Privacy Policy

Information on the Processing of Personal Data Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

Last updated: [26/06/2026]

1. Data Controller
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”), the Data Controller of the personal data collected through this website is:
Neos Sistemi srl
Registered Office: Via Fratelli Coletta, 4 70014 Conversano (BA)
VAT No. / Fiscal Code: 01930960446
Email: info@neossistemi.it
PEC: info@pec.neossistemi.it
Telephone: 0736892781
(hereinafter, the “Data Controller”).

2. Scope of the Policy
This policy describes how we collect, use, store, and protect the personal data of users who visit the site and purchase products through the WooCommerce e-commerce platform.
Data is processed in compliance with the principles of lawfulness, fairness, transparency, data minimization, and confidentiality established by the GDPR.

3. Types of data processed
During navigation or use of the services, the following categories of personal data may be collected.
Identification data
• first name
• last name
• company name
• VAT number/tax code
Contact details
• email address
• telephone number
• shipping address
• billing address
Order data
• products purchased
• purchase history
• amounts
• payment method chosen
• order status
• any support requests

Payment data
The site does not directly store or process complete payment card details.
Electronic payments are handled by specialized providers such as Stripe and PayPal, who operate as independent data controllers in accordance with their respective privacy policies.
In the case of payment by bank transfer, only the data necessary to verify the payment will be processed.
Cookies and similar technologies
The site uses technical cookies and, with prior consent where necessary, analytical and marketing cookies. Further information is contained in the Cookie Policy.

4. Purpose of processing
Personal data is processed exclusively for the following purposes.
a) Order management
Processing is necessary to:
• receive orders;
• process purchases;
• manage shipments;
• issue tax documents;
• manage any returns;
• provide after-sales support.
Legal basis: performance of a contract (Article 6, paragraph 1, letter b, GDPR).
b) Creation and management of a customer account
If the user chooses to register on the site, the data will be used to allow access to the reserved area and manage order history.
Legal basis: performance of the contract.
c) Tax and accounting obligations
The data will be processed to fulfill obligations under tax, accounting, and administrative regulations.
Legal basis: legal obligation.
d) Management of support requests
The Data Controller uses the data to respond to requests sent via email or other contact channels.
Legal basis: execution of pre-contractual measures or legitimate interest.
e) Site security
Technical data may be processed for the following purposes:
• prevent fraud;
• detect unauthorized access;
• ensure infrastructure security;
• protect the site from cyber attacks.
Legal basis: legitimate interest of the Data Controller.
f) Statistical Analysis
With prior consent, the site uses Google Analytics 4 to analyze:
• traffic;
• site usage;
• performance;
• user behavior.
The data is used exclusively to improve the services offered.
Legal basis: consent of the data subject.
g) Marketing
With prior consent, Google Ads tools may be used for:
• conversion measurement;
• advertising campaigns;
• remarketing;
• campaign effectiveness analysis.
Legal basis: consent.

5. Processing Methods
The processing is carried out using electronic and IT tools, adopting appropriate technical and organizational measures to guarantee:
• data integrity;
• confidentiality;
• availability;
• protection from unauthorized access;
• protection from accidental loss.
Access to the data is permitted only to authorized personnel.

6. Nature of the Provision
The provision of the data necessary for the conclusion of the contract is mandatory.
Failure to provide this information will make it impossible to:
• make purchases;
• receive products;
• obtain assistance;
• receive an invoice.
Providing data for marketing purposes is optional.

7. Data Recipients
The data may be disclosed exclusively to authorized parties, including:
• hosting providers;
• WooCommerce infrastructure managers;
• payment service providers (Stripe and PayPal);
• parties responsible for shipping products;
• competent authorities in cases provided for by law.
The data will never be disclosed.

8. Retention Period
The data will be retained exclusively for the time necessary to achieve the purposes indicated above.
Specifically:
• order data: 10 years;
• tax documentation: 10 years;
• customer account data: until account deletion;
• support requests: up to 24 months;
• data processed for marketing purposes: until consent is revoked or, in any case, for the period permitted by applicable law;
• browsing data: in accordance with the Cookie Policy.

9. Rights of the Data Subject
The data subject may exercise the rights provided for in Articles 15-22 of the GDPR at any time.
In particular, they may obtain:
• access to their data;
• rectification;
• updating;
• erasure;
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent without affecting the lawfulness of processing carried out before its withdrawal.
Requests can be sent to the Data Controller’s email address.

10. Complaint to the Supervisory Authority
If you believe that the processing violates applicable law, you have the right to lodge a complaint with the Italian Data Protection Authority or to take legal action.

11. Updates
This policy may be amended at any time to reflect regulatory, technical, or organizational changes.
Users are encouraged to consult it periodically.
The latest version will always be available on this website.