Privacy Policy

Information on the processing of personal data pursuant to Regulation (EU) 2016/679

S.A.C. Rappresentanze di De Pace Domenico & C. S.a.s., owner of the SIRGE trademark, is committed to protecting the privacy and security of the personal data of customers and users of the website www.elettrodomestici-sirge.it.

This Privacy Policy explains which personal data are collected, the purposes for which they are used, the parties with whom they may be shared, how long they are retained and the rights that data subjects may exercise.

Personal data are processed in accordance with Regulation (EU) 2016/679, hereinafter referred to as the “GDPR”, Italian Legislative Decree No. 196 of 30 June 2003, as amended, and any other applicable data protection laws.

1. Data Controller

The Data Controller is:

S.A.C. Rappresentanze di De Pace Domenico & C. S.a.s.
Via Einstein, 28
10051 Avigliana (TO)
Italy

VAT number: IT06531140017
Email: privacy@elettrodomestici-sirge.it
Telephone: +39 339 6705873

SIRGE is the trademark used by the Data Controller for the presentation, promotion and sale of the products available on the website.

2. E-commerce Platform

The website is built using the PrestaShop e-commerce platform.

The platform enables the management of the main functions of the online store, including:

• customer registration and account management;
• shopping carts, orders and purchase history;
• shipping and billing addresses;
• payments, shipments and delivery tracking;
• customer support, returns and warranty requests;
• consents and requests relating to personal data.

The website may also use modules and extensions developed by PrestaShop or third-party providers. Such components may process personal data only to the extent necessary to provide their respective functions.

3. Personal Data Collected

Depending on the services used, the Data Controller may process the following categories of personal data.

3.1 Identification and Contact Data

• first name and surname;
• email address;
• telephone number;
• residential, shipping or billing address;
• city, province or region, postcode and country.

3.2 Customer Account Data

• account identifiers;
• saved addresses;
• order history;
• preferences and consents provided;
• messages and requests associated with the account.

Passwords are protected using the encryption or hashing systems provided by the platform and are not normally accessible in readable form to the Data Controller’s staff.

3.3 Order Data

• products purchased, quantities and prices;
• order number and date;
• payment method and payment status;
• shipping and billing address;
• delivery information;
• any notes entered by the customer;
• promotional codes used.

3.4 Tax and Business Data

Where necessary for invoicing or business purchases, the following data may be processed:

• tax identification number;
• VAT number;
• company or business name;
• electronic invoicing recipient code or certified email address;
• registered office;
• business contact person details.

3.5 Payment Data

Payments are handled through banks, payment networks and external payment service providers available during checkout.

The Data Controller normally receives only the information necessary to verify the outcome of the transaction, such as:

• payment amount;
• transaction date;
• payment method;
• transaction identifier;
• confirmation or rejection of the payment.

Full payment card details are not normally stored directly in the website’s systems when the transaction is managed by the relevant payment provider.

3.6 Shipping and Delivery Data

• recipient’s name and contact details;
• delivery address;
• order or shipment number;
• tracking code;
• delivery status;
• any instructions necessary for the courier.

3.7 Customer Support, Returns and Warranty Data

• order number or proof of purchase;
• product model and serial number;
• description of the issue;
• photographs or videos of the product;
• communications exchanged with the customer;
• information required for collection, repair or replacement.

3.8 Browsing and Technical Data

While browsing the website, the IT systems may automatically collect:

• IP address;
• date and time of access;
• browser and device type;
• operating system;
• pages visited;
• referring page address;
• session identifiers;
• access, error and security logs.

4. Purposes and Legal Bases of Processing

Personal data are processed only where necessary and on the basis of one of the legal grounds provided for by applicable law.

4.1 Creation and Management of the Customer Account

Data are used to create the customer account, allow access to the personal area, save addresses and display order history.

Legal basis: performance of pre-contractual measures or a contract requested by the data subject.

4.2 Order Management

Data are used to:

• receive and confirm orders;
• manage and verify payments;
• prepare and ship products;
• issue invoices and tax documents;
• send communications relating to the order;
• manage cancellations, refunds and disputes.

Legal basis: performance of a contract and compliance with legal obligations.

4.3 Shipping and Delivery

Data are disclosed to couriers and logistics providers to the extent necessary to complete delivery and provide tracking information.

