Last updated: July 23, 2025
1. Data controller
The Data Controller of the data collected by this site is:
Bonomo Foundation
Address: Contrada Castel Del Monte, 76123 Andria (BT)
Contact email: info@fondazionebonomo.org
2. Types of data collected
Through this site we collect and process the following categories of personal data:
a. Data provided voluntarily by users:
- Name and surname
- E-mail address
- Shipping and billing address
- Telephone number
- Order information (products purchased, amounts, payment method, etc.)
- Data provided via contact forms or newsletter subscription forms
b. Data collected automatically:
- IP address
- Browser and device type
- Browsing data via cookies (for which please refer to the Cookie Policy)
3. Purpose of the processing
The collected data is processed for the following purposes:
- WooCommerce Order Management: Fulfillment, Shipping, Billing, and After-Sales Support
- Contacting users: via contact forms created with Elementor
- Sending newsletters and promotional communications: with explicit consent
- Tax and legal obligations
- Statistical analysis and website improvement (through technical cookies and, if present, third-party cookies)
4. Legal basis for processing
Data processing is based on one or more of the following legal bases:
- Performance of a contract (online purchases)
- Fulfillment of legal and tax obligations
- User consent (contact forms, newsletter subscription)
- Legitimate interest of the Data Controller (e.g., fraud prevention or service improvement)
5. Methods of processing
The data is processed using electronic and paper-based tools, according to principles of fairness, lawfulness, and transparency, and is protected by appropriate security measures.
No automated profiling is carried out without consent nor are automated decisions that produce legal effects on the user.
6. Communication and access to data
The data may be shared only with third parties who provide services necessary for the operation of the site, including:
- Web hosting and infrastructure providers
- Email marketing services (e.g., Mailchimp, Brevo, etc.)
- Payment providers (e.g. PayPal, Stripe)
- Freight forwarders and couriers
- Tax and legal consultants
- Plugins and services integrated into WordPress/WooCommerce
All subjects are appointed, where necessary, as Data Processors pursuant to Art. 28 GDPR.
7. Transfer of data outside the EU
Some services used by the site (e.g., Mailchimp, Google, Meta/Facebook) may involve the transfer of data to countries outside the EU (e.g., the USA). In these cases, the transfer occurs only if adequate measures are in place pursuant to the GDPR (e.g., standard contractual clauses).
8. Data retention period
The data is stored for the time necessary for the purposes for which it was collected:
- Purchase data: 10 years (tax obligation)
- Data from contact forms: up to 12 months from the response
- Data for marketing purposes: until consent is revoked
- Cookies: as indicated in the Cookie Policy
9. User (interested party) rights
You can exercise the following rights at any time:
- Access to your personal data
- Correction or update
- Erasure (“right to be forgotten”)
- Restriction of processing
- Objection to processing
- Data portability
- Revoke consent at any time
To exercise your rights, you can write to: info@fondazionebonomo.org
You also have the right to lodge a complaint with the Italian Data Protection Authority: https://www.garanteprivacy.it
10. Cookie
The site uses technical cookies and, with your consent, analytical and profiling cookies. For more details, see our Cookie Policy.
11. Changes to this privacy policy
We reserve the right to update this privacy policy at any time. Changes will be posted on this page with the updated date.
