1. Data controller

Walter Schmitt Srl, with registered office in Naples, Via Vincenzo Romaniello 21/B, as data controller, guarantees compliance with the legislation on the protection of personal data pursuant to EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 (Privacy Code), as amended by Legislative Decree 101/2018.

For any questions regarding this information, you can contact the data controller by email at: schmittwalter01 @gmail .com .

---

2. Purpose of data processing

The personal data provided by users are processed exclusively for the following purposes:

• Management and administration of orders placed through the site.
• Improving the browsing experience and use of the site.
• Performance of contractual obligations.
• Sending marketing communications (only with the user's explicit consent).
• Carrying out promotional and advertising activities, including statistical analysis, and personalizing the offer.

The legal basis for data processing is:

• Execution of an order processing contract .
• Legitimate interest for site security and fraud prevention.
• Explicit user consent for marketing activities and commercial communications.

---

3. Categories of data processed

Personal data collected through the site may include:

• Identification data : name, surname, email address, telephone number.
• Payment data : In the case of credit card transactions, the payment information (card number, CVV, expiration date) is transmitted securely and encrypted to third-party payment services, without Walter Schmitt Srl being aware of or storing it.
• Browsing data : information automatically collected by the site (for example, IP addresses, connection data, history of pages visited).

---

4. Data Sharing

Users' personal data may be shared with third parties only when strictly necessary, including:

• Service providers (couriers, hosting providers, payment platforms).
• Persons responsible for technical support and maintenance of the site.
• Data analysis and marketing companies, subject to your consent.

All third parties who process data on behalf of Walter Schmitt Srl are appointed as data controllers in accordance with the GDPR and undertake to comply with rigorous security and privacy standards.

---

5. Data retention

Personal data will be retained for the time strictly necessary to achieve the purposes for which they were collected, or to comply with legal or contractual obligations. In particular:

• Payment data will not be stored by Walter Schmitt Srl.
• Contact data for marketing purposes will be retained until consent is revoked.
• Order data will be retained for 10 years, as required by tax and accounting regulations.

---

6. User rights

In accordance with the GDPR, users have the right to:

• Access your personal data.
• Request the rectification or updating of your data.
• Request erasure (right to be forgotten) or restriction of processing.
• Obtain a copy of your personal data in a structured and machine-readable format (right to portability).
• Object to processing for marketing purposes or for reasons related to your personal situation.
• Revoke your consent at any time, without affecting the lawfulness of processing based on consent before its revocation.

Requests can be sent via email to: schmittwalter01 @gmail .com .

---

7. Data Security

Walter Schmitt Srl adopts adequate security measures to protect personal data from unauthorized access, disclosure, modification or destruction. However, it is not possible to guarantee the complete security of data transmitted via the Internet, therefore we invite users to protect their devices and connections.

---

8. Changes to this Policy

Walter Schmitt Srl reserves the right to make changes to this policy at any time. Users will be informed via updates on the site or via email. It is recommended that you check this page regularly to stay up to date.