Legal basis: performance of a contract.

4.4 Customer Support, Returns and Warranty

Data are processed to respond to customer requests, carry out technical diagnostics and manage returns, repairs, replacements and warranty claims.

Legal basis: performance of a contract, compliance with legal obligations and the legitimate interest in properly managing after-sales services.

4.5 Administrative, Accounting and Tax Obligations

Data are used for invoicing, accounting, tax compliance and the mandatory retention of records.

Legal basis: compliance with a legal obligation.

4.6 Security and Fraud Prevention

The Data Controller may process technical data, order data and transaction information to:

• protect customer accounts;
• prevent unauthorised access;
• identify fraudulent orders or payments;
• protect the website against cyberattacks;
• establish, exercise or defend legal claims.

Legal basis: the legitimate interest of the Data Controller in security, fraud prevention and the protection of its rights.

4.7 Newsletters and Marketing Communications

Subject to consent, the Data Controller may send newsletters, promotions, offers, product updates and other marketing communications.

Legal basis: the data subject’s consent.

Consent may be withdrawn at any time by using the unsubscribe link included in the communications or by writing to privacy@elettrodomestici-sirge.it .

4.8 Communications Concerning Similar Products

Within the limits permitted by law, the email address provided in connection with a purchase may be used to offer products or services similar to those already purchased.

The customer may object free of charge at any time by using the link included in the communication or by contacting the Data Controller.

Legal basis: the legitimate interest of the Data Controller, within the limits established by applicable law.

4.9 Website Analysis and Improvement

The Data Controller may use aggregated or anonymous data and, where necessary, analytics tools subject to consent in order to measure website performance, understand how the website is used and improve the services offered.

Legal basis: consent where non-essential cookies or tracking technologies are used; legitimate interest in other cases permitted by law.

5. Provision of Personal Data

The provision of data marked as mandatory is necessary to create an account, complete a purchase, arrange delivery, issue an invoice or provide customer support.

Failure to provide such data may make it impossible to provide the requested service or complete the order.

The provision of data for newsletters, marketing, profiling or non-essential analytics is optional. Refusal to provide consent does not prevent the user from browsing the website or making purchases.

6. Recipients of Personal Data

Personal data may be disclosed, to the extent necessary, to the following categories of recipients:

• authorised personnel of the Data Controller;
• administrative, tax and legal advisers;
• hosting, server and IT security providers;
• providers of the PrestaShop platform and installed modules;
• banks and payment service providers;
• couriers, freight forwarders and logistics operators;
• technical support and repair centres;
• email, newsletter and marketing service providers;
• analytics or advertising providers, subject to consent where required;
• marketplaces and business partners where an order originates from their systems;
• public, tax, judicial or supervisory authorities where required by law.

Such recipients may act as processors, independent controllers or authorised persons, depending on the role they actually perform.

The Data Controller does not sell users’ personal data and does not disclose them to third parties for purposes unrelated to those described in this Privacy Policy.

An updated list of the main external processors may be requested from the Data Controller.

7. Transfers of Personal Data Outside the European Economic Area

Some providers of IT, payment, support, analytics or marketing services may process personal data in countries outside the European Economic Area.

In such cases, the transfer will take place in compliance with the GDPR and through one of the safeguards provided by law, including:

• adequacy decisions adopted by the European Commission;
• standard contractual clauses;
• binding corporate rules;
• other safeguards or derogations permitted by applicable law.

Where necessary, additional measures will be adopted to ensure an adequate level of protection.

8. Data Retention

Personal data are retained only for as long as necessary for the purposes for which they were collected and in compliance with applicable legal obligations.

• Customer account data: until the account is deleted, except for information that must be retained to comply with legal obligations or protect legal rights.
• Order, invoice and payment data: for the period required under tax, accounting and civil law, normally up to 10 years.
• Customer support, return and warranty data: for the time necessary to manage the request and subsequently for the period required to protect legal rights.
• Customer communications: for the period necessary to manage the request and any related dispute.
• Newsletter data: until consent is withdrawn or the data subject objects to the processing.
• Evidence of consent or unsubscribe requests: for the period necessary to demonstrate compliance with the request and legal obligations.
• Technical and security logs: for a period proportionate to security requirements, fraud prevention and the investigation of possible misuse.

