Privacy policy

Privacy policy

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) · Last updated: 09/11/2026

1. Data controller

EligoCoffee des Moritz Hofer, Via G. Marconi 37, 39051 Bronzolo (BZ), Italy · VAT no. IT03212150217 · Tax code HFRMTZ79M31A952D · Email info@eligocoffee.com · PEC postmaster@pec.eligocoffee.com · Tel. +39 328 6254515.

No Data Protection Officer has been appointed, as this is not mandatory.

2. What data we process

·         Data you give us: first and last name, delivery and billing address, email, phone, tax code / VAT number and recipient code or PEC (if you request an invoice), content of your messages.

·         Order data: products purchased, amounts, payment method (we do not store full card details: the payment provider handles them).

·         Browsing data: IP address, browser, device, pages visited, cookies and similar technologies (see the Cookie policy).

·         Data for courses and tastings: participants' names, chosen date, any allergies or intolerances you tell us about for the tasting (only if you tell us, and only for this purpose).

3. Why we process data and on what legal basis

Purpose

Legal basis

Retention

Managing orders, payments, shipping, returns and support

performance of a contract (Art. 6(1)(b) GDPR)

10 years for accounting and tax documents (Art. 2220 Italian Civil Code); other data until the end of the relationship and warranty periods

Invoicing and legal obligations (tax, accounting)

legal obligation (Art. 6(1)(c))

10 years

Customer account on the site

contract (Art. 6(1)(b))

as long as you keep the account

Answering requests by form, email, WhatsApp, phone

pre-contractual steps / legitimate interest (Art. 6(1)(b) and (f))

as long as needed to handle the request, max 12 months

Newsletter and offers (including the welcome discount)

consent (Art. 6(1)(a)), which you can withdraw at any time

until withdrawal

Emails about products similar to those already purchased

legitimate interest (Art. 130(4) Italian Privacy Code)

until you object, which you can do in every email

Reminders of abandoned carts and checkouts (only for marketing subscribers)

consent (Art. 6(1)(a)), which you can withdraw at any time

30 days

Statistics and site improvement (Microsoft Clarity, Google Analytics, Shopify statistics)

consent via the cookie banner (Art. 6(1)(a))

see Cookie policy

Personalised advertising and measurement (Meta Pixel for Facebook and Instagram, Google Ads)

consent via the cookie banner (Art. 6(1)(a))

see Cookie policy

Site security, fraud prevention, legal defence

legitimate interest (Art. 6(1)(f))

as long as needed

 

Providing the data needed for an order is mandatory: without it we cannot conclude the contract. All other data is optional.

4. Who receives the data

Data is processed by us and by providers acting as processors (Art. 28 GDPR) or as independent controllers:

·         Shopify International Ltd. (Dublin, Ireland) – online store platform and hosting;

·         payment providers: Shopify Payments (card payments, Apple Pay and Google Pay) and PayPal (independent controllers for payment data);

·         courier: Omest, for the delivery of orders;

·         our tax consultant;

·         store services and apps: Shopify Messaging and Shopify Flow (emails and automation), Search & Discovery and Translate & Adapt (site search and translations), Microsoft (Clarity, statistics), Google (Analytics, Ads, Search Console), Meta Platforms (advertising), theme and store management apps (GSC Product Labels & Badges, Hoppy Free Shipping, Smart Product Sorter, Section Star, Smind Sections, Canva Connect);

·         public authorities, when required by law.

We do not sell your data.

5. Transfers outside the EU

Some providers (e.g. Shopify Inc., Meta, Microsoft, Google, PayPal) may process data in the United States or other non-EU countries. Transfers are based on the EU-US Data Privacy Framework (for certified providers) or on the Standard Contractual Clauses approved by the European Commission.

6. Your rights

You can at any time request access, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interest, and withdraw your consent (without affecting processing already carried out). Write to info@eligocoffee.com: we reply within 30 days. You also have the right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it), or the authority in your country of residence.

7. Minors

The site is not aimed at children under 14, and we do not knowingly collect their data.

8. Changes

We may update this policy; the valid version is always the one published on this page, with the update date.