1. Data Controller

Rivair S.r.l.
Via I Maggio, 12 — 24040 Canonica D’Adda (BG), Italy
Email: sales@barbararizzi.com

This Privacy Policy explains how we collect, use and protect your personal data when you visit barbararizzi.com or purchase our products, in accordance with the EU General Data Protection Regulation (GDPR) and Italian Legislative Decree 196/2003 as amended.

2. Data We Collect

Data you provide directly

• Name, email address, phone number (contact forms, newsletter sign-up)
• Billing and shipping address, payment details (checkout process)
• Order history and product preferences (registered account)
• Communications you send us (customer care, WhatsApp, email)

Data collected automatically

• IP address, browser type, operating system
• Pages visited, time spent, referring URLs
• Device identifiers and cookie data (see Section 7)

3. Purpose & Legal Basis

• Order fulfilment — processing purchases and payments (contractual necessity)
• Customer support — responding to enquiries (legitimate interest)
• Marketing — newsletters and promotions (consent, withdrawable at any time)
• Analytics — improving our website (legitimate interest)
• Legal compliance — fiscal and regulatory obligations (legal obligation)

4. Data Retention

We retain personal data only for as long as necessary:

• Order data: 10 years (Italian fiscal law)
• Marketing data: until consent is withdrawn
• Analytics data: 26 months
• Customer support communications: 3 years

5. Data Sharing

We do not sell your personal data. We may share it with:

• Payment processors (Stripe, PayPal) for secure transaction processing
• Shipping partners for order delivery
• Email service providers (Brevo) for transactional and marketing emails
• Analytics providers (Google Analytics) in anonymised form
• Legal authorities when required by law

All processors are bound by GDPR-compliant data processing agreements.

6. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability in a machine-readable format
• Withdraw consent at any time (for marketing)
• Lodge a complaint with the Italian Data Protection Authority (Garante: garanteprivacy.it)

To exercise any right, contact us at sales@barbararizzi.com.

7. Cookies

We use cookies to ensure the website functions correctly and to analyse usage. For full details, please read our Cookie Policy.

8. Contact

For any privacy-related matter: sales@barbararizzi.com