At the end of the applicable retention periods, the data will be deleted, anonymised or retained only where required by law.

9. Data Security

The Data Controller adopts appropriate technical and organisational measures to protect personal data against:

• unauthorised access;
• loss, destruction or alteration;
• unlawful disclosure or communication;
• improper use;
• cyberattacks.

The security measures adopted may include encrypted connections, access controls, credential protection, system updates, backups, anti-malware tools and the logging of security events.

However, no IT system can guarantee absolute security. Users are therefore responsible for keeping their login credentials confidential and must not disclose them to third parties.

10. Cookies and Tracking Technologies

The website uses technical cookies that are necessary for its operation, for example to maintain the user session, manage the shopping cart, remember the selected language and allow access to the customer account.

Analytics, advertising or profiling cookies and other non-essential tracking technologies are used only after obtaining the user’s consent, where required by applicable law.

Users may accept, reject or change their preferences through the cookie management panel available on the website.

For further information, please see the Cookie Policy .

11. Data Subject Rights

In the cases provided for by the GDPR, data subjects may exercise the following rights:

• to obtain confirmation as to whether or not personal data concerning them are being processed;
• to access their personal data;
• to obtain the correction of inaccurate data;
• to have incomplete data completed;
• to request the deletion of personal data;
• to request restriction of processing;
• to object to processing based on legitimate interests;
• to object at any time to direct marketing;
• to receive their data in a structured, commonly used and machine-readable format;
• to request the transfer of their data to another controller, where applicable;
• to withdraw consent at any time;
• not to be subject, in the cases provided by law, to decisions based solely on automated processing;
• to lodge a complaint with the competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

A request for deletion does not result in the removal of data that must be retained for tax, accounting, contractual, legal, judicial or security reasons.

12. Exercising Data Subject Rights and PrestaShop Functions

Where the PrestaShop GDPR module is installed and correctly configured, customers may use the functions available in their personal account to:

• view their personal data;
• export their data;
• update certain information;
• request the deletion of their personal data;
• review or withdraw certain consents.

Some requests may require manual review by the Data Controller, particularly where certain information must be retained in order to comply with legal obligations.

Data subjects may in any event exercise their rights by sending a request to:

privacy@elettrodomestici-sirge.it

The request should clearly indicate the right the data subject wishes to exercise and provide the information necessary to identify the relevant account, order or support request.

Where there are reasonable doubts concerning the identity of the person making the request, the Data Controller may ask for additional information necessary to verify their identity.

The Data Controller will respond within the time limits established by the GDPR. Where permitted by law, the response period may be extended in the case of particularly complex or numerous requests, and the data subject will be informed accordingly.

13. Children’s Personal Data

The website is not intended for direct sales to minors who do not have the legal capacity required to enter into a contract.

Purchases must be made by adults or with the involvement of a parent or legal guardian.

If the Data Controller becomes aware that a minor’s personal data have been collected without the required authorisation, appropriate measures will be taken to delete the data or otherwise bring the processing into compliance with applicable law.

14. Complaints to a Supervisory Authority

Data subjects who believe that the processing of their personal data infringes applicable data protection law may lodge a complaint with the competent supervisory authority.

For Italy, the competent authority is:

Garante per la protezione dei dati personali
Piazza Venezia, 11
00187 Rome
Italy

Data subjects may also contact the supervisory authority of the European country in which they live or work, or of the place where the alleged infringement occurred.

15. Changes to this Privacy Policy

The Data Controller may update this Privacy Policy to reflect legislative, technical or organisational changes or changes to the services used by the website.

The updated version will be published on this page together with the date of the latest revision.

Where changes materially affect the rights of data subjects, an additional notice may be provided through the website or using the available contact details.

16. Contact Information

For information or requests concerning the protection of personal data, please contact:

S.A.C. Rappresentanze di De Pace Domenico & C. S.a.s.
Via Einstein, 28
10051 Avigliana (TO)
Italy

VAT number: IT06531140017
Email: privacy@elettrodomestici-sirge.it
Telephone: +39 339 6705873

Last updated: July 2026

Version 2.0

© S.A.C. Rappresentanze di De Pace Domenico & C. S.a.s. – All rights reserved.