Privacy Policy

Last updated: June 2026

This Privacy Policy describes how Mazara Distribution S.r.l. collects, uses and protects the personal data of users who visit mazaradistribution.it and make purchases, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection law.

1. Data Controller

The Data Controller is Mazara Distribution S.r.l., with registered office at Via Lombardia 11, 20052 Vignate (MI), Italy, VAT no. 12699850967. For any request regarding the processing of your personal data, you can write to us at privacy@mazaradistribution.com.

2. Personal Data We Collect

Depending on how you interact with the site, we may collect the following categories of personal data:

• Identity and contact data: first name, last name, email, phone number, delivery and billing address.
• Tax data: tax code and/or VAT number, required for invoicing and for business (B2B) customers.
• Order data: products purchased, amounts, order history and shopping preferences.
• Payment data: handled securely by payment providers through the Shopify platform. We do not store your full card details.
• Browsing data: IP address, browser and device type, pages visited and time spent, collected through cookies and similar technologies.
• Data you provide voluntarily: information you share through contact forms, B2B requests, newsletter sign-up or WhatsApp contact.

3. Purposes and Legal Bases of Processing

We process your personal data for the following purposes and on the related legal bases:

• Managing orders, payments, deliveries and after-sales support — performance of a contract (Art. 6.1.b GDPR).
• Creating and managing your user account — performance of a contract (Art. 6.1.b GDPR).
• Tax, accounting and legal obligations, including invoicing — legal obligation (Art. 6.1.c GDPR).
• Sending the newsletter and promotional communications — consent (Art. 6.1.a GDPR), which can be withdrawn at any time.
• Responding to requests sent through contact forms, B2B requests and WhatsApp — pre-contractual measures and legitimate interest (Art. 6.1.b and 6.1.f GDPR).
• Statistical analysis and site improvement through analytics cookies — consent and legitimate interest (Art. 6.1.a and 6.1.f GDPR).
• Marketing and remarketing through profiling cookies — consent (Art. 6.1.a GDPR).
• Site security and fraud prevention — legitimate interest (Art. 6.1.f GDPR).

4. Data Recipients and Processors

Within the limits of the purposes described above, your data may be shared with the following parties, acting as data processors or independent controllers:

• Shopify Inc. — e-commerce platform, order management and checkout.
• Payment providers (e.g. Shopify Payments and card networks) — secure payment processing.
• Scalapay — instalment payment processing.
• Couriers and shipping partners — order delivery.
• Google LLC — Google Analytics via Google Tag Manager, for traffic statistics.
• Omnisend — newsletter and email marketing.
• Hosting, cloud and email providers (e.g. Amazon Web Services) — technical infrastructure of the site.
• Consultants and professionals (e.g. accountants) — accounting and legal obligations.
• Public authorities — solely when required by law.

5. Transfer of Data Outside the European Union

Some of the providers we use (for example Shopify, Google, Meta and Amazon Web Services) may also process data in countries outside the European Economic Area, in particular the United States. In such cases, transfers take place in compliance with the GDPR, on the basis of European Commission adequacy decisions or Standard Contractual Clauses pursuant to Art. 46 GDPR, which ensure an adequate level of data protection.

6. Data Retention Period

We retain your personal data only for as long as necessary to achieve the purposes for which it was collected, in particular:

• Order, invoicing and tax-related data: 10 years, as required by Italian civil and tax law.
• User account data: until you request deletion of your account.
• Newsletter and marketing data: until you withdraw your consent.
• Contact and support requests: for the time needed to handle the request and a reasonable period thereafter.
• Cookies: for the durations indicated in our Cookie Policy.

7. Your Rights

As a data subject, under Articles 15-22 of the GDPR, you have the right to:

• access your personal data and obtain a copy of it;
• request rectification of inaccurate data or completion of incomplete data;
• request erasure of your data (right to be forgotten);
• request restriction of processing;
• object to processing on legitimate grounds;
• request data portability to another controller;
• withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
• not be subject to automated decisions that produce legal effects concerning you.

To exercise your rights, you can write to us at privacy@mazaradistribution.com. We will respond to your request as soon as possible and in any case within 30 days.

8. Cookies

The site uses technical, analytics and marketing cookies to improve your browsing experience and provide personalised content. You can manage your preferences at any time through the cookie banner. For more details, please see our Cookie Policy.

9. Data Security

We adopt appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure, including encrypted connections (HTTPS), secure payment handling through certified providers, and limited data access restricted to authorised personnel only.

10. Minors

The site and our services are not intended for minors under the age of 16. We do not knowingly collect personal data from minors. Should we become aware that we have processed a minor's data without the consent of a parent or guardian, we will delete it promptly.

11. Changes to This Policy

We reserve the right to modify or update this Privacy Policy at any time, including to align it with regulatory changes. Changes will be published on this page together with the date of the latest update. We encourage you to review it periodically.

12. Complaint to the Supervisory Authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority, namely the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

13. Contact Us

For any questions regarding this Policy or the processing of your personal data, you can contact the Data Controller at the following details:
Mazara Distribution S.r.l.
Via Lombardia 11, 20052 Vignate (MI), Italy
Email: privacy@mazaradistribution.com
Phone: +39 334 932 1226
Data Protection Officer (DPO): [to be indicated if appointed — verify with a legal advisor]