Privacy Policy

This Privacy Policy describes how Petramar S.r.l. processes the personal data of users who visit and use the website https://www.petramar.store/, hereinafter also referred to as the "Site", as well as customers who make purchases, send inquiries, subscribe to the newsletter, or use the services available on the Site.

This policy is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679, hereinafter also "GDPR", and applicable Italian legislation on personal data protection.

This policy refers exclusively to the website www.petramar.store and does not cover any third-party websites accessible via links on the Site.

1. Data Controller

The Data Controller is:

Petramar S.r.l.
Registered office: Via Val Sugana 5M, 16164 Genoa, Italy
VAT number and Tax Code: 02364080990
REA: GE-480640
E-mail: servizioclienti@petramar.store
Administration E-mail: amministrazione@petramar.store
PEC: petramarsrl@pec.it

For requests regarding the processing of personal data or to exercise privacy rights, the data subject can write to info@petramar.store or to the PEC address indicated above.

The Data Controller has not appointed a Data Protection Officer/DPO, as there is no obligation to do so, unless otherwise updated subsequently communicated on the Site.

2. Categories of personal data processed

Petramar S.r.l. may process the following categories of personal data.

2.1 Browsing data

The IT systems and software procedures used to operate the Site may, during their normal operation, acquire data whose transmission is implicit in the use of Internet communication protocols.

This category includes, for example:

• ·         IP address;
• ·         data relating to the device and browser used;
• ·         date and time of access;
• ·         pages visited;
• ·         addresses in URI notation of the requested resources;
• ·         technical information relating to the user's operating system and IT environment;
• ·         data relating to cookies and similar technologies, as indicated in the Cookie Policy.

2.2 Data provided voluntarily by the user

These are personal data provided directly by the user through the Site, via e-mail, telephone or other contact channels, such as, for example:

• ·         first name and last name;
• ·         e-mail address;
• ·         phone number;
• ·         shipping address;
• ·         billing address;
• ·         any company name;
• ·         tax code;
• ·         VAT number;
• ·         SDI recipient code or PEC;
• ·         data contained in requests for information, quotes, complaints, returns or assistance;
• ·         data entered in downloadable forms or sent to customer service.

2.3 Data relating to orders and purchases

In case of purchase through the Site, the Controller processes the data necessary for order management, including:

• ·         products purchased;
• ·         quantity;
• ·         amounts;
• ·         selected payment method;
• ·         payment status;
• ·         shipping and delivery data;
• ·         tax and administrative data;
• ·         any communications related to the order;
• ·         data necessary for managing returns, complaints, warranties, and refunds.

The Data Controller does not store complete payment card data, which is handled by the payment service providers used at checkout.

2.4 Data relating to personalized or custom-made products

In the case of personalized, custom-made, or made-to-order products, Petramar may also process:

• ·         graphic files;
• ·         logos;
• ·         emblems;
• ·         images;
• ·         texts;
• ·         technical specifications;
• ·         measurements;
• ·         colors;
• ·         drafts, graphic proofs or approvals submitted by the customer.

Customers are asked not to provide special data according to art. 9 GDPR, judicial data according to art. 10 GDPR, or personal data of third parties not necessary for product creation or order management.

2.5 Data for newsletters, commercial communications and marketing

If you subscribe to the newsletter or consent to promotional communications, Petramar may process:

• ·         e-mail address;
• ·         name, if provided;
• ·         communication preferences;
• ·         data relating to interaction with sent communications, where available;
• ·         data relating to commercial interests or preferences, within the limits permitted by applicable regulations and user choices.

2.6 Data collected through cookies and tracking tools

The Site may use technical, functional, statistical, marketing cookies or similar technologies, as indicated in the Cookie Policy and in the cookie preference management panel.

Non-technical cookies are used only in the cases and methods provided by applicable law, also based on user consent, when required.

3. Purposes and legal bases for processing

Personal data is processed for the purposes and according to the legal bases indicated below.

Purpose	Legal Basis
Allow navigation on the Site, proper functioning of pages, shopping cart, and checkout	Legitimate interest of the Data Controller and/or technical necessity of the service requested by the user
Manage account registration, where available	Execution of pre-contractual or contractual measures requested by the user
Receive and manage orders, payments, shipments, deliveries, in-store pickups, returns, refunds, complaints, and assistance	Execution of the contract or pre-contractual measures
Create personalized, custom-made or customer-requested products	Execution of the contract or pre-contractual measures
Manage invoices, tax documents, accounting, and administrative obligations	Legal obligation
Respond to requests for information, quotes, contacts, or assistance	Execution of pre-contractual measures requested by the data subject or legitimate interest of the Data Controller
Prevent fraud, abuse, unlawful use of the Site, disputes, or chargebacks	Legitimate interest of the Data Controller
Ascertain, exercise, or defend a right in judicial or extrajudicial proceedings	Legitimate interest of the Data Controller
Send newsletters or promotional communications, where requested or permitted	Consent of the data subject or, where permitted, legitimate interest/soft spam for similar products and services
Perform statistical analysis, performance measurement, marketing, remarketing, or profiling through non-technical cookies	Consent of the data subject, when required
Comply with requests from authorities, regulatory obligations, or legitimate orders	Legal obligation

4. Nature of data provision

The provision of data necessary for browsing, purchasing, payment, shipping, invoicing, and managing returns, complaints, or assistance is required to provide the requested service.

Failure to provide such data, whether partial or inaccurate, may result in the inability to manage the order, process the request, deliver the products, issue tax documents, or provide assistance.

