Privacy Policy

Privacy & Cookie Policy

Last updated: November 2025

1. Data Controller

The website www.facloverbags.com (hereinafter, the “Website”) is operated by:

Data Controller: AMBRA GIAMMARINO
Address: Via Privata Orvieto, 12 – 20141 Milan (MI), Italy
VAT number: IT09649530962
Email: ambragiammarino@gmail.com

The Data Controller is responsible for the collection and processing of personal data in accordance with this Privacy Policy.

2. Type of Website

This Website is an e-commerce platform primarily aimed at Italian users, dedicated to the online sale of bags and accessories.

3. Personal Data Collected

The Data Controller collects and processes different categories of personal data:

  • Data voluntarily provided by the user
    • Name, surname, email address, phone number, billing and shipping address.
    • Payment details required to process orders (handled securely by external payment providers such as PayPal or Stripe).
  • Data collected automatically
    • Technical information such as IP address, browser type, device information, and browsing data, collected via cookies and analytics tools (e.g., Google Analytics).
  • Data from voluntary subscription
    • Subscription to the newsletter to receive updates and offers.
  • Data from social networks
    • When interacting with social plugins or buttons (e.g., Facebook, Instagram).

4. Purpose of Processing

Personal data is collected and processed for the following purposes:

  1. Order and payment management: processing purchases, shipments, invoices, and returns.
  2. Customer support: responding to user requests and providing post-sale assistance.
  3. Sending newsletters and promotional communications, upon user consent.
  4. Website traffic and performance analysis (Google Analytics).
  5. Security and fraud prevention.
  6. Marketing via social media and analytics tools.

The legal basis for data processing is:

  • the performance of a contract (Art. 6.1.b GDPR);
  • the user’s consent (Art. 6.1.a GDPR);
  • the legitimate interest of the Data Controller (Art. 6.1.f GDPR).

5. Third-Party Services Used

Hosting

  • Namecheap (hosting provider) stores data on servers that may be located outside the EU, ensuring adequate security measures in compliance with the GDPR.

Analytics

  • Google Analytics (Google LLC – USA): used to analyze website traffic and user interactions.
    • Data may be transferred to the United States under the Standard Contractual Clauses (SCCs) approved by the European Commission.

Payments

  • PayPal and/or Stripe: securely handle payment transactions as independent data controllers.
    • The Website does not store payment information such as credit card numbers.

Marketing and Social Tools

  • Meta Pixel (Meta Platforms, Inc.): used for analytics and remarketing on Facebook/Instagram.

6. Data Retention

Personal data is retained for a maximum period of 12 months or for the time necessary to achieve the purposes stated above.
For newsletter subscriptions, data is stored until consent is withdrawn by the user.

7. User Rights

At any time, users may:

  • access their personal data;
  • request rectification or deletion;
  • restrict or object to processing;
  • withdraw previously given consent;
  • request data portability.

Requests may be sent to:
📧 ambragiammarino@gmail.com

Users also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Data Transfers Outside the EU

Some personal data may be transferred to countries outside the European Union (e.g., the United States) through services such as Google and Meta.
These transfers are carried out in accordance with Articles 44–49 of the GDPR, using appropriate safeguards such as the Standard Contractual Clauses (SCCs).

9. Cookie Policy

What Are Cookies

Cookies are small text files that the Website sends to the user’s device to improve browsing experience and collect statistical information.

Types of Cookies Used

  • Technical cookies: essential for the proper functioning of the Website.
  • Analytics cookies: used to analyze traffic and performance (e.g., Google Analytics).
  • Marketing cookies: used for remarketing and personalized advertising (e.g., Meta Pixel).

Managing Cookies

Users can modify their cookie preferences at any time through their browser settings or via the consent banner displayed on the Website.

10. Explicit Consent for Marketing and Profiling Cookies

When first accessing the Website, users can choose to:

  • accept all cookies (including profiling and marketing cookies),
  • reject them, or
  • customize their preferences.

Consent for the processing of personal data for direct marketing purposes (newsletters, promotions, remarketing via cookies or pixels) is optional and can be withdrawn at any time by:

Refusing consent does not affect the ability to browse or make purchases on the Website.

11. Changes to This Policy

The Data Controller reserves the right to modify this Privacy Policy at any time.
Updated versions will be published on this page, with the revision date clearly indicated.

12. Contact Information

For any questions about this Privacy Policy or data processing activities, please contact:

AMBRA GIAMMARINO
📍 Via Privata Orvieto, 12 – 20141 Milan (MI), Italy
📧 ambragiammarino@gmail.com