.png)
PRIVACY POLICY
Information on the processing of personal data pursuant to Articles 13 and 14 of EU Regulation 2016/679
This Privacy Policy describes how Creazioni Italiane Worldwide E.Commerce Srls VAT No. 11429360966 collects and processes the personal data of users who visit and use www.aurux.it.
This notice applies exclusively to www.aurux.it and not to other websites, pages or online services that may be accessible through external links.
1. Data Controller
The Data Controller is:
Creazioni Italiane Worldwide E.Commerce Srls VAT No. 11429360966
Registered office: Via Paradiso/Via delle Rose
Tax Code and VAT Number: 11429360966
E-mail: info@creazioniitaliane.it
For any request relating to the processing of personal data, the user may contact the Data Controller at the email address indicated above.
2. Types of Personal Data Processed
The site may process the following categories of personal data.
2.1 Data Voluntarily Provided by the User
When the user makes a purchase, fills in a form, subscribes to the newsletter or contacts the Data Controller, the following may be collected:
first and last name;
email address;
telephone number;
billing address;
shipping address;
order-related data;
payment-related data;
any tax code or VAT number, if required for tax documentation;
content of communications sent by the user.
2.2 Browsing Data
While browsing the site, certain technical data may be collected automatically, such as:
IP address;
browser type;
operating system;
device used;
pages visited;
date and time of access;
technical browsing data;
cookies and tracking tools, as indicated in the Cookie Policy.
2.3 Payment Data
Payments made through external systems, such as PayPal, payment cards or other providers integrated into the site, are handled by the respective payment service providers.
The Data Controller does not retain the user's complete payment-card data, except for any limited data necessary to confirm the transaction, manage the order, accounting or fraud prevention.
In the event of payment by bank transfer, the Data Controller may process data contained in the payment order, such as the payer's name, IBAN, amount, payment reference and payment date.
3. Purposes of Processing and Legal Bases
Personal data is processed for the following purposes.
3.1 Order Management and Online Sales
Data is processed for:
receive and manage orders;
confirm the purchase;
collect payment;
ship the products;
manage returns, warranties and customer support;
send communications relating to the order.
Legal basis: performance of the contract or pre-contractual measures requested by the user.
3.2 Tax, Accounting and Legal Compliance
Data is processed for:
issuance and retention of tax documentation;
accounting management;
legal obligations;
obligations toward competent authorities;
retention of administrative and tax documents.
Legal basis: legal obligation.
3.3 Customer Support and Contact Requests
Data is processed to respond to requests sent by email, telephone, contact form or other channels available on the site.
Legal basis: performance of pre-contractual measures, performance of the contract or legitimate interest of the Data Controller in responding to requests received.
3.4 Newsletters and Promotional Communications
If the user voluntarily subscribes to the newsletter, the Data Controller may send commercial, promotional or informational communications relating to the site's products and initiatives.
Legal basis: user consent.
The user may withdraw consent at any time by using the unsubscribe link in emails or by writing to: info@creazioniitaliane.it
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
3.5 Soft Spam to Existing Customers
If provided for and within the limits permitted by applicable law, the Data Controller may send promotional communications relating to products or services similar to those already purchased by the user, using the email address provided at the time of purchase.
The user may object at any time to receiving such communications.
Legal basis: legitimate interest of the Data Controller, within the limits permitted by applicable law.
3.6 Security, Fraud Prevention and Protection of Rights
Data may be processed for:
prevent fraud;
protect the site from unauthorized access;
detect abuse or unlawful activities;
protect the rights of the Data Controller;
manage any disputes, complaints or claims.
Legal basis: legitimate interest of the Data Controller and, where necessary, establishment, exercise or defense of a legal claim.
3.7 Statistics and Traffic Measurement
The site may use statistical tools to understand how users browse the site and to improve content, products and features.
When statistical tools use cookies or other non-technical identifiers, processing takes place with the user's prior consent, as indicated in the Cookie Policy. For technical cookies and, under certain conditions, analytics cookies equivalent to technical cookies, consent is not required, but information must still be provided. The Data Protection Authority distinguishes between technical cookies, for which consent is not required, and profiling cookies, for which consent is necessary.
Legal basis: user consent, or legitimate interest/technical statistics where permitted by applicable law.
3.8 Marketing, Remarketing and Online Advertising
The site may use, only if actually enabled, tools such as Google Ads, Meta Pixel/Facebook Ads, Pinterest Ads or other advertising services to display personalized ads, measure conversions or create remarketing audiences.
