Updated: 19 October 2026
Privacy notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) for www.labarchettanelblu.it — La Barchetta nel Blu.
Controller and contact details
Giosarda Srls, Via Lubiana 190, 09013 Carbonia (SU), Italy. VAT no. 04052430925; REA CA-359489. info@giosarda.it; certified email (PEC): giosardasrls@pec.it. Shop telephone: +39 388 431 7872. The operational contact for this website is Gioanata Artzedi. This does not designate him as a Data Protection Officer or an external processor under Article 28. The company remains the controller.
Data, purposes and legal bases
- Accounts and purchases: name, email, contact details, addresses, protected credentials, basket, orders, invoicing and transaction data, needed for registration, the contract, delivery, assistance and returns (Article 6(1)(b)). Accounting and tax requirements are based on Article 6(1)(c).
- Enquiries and complaints: contact details, order number and message to respond and protect rights (Article 6(1)(b); legitimate interests under Article 6(1)(f) for disputes and fraud prevention).
- Newsletter: email and evidence of a separate, optional opt-in (Article 6(1)(a)). Unsubscribe through the link in communications or by writing to info@giosarda.it.
- Browsing and security: IP, browser, requests and logs to operate and protect the service (Article 6(1)(f)). Technical cookies support sessions, the basket and requested functions; see the Cookie Policy.
Payments and delivery
The data needed for a payment are sent to the provider selected from the methods actually enabled at checkout. Planned methods include cards via Stripe, PayPal and bank transfer; cash may be available for collection at the shop. Full card credentials are handled by the payment provider and must not be emailed to the shop. Providers also process data for their own legal and fraud prevention obligations: Stripe Privacy Policy and PayPal Privacy Statement. Carriers and logistics operators receive only the data necessary for delivery within Italy. Cash on delivery is not offered.
Retention
Account data are kept while the account is active and as needed to handle closure, with inactive accounts subject to a necessity review. Orders and accounting/tax records are retained for 10 years or a different period required by law. Enquiries without a purchase are normally retained for up to 12 months after closure. Assistance, returns and complaints are retained for the period needed to manage the relationship, warranty rights and legal claims. Newsletter details are kept until withdrawal, with periodic review; only necessary evidence of the choice and its handling is then retained. Technical logs are limited to security and incident investigation needs and are not used for commercial profiling. Cookie lifetimes are listed in the Cookie Policy.
Recipients, security and international transfers
Access is limited to authorised company staff and, as necessary, hosting, email, maintenance and professional service providers. Providers acting on our behalf must be governed by an Article 28 agreement. Authorities and advisers may receive data to meet legal duties or protect rights. We do not sell personal data. External services you choose may involve processing outside the EEA, subject where applicable to adequacy decisions and/or standard contractual clauses and supplementary safeguards. Contact us for details of safeguards. Transmission uses HTTPS and access privileges are limited to service needs.
Your rights and complaints
Where applicable under Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing. You may withdraw consent at any time without affecting earlier lawful processing; you can always object to direct marketing. Write to info@giosarda.it, the certified email address or the controller’s postal address. We respond within one month; for complex requests this may be extended by two further months, with reasons notified within the first month. Proportionate identity verification may be required. You may complain to the Italian Data Protection Authority and seek judicial remedies.
Required information and automated decisions
Mandatory fields are needed for the request or contract; without them the requested service may not be possible. Optional information and marketing consent are not conditions for buying or receiving assistance. In the configuration described we do not make decisions producing legal or similarly significant effects based solely on automated processing and do not carry out commercial profiling. The notice is updated when services and processing change.