1) Data Controller
Giarel s.a.s. di Riccardo Strabello & C. – trading under the Strabello® brand
Registered office: Via Daniele Manin 48, 20861 Brugherio (MB), Italy
Email: info@strabello.eu • Tel: 039 2874429 • WhatsApp: 375 6545489
Customer support: strabello.eu/assistenza-24-ore/
2) Types of Data Processed
- Personal and contact details (first name, surname, address, email address, telephone number).
- Purchase and return data (shipping/billing address, products, amounts, notes).
- Payment data (e.g. transaction outcome, token/ID; we do not store complete card details).
- Customer support data (chat, tickets, WhatsApp, email).
- Browsing and cookie data (IP address, online identifiers, cookie preferences, analytics – see the Cookie Policy).
- Newsletter/marketing data (only if you have given your consent or where processing is permitted on the basis of legitimate interests).
3) Purposes & Legal Bases
| Purpose |
Legal basis (Art. 6 GDPR) |
| Managing orders, payments, shipments, returns and accounting. |
Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)). |
| Customer support (email, chat, telephone, WhatsApp). |
Performance of a contract / pre-contractual measures (Art. 6(1)(b)); legitimate interest in the organisation of our business (Art. 6(1)(f)). |
| Promotional communications/newsletters. |
Consent (Art. 6(1)(a)) or legitimate interest (Art. 6(1)(f)) in relation to customers, within the limits permitted by law (you may opt out at any time). |
| Technical analysis, security and the prevention of abuse/fraud. |
Legitimate interest (Art. 6(1)(f)) and legal obligation (Art. 6(1)(c), where applicable). |
| Managing cookie preferences and aggregate measurements. |
Consent (Art. 6(1)(a)) for non-essential cookies; legitimate interest/necessity for essential cookies. |
4) Provision of Data
The provision of contractual data is necessary to process orders and provide support: failure to provide such data may prevent you from making a purchase or us from responding to your requests. The provision of data for promotional purposes is optional and is managed on the basis of consent/opt-out.
5) Recipients / Categories of Recipients
- Couriers and logistics providers (e.g. TNT, FedEx, UPS) for deliveries and returns.
- Payment service providers (e.g. card networks, PayPal, online payment service providers) – they receive the data required for the transaction.
- IT/hosting providers, maintenance providers and security/anti-fraud services.
- Email/marketing platforms for newsletters and marketing communications (if you have subscribed/consented).
- Professional advisers (accountants, lawyers) and parties to whom disclosure is required by law.
6) Transfers Outside the EU
Some providers may have offices or servers in countries outside the EU. In such cases, data is transferred in compliance with Chapter V of the GDPR (e.g. Standard Contractual Clauses, adequacy decisions or appropriate supplementary measures).
7) Retention Periods
- Order/billing data: up to 10 years (civil and tax obligations).
- Customer support data: normally up to 24 months after the ticket or exchange is closed.
- Marketing/newsletter data: up to 24 months after your last interaction, or until you withdraw your consent or unsubscribe.
- Cookie/analytics data: as specified in the Cookie Policy (varies by type).
These periods may be extended where necessary to establish, exercise or defend legal claims.
8) Data Subject Rights
Subject to the limitations and conditions established by law, you may exercise your rights of access, rectification, erasure, restriction of processing, data portability and objection, and your right to withdraw consent (for purposes based on consent), by writing to info@strabello.eu.
You also have the right to lodge a complaint with the Italian Data Protection Authority: garanteprivacy.it.
9) Cookies and Preferences
Essential cookies are necessary for the website to function. Non-essential cookies (profiling, marketing and non-anonymised analytics cookies) are used only with your consent. You may review your choice at any time through the banner or the dedicated Cookie Preferences section.
10) Children
The website is not intended for children under 16 years of age. If you believe that a child has provided us with personal data without the consent of the holder of parental responsibility, please contact us so that we can delete it.
11) Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.
12) Automated Decision-Making
We do not carry out decision-making processes based solely on automated processing that produce legal or similarly significant effects on the data subject, unless otherwise stated in the Cookie/Marketing Policy.
13) Changes to This Privacy Notice
We may update this notice to reflect regulatory changes or changes to our processing activities. The current version is identified by the date shown at the top of the page.
Privacy Policy
