Privacy Policy

Privacy Policy

With this privacy policy (hereinafter, "Privacy Policy"), referring to the website www.fabianaboente.com (hereinafter the "Site"), Fabiana Boente (hereinafter "Data Controller" or "FabianaBoente") aims to provide users with clear and complete information regarding the processing of their personal data.

This Privacy Policy describes the personal information collected through the Site, the purposes and methods for which such information is processed, third parties possibly involved in the processing, any transfer of data abroad, the security measures adopted to protect and safeguard the collected data, and the ways in which the user can verify the processing of data concerning him/her and exercise the rights recognized by Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and by Legislative Decree June 30, 2003, no. 196 (Italian Personal Data Protection Code), as amended by D.Lgs. 101/2018.

Data Controller

The Data Controller of the personal data collected through this Site is:

Fabiana Boente
Via Occhioni 3 - Palau (OT) 07026 Sardinia - Italy
VAT Number: 02103140907
Email: info@fabianaboente.com
Phone: (+39) 338.6801746

Types of Data Collected

FabianaBoente collects various types of personal data through the Site, including:

  • Data provided voluntarily by the user: name, surname, email address, shipping and billing address, telephone number, payment details (processed by secure payment gateways), and any other information provided during registration, placing an order, filling out contact forms, or communicating with customer service.
  • Navigation data: IP addresses, browser type, operating system, pages visited, time spent, and other data relating to navigation on the Site, collected through cookies and other tracking technologies. For more information, please see our Cookie Policy.
  • Purchase-related data: details of orders placed, products purchased, purchasing preferences.

Purposes and Lawfulness of Processing

The personal data collected is processed for the following purposes and on the basis of the following conditions of lawfulness:

  • Execution of the contract and order management (Art. 6, par. 1, lett. b GDPR): to process orders, ship products, manage payments, provide customer assistance, and fulfill contractual obligations.
  • Fulfillment of legal obligations (Art. 6, par. 1, lett. c GDPR): to comply with tax, accounting, and other applicable regulations.
  • Consent of the data subject (Art. 6, par. 1, lett. a GDPR): for specific purposes for which consent has been requested, such as sending promotional newsletters, marketing communications (subject to explicit consent), or profiling activities (subject to explicit consent).
  • Legitimate interest of the Controller (Art. 6, par. 1, lett. f GDPR): to improve the services offered, prevent fraud, ensure Site security, and analyze (in aggregate and anonymous form) Site usage statistics.

The provision of data for contractual and legal purposes is necessary for the conclusion and execution of the sales contract. Failure to provide it may make it impossible to process the order.

Consent for marketing and profiling purposes is optional and can be revoked at any time.

Methods and Duration of Data Retention

The processing of personal data is carried out using manual, IT, and telematic tools, with logic strictly related to the purposes indicated and, in any case, in such a way as to guarantee the security and confidentiality of the data itself.

Personal data will be kept for the time strictly necessary to achieve the purposes for which it was collected and processed, in compliance with the retention terms provided by law (e.g., for tax and accounting obligations) or until consent is withdrawn (for processing based on consent).

Rights of the Data Subject

As a data subject, you have the right to exercise the rights provided for in Articles 15 et seq. of the GDPR, including:

  • Right of access (Art. 15 GDPR): to obtain confirmation of the existence or not of personal data concerning you and obtain a copy.
  • Right to rectification (Art. 16 GDPR): to obtain the rectification of inaccurate personal data or the completion of incomplete data.
  • Right to erasure ("right to be forgotten") (Art. 17 GDPR): to obtain the erasure of personal data concerning you, in the cases provided for by the regulation.
  • Right to restriction of processing (Art. 18 GDPR): to obtain the restriction of the processing of your personal data, upon the occurrence of certain conditions.
  • Right to data portability (Art. 20 GDPR): to receive the personal data concerning you in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
  • Right to object (Art. 21 GDPR): to object at any time, for reasons relating to your particular situation, to the processing of personal data concerning you, including profiling. You have the right to object at any time to the processing of personal data for direct marketing purposes.
  • Right not to be subject to automated decision-making (Art. 22 GDPR): the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  • Right to withdraw consent: if the processing is based on consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or another competent supervisory authority.

To exercise your rights, you can contact the Data Controller at the addresses indicated in this notice.

Communication and Dissemination of Data

Your personal data may be communicated to third parties for the fulfillment of the indicated purposes and for legal obligations. These subjects will process the data as data processors (duly appointed) or as autonomous data controllers. The updated list of data processors is available upon request from the Controller.

Your personal data will not be disseminated, except in cases expressly provided for by law.

Cookie Policy

This Site uses technical, analytical, and profiling cookies. For detailed information on the use of cookies and how to manage them, please consult our full Cookie Policy.

Changes to the Privacy Policy

This Privacy Policy may be subject to changes and updates. We invite you to regularly consult this page to always be informed about how we process your personal data. The date of the last update will be indicated at the bottom of this notice.

Last updated: [12/5/2025]