Such processing is carried out only within the limits permitted by law and, where necessary, with the user's prior consent through the cookie banner.
Legal basis: user consent.
The user may change or withdraw cookie and tracking-tool preferences as indicated in the Cookie Policy.
4. Cookies and Tracking Tools
The site uses cookies and tracking tools to function correctly, improve the browsing experience, produce statistics and, if enabled, carry out marketing and remarketing activities.
Technical cookies are necessary for the operation of the site and do not require the user's consent.
Profiling, marketing, remarketing or analytics cookies not equivalent to technical cookies are installed only with the user's prior consent.
The user can manage preferences through the cookie banner on the site and, where available, through the “Cookie Preferences” panel.
For more information, the user may consult the Cookie Policy published on the site.
Guidelines from the Data Protection Authority on cookies require that users be clearly informed and able to give or withhold consent for non-technical cookies.
5. Third-Party Services and Providers
The site may use third-party providers to deliver the services necessary for the operation of the e-commerce platform.
By way of example, the following may be used:
Wix platform for hosting, website management and e-commerce;
payment providers, such as PayPal, Wix Payments or other integrated systems;
couriers and shipping services, including Poste Italiane;
newsletter or email marketing services;
statistical analysis services;
advertising services, if enabled;
tax, legal, IT or administrative consultants;
public authorities, where required by law.
Providers process data in accordance with their respective privacy notices and, where necessary, as data processors or independent data controllers.
The updated list of data processors may be requested by writing to:
6. Transfer of Data Outside the European Economic Area
Some service providers used by the site may process personal data outside the European Union or the European Economic Area.
In such cases, transfer takes place in compliance with the mechanisms provided by the GDPR, such as adequacy decisions, standard contractual clauses or other appropriate safeguards.
For transfers to U.S. entities participating in the EU-US Data Privacy Framework, the European Commission adopted an adequacy decision in 2023.
7. Processing Methods and Security
Personal data is processed using IT and electronic tools and, where necessary, paper-based methods.
The Data Controller adopts appropriate technical and organizational measures to protect personal data from loss, unlawful use, unauthorized access, disclosure, alteration or destruction.
Personal data is processed only by authorized persons or appointed providers, within the limits necessary to carry out their respective activities.
8. Data Retention Period
Personal data is retained for the time necessary for the purposes for which it was collected.
In particular:
data relating to orders, payments, shipping, invoicing and accounting: retained for the period required by tax and accounting law;
data relating to support requests, returns, warranties or complaints: retained for the time necessary to manage the request and protect the rights of the Data Controller;
data processed for newsletters and marketing: retained until consent is withdrawn or deletion is requested;
technical data and logs: retained for the time necessary to ensure security, operation and maintenance of the site;
cookies: retained as indicated in the Cookie Policy and cookie-preferences panel.
When no longer necessary, data will be deleted or anonymized, except where required by law or necessary to protect the rights of the Data Controller.
9. Provision of Data
Providing the data required to make a purchase is mandatory in order to conclude and perform the contract.
Without such data, the Data Controller will not be able to manage the order, payment, shipment or after-sales support.
Providing data for marketing, newsletters, profiling or non-technical cookies is optional and requires the user's consent where applicable.
10. User Rights
As a data subject, the user may exercise the rights provided by Articles 15 et seq. of the GDPR, including:
right of access to personal data;
right to rectification;
right to deletion;
right to restriction of processing;
right to object;
right to data portability, where applicable;
right to withdraw consent at any time;
right to lodge a complaint with the Data Protection Authority.
To exercise their rights, the user may write to:
The Data Controller will respond to requests within the time limits provided by applicable law.
11. Complaint to the Data Protection Authority
The user has the right to lodge a complaint with the Data Protection Authority if they believe that their personal data is being processed in violation of applicable law.
12. Minors
The site is not specifically intended for minors.
Purchases on the site must be made by adults or, in any case, by persons authorized under applicable law.
The Data Controller does not intentionally collect personal data from minors for marketing purposes.
13. Automated Decision-Making and Profiling
The site does not use automated decision-making processes capable of producing legal effects on the user or similarly significantly affecting the user.
If marketing, remarketing or personalized advertising tools are enabled, the site may process browsing data and user preferences to display more relevant ads or content, only within the limits permitted by law and with consent where necessary.
The user may object or withdraw consent in accordance with the procedures set out in this Privacy Policy and the Cookie Policy.
14. Changes to the Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy at any time.
Changes will be published on this page.
When changes concern processing based on consent, the Data Controller will, where necessary, obtain the user's consent again.