Privacy Policy

Privacy Policy

Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR").

1. Data controller

EUROMART DI DI FRAIA FLAVIO, registered office at VIA A. POLIZIANO 6, 81030, CASTEL VOLTURNO (CE), VAT IT09831321212 ("Droio"). Data protection contact: support@droio.com.

2. Data we process

  • Account data: first name, last name, email, password (encrypted);
  • Delivery and billing data: address, city, postcode, phone number;
  • Order data: purchase history, amounts, payment method (Droio does not store full payment card data);
  • Browsing data: IP address and connection logs;
  • Newsletter: email address, subject to double opt-in;
  • Support requests: messages sent through the contact form.

3. Purposes and legal bases

  • Account and order management — performance of a contract (Art. 6.1.b GDPR);
  • Tax and accounting obligations — legal obligation (Art. 6.1.c GDPR);
  • Newsletter — consent (Art. 6.1.a GDPR), withdrawable at any time;
  • Customer support — legitimate interest (Art. 6.1.f GDPR);
  • Security and fraud prevention (connection logs) — legitimate interest (Art. 6.1.f GDPR).

4. Recipients

Data may be shared with: hosting providers (Hetzner Online GmbH, Germany), delivery carriers and, where applicable, payment service providers. Where these parties act as processors, agreements under Art. 28 GDPR are in place.

5. Transfers to third countries

Orders are shipped from warehouses located in the European Union. Customer delivery data (name, address, phone) is not transferred to China or other third countries for shipping purposes. The website and database are hosted by Hetzner Online GmbH in Germany (EU). Product-sourcing tools used by the administration (e.g. B2B platforms) do not receive store customers' personal data.

6. Retention periods

  • Account data: until account deletion;
  • Order and billing data: 10 years (tax obligations);
  • Connection logs (IP): maximum 6 months;
  • Transactional email log: maximum 12 months;
  • Newsletter email: until consent is withdrawn.

7. Your rights

Under Articles 15-22 GDPR you may exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to support@droio.com or from the "GDPR - Personal data" section of your account, where you can download your data as CSV/PDF and rectify your profile details. Erasure and requests for restriction/objection are handled by writing to support@droio.com (or via the contact form). You may also lodge a complaint with the Italian supervisory authority (www.garanteprivacy.it).

8. Cookies

This site only uses technical cookies required for operation (session, cart, authentication), which do not require consent. No third-party profiling or tracking cookies are used. Session cookies last a maximum of 24 hours; PrestaShop functional cookies last a maximum of 20 days.

9. Provision of data

Data marked as mandatory is required to conclude the contract; failure to provide it prevents order fulfilment. Providing data for marketing purposes is optional.