The provision of data for marketing, newsletter, profiling, or non-technical cookie purposes is optional. Failure to consent does not affect the ability to browse the Website or purchase products, except for any non-essential functionalities related to these tools.

5. Processing methods and security

The processing of personal data is carried out using IT, telematic, and, where necessary, paper tools, according to principles of lawfulness, fairness, transparency, minimization, accuracy, integrity, and confidentiality.

Petramar adopts appropriate technical and organizational measures to protect personal data from loss, unauthorized access, illicit use, unauthorized disclosure, modification, or destruction.

Personal data are processed by authorized and instructed personnel, within the limits of assigned duties and the purposes indicated in this policy.

6. Recipients of personal data

Personal data may be communicated, within the limits necessary for the purposes indicated above, to the following categories of subjects:

• ·         personnel and collaborators authorized by Petramar;
• ·         e-commerce platform providers and related technical services;
• ·         hosting, maintenance, IT security, and technical assistance providers;
• ·         payment service providers;
• ·         banks and credit institutions;
• ·         couriers, freight forwarders, and delivery agents;
• ·         tax, administrative, legal, and accounting consultants;
• ·         newsletter, communication, and customer assistance service providers;
• ·         analytics, advertising, marketing, and social media service providers, where active and within the limits of the preferences expressed by the user;
• ·         public authorities, bodies, supervisory organizations, or subjects lawfully entitled to receive data by law or authority orders.

Personal data will not be disseminated, meaning they will not be made available to an indeterminate number of subjects.

External subjects who process personal data on behalf of Petramar are appointed, where necessary, Data Processors pursuant to Art. 28 GDPR.

7. Transfer of data outside the European Economic Area

Some technology, e-commerce, payment, analytics, marketing, or assistance service providers may also process personal data outside the European Economic Area.

In such cases, the transfer will take place in compliance with the guarantees provided by the GDPR, including adequacy decisions by the European Commission, Standard Contractual Clauses, or other guarantees provided by Articles 44 et seq. of the GDPR.

8. Data retention period

Personal data are retained for the time necessary to achieve the purposes for which they were collected and, subsequently, for the period provided by law or necessary for the protection of the Controller's rights.

By way of example:

Data Category	Indicative retention period
Data relating to orders, sales, payments, shipments, and contractual relationships	For the duration of the relationship and subsequently for the period provided by civil and tax law, usually 10 years
Tax, accounting, and administrative data	For the period provided by applicable law, usually 10 years
Data relating to assistance requests, complaints, returns, and warranties	For the time necessary to handle the request and subsequently for the period useful for the protection of the Controller's or data subject's rights
Data related to personalized products, files, drafts, and approvals	For the time necessary for production, order fulfillment, and management of any disputes, reorders, warranties, or documentary obligations
Browsing and security data	For the time strictly necessary for the operation and security of the Website, unless required for investigation of unlawful acts
Data for newsletters and marketing	Until consent is revoked, objection, or cancellation from the service, unless retention is necessary to demonstrate the lawfulness of the processing
Data processed through cookies	As indicated in the Cookie Policy and in the cookie preference management panel

Once the retention period has passed, the data will be deleted, anonymized, or aggregated, unless further retention is necessary to comply with legal obligations, authority orders, or the protection of the Controller's rights.

9. Newsletters and commercial communications

The user can subscribe to the newsletter or consent to receive commercial and promotional communications related to Petramar's products and services.

Subscription is optional and can be revoked at any time using the unsubscribe link found in the received communications or by writing to info@petramar.store.

The Controller may also send communications related to products or services similar to those already purchased, within the limits permitted by applicable law, without prejudice to the data subject's right to object at any time.

10. Profiling, remarketing and automated decisions

The Website may use, with prior consent where required, analytics, profiling, remarketing or advertising tools to understand users' interest in products and content and to propose more relevant commercial communications.

Petramar does not make decisions based solely on automated processing that produce legal effects concerning the data subject or that similarly significantly affect him or her.

11. Cookies and similar technologies

The Website uses cookies and similar technologies for technical, functional, statistical, marketing, or profiling purposes, as indicated in the Cookie Policy published on the Website.

The user can manage or modify their preferences via the cookie banner or the "Cookie Preferences" link, where available on the Website.

12. Minors' data

The Site and the products offered are not specifically intended for minors. Petramar does not knowingly collect personal data from minors without the consent of the person exercising parental responsibility, where required by applicable law.

13. Data Subject Rights

The data subject may exercise the following rights, in the cases and within the limits provided by the GDPR:

• ·         right to access personal data;
• ·         right to rectify inaccurate data;
• ·         right to erase data;
• ·         right to restrict processing;
• ·         right to object to processing;
• ·         right to data portability;
• ·         right to withdraw consent, where processing is based on consent;
• ·         right to lodge a complaint with the Italian Data Protection Authority.

To exercise privacy rights, the data subject may write to:

info@petramar.store
or
petramarsrl@pec.it

The Data Controller will respond to requests within the terms provided by applicable law.

14. Complaint to the Supervisory Authority

A data subject who believes that the processing of their personal data violates applicable law has the right to lodge a complaint with the Italian Data Protection Authority, in the manner indicated on the Authority's website.

15. Amendments and Updates

Petramar reserves the right to amend, supplement or update this Privacy Policy, also in consideration of regulatory changes, website updates, new services or variations in the processing carried out.

Last updated: April 7, 2026