retained for no longer than 24 months, unless they relate to an order, legal obligation or dispute;
  • technical and security logs are retained for limited periods determined by operational and security needs;
  • analytics information is retained according to the settings and retention periods applied within Google Analytics, generally for no longer than 14 months in identifiable or pseudonymous form;
  • cookie and browser-storage durations are described in the Cookie Policy;
  • information contained in backups may remain temporarily until the relevant backup is securely overwritten.

When personal data is no longer required, it is deleted, anonymised or made inaccessible, subject to applicable technical and legal requirements.

8. Cookies and Similar Technologies

The Website uses technical cookies and similar technologies necessary for functions such as consent management, customer sessions, the shopping cart, checkout and payment security.

Analytics and advertising technologies are used only according to the visitor’s consent choices.

Detailed information about the technologies used, their purposes and durations is available in the Cookie Policy:

https://aestheticidentity.com/cookie-policy-eu/

9. Data Subject Rights

Under Articles 15–22 GDPR, you may have the right to:

  • obtain confirmation as to whether your personal data is being processed;
  • access your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of personal data where the legal conditions are met;
  • request restriction of processing;
  • receive personal data in a structured, commonly used and machine-readable format;
  • object to processing based on legitimate interests;
  • withdraw consent at any time;
  • lodge a complaint with a competent supervisory authority.

Requests may be sent to:

aestheticidentity.official@gmail.com

We may need to request information reasonably necessary to verify your identity before processing a request.

You may also lodge a complaint with the Italian Data Protection Authority:

Garante per la protezione dei dati personali
https://www.garanteprivacy.it/

10. Automated Decision-Making

Aesthetic Identity does not carry out decisions based solely on automated processing that produce legal or similarly significant effects on customers.

Payment providers may use automated systems to authorise payments and detect suspected fraud. These activities are governed by the payment provider’s own policies and legal obligations.

11. Security

Reasonable technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, alteration or disclosure.

These measures include encrypted HTTPS connections, access controls, software updates, restricted administrative access and security procedures appropriate to the nature of the Website.

However, no online transmission or storage system can be guaranteed to be completely secure.

12. Minors

The Website is not specifically directed at children.

Persons under the age of 18 should make purchases only with the involvement or authorisation of a parent or legal guardian.

13. Changes to This Privacy Policy

This Privacy Policy may be updated when the Website, its services or applicable legal requirements change.

The date of the latest revision will be displayed at the top of the page. Material changes may also be communicated through the Website where appropriate.

14. Contact

For questions, requests or complaints regarding personal data, contact:

Gabriele Strani
Aesthetic Identity®
Borgata Borello, Rubiana (TO), Italy
Email: aestheticidentity.official@gmail.com