Privacy Policy
Last Updated: 31 August 2026
This information describes how Bottega Divanessa collects, uses and protects the personal data of users who visit the bottegadivanessa.it site, create an account, make a purchase or contact the seller.
1. Data Controller
The data controller is:
Divanessa Shop by Vanessa Haddad
Via Guelfa 83/R, 50129 Florence, Italy
Email: vanessa@bottegadivanessa.com
2. Data processed
Depending on the use of the site, the following may be collected:
- name and surname;
- email address and telephone number;
- billing and shipping address;
- information relating to orders, products purchased and customer requests;
- data necessary for billing and tax obligations;
- Customer account data, if created;
- communications sent by email or other contact channels;
- IP address, browser information, device and technical data necessary for the operation and safety of the site;
- Cookie preferences, where applicable.
Bottega Divanessa does not directly keep the complete data of the payment cards. Payments are processed by the provider of the selected payment service at checkout, including SumUp.
3. Purposes and legal bases
Personal data is processed for:
- process, prepare, ship and manage orders;
- manage payments, refunds, returns and customer support;
- create and administer the customer's account;
- respond to requests for information or appointments;
- fulfill accounting, tax and legal obligations;
- prevent fraud, abuse and security issues;
- ensure the technical functioning of the site;
- Send promotional communications only when the user has given a specific consent.
The processing is based, depending on the case, on the execution of the contract or pre-contractual measures, on the fulfillment of legal obligations, on the legitimate interest in safety and the correct management of the activity or on the consent of the interested party.
4. Provision of data
The provision of the data necessary for the management of the order is essential to conclude and make the purchase.
Failure to provide such data may prevent the processing of the order, payment or delivery.
Consent to any marketing communications is optional and can be revoked at any time.
5. Recipients and service providers
The data may be disclosed, within the necessary limits, to suppliers who support the operation of the activity and the site, including:
- Infomaniak, for hosting and technical infrastructure;
- WordPress and WooCommerce, for site and order management;
- SumUp and any other suppliers available at checkout, for payment processing;
- couriers and postal operators, for the delivery of orders;
- tax, accounting or legal consultants;
- public authorities, when required by law.
These subjects process the data according to their respective roles and obligations regarding the protection of personal data.
6. International transfers
If a supplier processes data outside the European Economic Area, the transfer will take place in compliance with the applicable legislation and through one of the tools provided for by the GDPR, such as adequacy decisions or standard contractual clauses.
7. Conservation
The data is kept exclusively for the time necessary for the purposes for which it was collected.
The data relating to orders, payments, billing and accounting obligations are kept for the period required by the applicable legislation.
The account data is retained as long as the account remains active or until the request for cancellation, except for the need to keep certain information for legal obligations or for the protection of rights.
Communications and requests for assistance are kept for the time necessary for their management and possible protection of the parties.
8. Cookies
The site may use technical cookies necessary for the operation of the cart, checkout, account, security and user preferences.
Any unnecessary, analytical or marketing cookies are used only in accordance with the applicable legislation and, when required, after obtaining the user's consent.
The user can manage their preferences through the banner or the cookie management tool on the site and through the browser settings.
9. Security
Appropriate technical and organizational measures are taken to protect personal data from loss, unauthorized access, alteration or disclosure.
However, no online system can guarantee absolute security.
10. Rights of the interested party
In the cases provided for by the law, the interested party may request:
- access to their personal data;
- the correction of inaccurate or incomplete data;
- data deletion;
- limitation of treatment;
- data portability;
- opposition to treatment;
- the revocation of consent, without prejudice to the lawfulness of the processing carried out before the revocation.
Requests can be sent to vanessa@bottegadivanessa.com .
The interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data or to the competent supervisory authority.
11. Data of minors
The site and products are not specifically intended for minors. No personal data of minors is consciously collected in the absence of the requirements established by law.
12. External connections
The Site may contain links to third-party sites or services. Bottega Divanessa is not responsible for the ways in which these subjects process personal data. The user is invited to consult the respective privacy policies.
13. Changes to the information
This information can be updated to reflect regulatory, technical or operational changes.
The updated version will be published on this page with an indication of the revision date.
14. Contacts
For questions about the processing of personal data or to exercise your rights: