Informativa sulla privacy

INTRODUCTION

At Aether, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share personal information when you visit or make a purchase from aetherclo.it, contact us, subscribe to our communications or otherwise interact with our services.

This Privacy Policy is provided in accordance with Regulation (EU) 2016/679 (the “GDPR”) and other applicable data protection laws.

1. DATA CONTROLLER

The controller responsible for the processing of your personal data is:

Leonardo Biondi, trading as Aether
VAT / Tax ID: IT07390190481
Email: info@aetherclo.it

For any question regarding this Privacy Policy or the processing of your personal data, you can contact us at the email address above.

2. PERSONAL DATA WE COLLECT

Depending on how you interact with our website and services, we may collect the following categories of personal data.

Identity and contact information

This may include your:

  • first and last name;

  • email address;

  • telephone number;

  • billing address;

  • shipping address.

Order and transaction information

When you place an order, we may process information such as:

  • order number;

  • products purchased;

  • size and product selections;

  • purchase amount;

  • shipping method;

  • payment status;

  • order history;

  • returns, exchanges and refund information.

Payment information

Payments are processed through the payment service providers available at checkout.

Aether generally does not directly store complete payment card details. Payment information is processed securely by the relevant payment provider and/or Shopify in accordance with their own security and privacy practices.

Current payment providers may include:

Debit/credit card

  • GPay
  • eShop
  • Klarna
  • Paypal

Customer service and returns information

If you contact us or submit a return, exchange or withdrawal request, we may process:

  • your name;

  • email address;

  • order number;

  • products concerned;

  • reason for contacting us;

  • messages exchanged with us;

  • information necessary to process your return, exchange or refund.

Technical and usage information

When you access our website, certain technical information may be collected automatically, including:

  • IP address;

  • device type;

  • browser type and version;

  • operating system;

  • language settings;

  • website interactions;

  • pages visited;

  • referral source;

  • approximate geographic area derived from your IP address;

  • session and device identifiers;

  • cookie and similar technology information.

Marketing and analytics information

Where permitted and, where required, after obtaining your consent, we may collect information concerning:

  • your interaction with our website;

  • products viewed;

  • advertising interactions;

  • marketing campaign performance;

  • newsletter subscriptions;

  • marketing preferences.

This information may be collected through tools provided by Shopify and, where enabled, services such as Meta and Google.

3. HOW AND WHY WE USE YOUR PERSONAL DATA

We process personal data only where we have an appropriate legal basis.

Purpose Personal data involved Legal basis
Processing and fulfilling orders Identity, contact, order and transaction data Performance of a contract
Processing payments Order, transaction and payment information Performance of a contract
Shipping products Identity, contact and order data Performance of a contract
Managing returns, exchanges and refunds Identity, contact, order and return information Performance of a contract and compliance with legal obligations
Responding to customer enquiries Identity, contact and communication data Performance of a contract, pre-contractual measures and legitimate interests
Accounting, tax and administrative obligations Identity, order, transaction and invoicing data Compliance with legal obligations
Preventing fraud and protecting the website Technical, transaction and usage information Legitimate interests and compliance with legal obligations where applicable
Operating and maintaining the website Technical and usage information Legitimate interests and necessity to provide the requested service
Website analytics using non-essential tracking technologies Technical and usage information Consent, where required
Personalised advertising and marketing tracking Usage, device and advertising interaction information Consent, where required
Sending newsletters and promotional emails Name, email address and marketing preferences Consent or, where specifically permitted by applicable law, another lawful basis
Establishing, exercising or defending legal claims Relevant customer, order and communication information Legitimate interests and/or compliance with legal obligations

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. ORDERS AND E-COMMERCE PLATFORM

Our online store is hosted on Shopify.

Shopify provides the e-commerce infrastructure that allows us to display products, manage orders, operate checkout and provide other functions necessary for running our online store.

When you use our website or place an order, certain personal data may therefore be processed through Shopify's systems.

Depending on the service concerned and applicable data protection law, Shopify may process personal data on our behalf and may also process certain information for its own purposes in accordance with its applicable privacy documentation.

5. PAYMENTS

Payments are processed by the payment providers available to you at checkout.

Payment providers may collect information necessary to authorise and process your payment, including payment card or account information.

Aether normally receives confirmation of the payment, transaction identifiers and information necessary to manage your order, but does not need to receive or store your complete payment card number.

Payment providers may act as independent controllers for certain processing operations. Their processing is governed by their own privacy notices.

6. SHIPPING AND DELIVERY

In order to deliver your purchases, we may share the information necessary for shipment with logistics providers, shipping platforms and couriers.

The information shared may include your:

  • name;

  • delivery address;

  • email address;

  • telephone number;

  • order or shipment reference;

  • other information necessary for delivery.

These providers receive only the information reasonably necessary to perform the requested delivery services.

7. RETURNS, EXCHANGES AND WITHDRAWAL REQUESTS

When you submit a return, exchange or withdrawal request, we process the information necessary to identify your order and manage your request.

Such information is used exclusively for handling the request, communicating with you, complying with our legal obligations and protecting our legitimate interests in documenting the transaction.

8. MARKETING COMMUNICATIONS

If you subscribe to our newsletter or otherwise consent to receiving marketing communications, we may use your email address and related information to send you:

  • product releases;

  • restock notifications;

  • collection announcements;

  • promotional communications;

  • other news relating to Aether.

Where consent is required, marketing communications will only be sent after obtaining your consent.

You can unsubscribe at any time by using the unsubscribe link contained in our marketing emails or by contacting us at info@aetherclo.it.

Where applicable law permits communications to existing customers regarding products or services similar to those previously purchased without requiring a new consent, we may rely on that legal exception, while always providing an easy way to opt out.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies.

Some technologies are strictly necessary for the website to operate correctly, for example to provide shopping-cart functionality, maintain security, remember privacy choices and enable checkout.

Other technologies may be used for analytics, personalisation and advertising purposes.

Where required by applicable law, non-essential cookies and similar tracking technologies are not activated until you provide your consent.

Depending on the services enabled on our store, these technologies may be provided by:

  • Shopify;

  • Meta Platforms, including technologies associated with Meta advertising;

  • Google, including analytics and advertising technologies;

  • other providers identified in our cookie settings or Cookie Policy.

You can accept, reject or modify your choices through the cookie consent tools available on our website.

You can change or withdraw your consent at any time through the Cookie Preferences link available on the website.

For further information about the cookies and tracking technologies used on our website, their purposes and duration, please refer to our Cookie Policy.

10. SERVICE PROVIDERS AND RECIPIENTS

We may share personal data with third parties where this is necessary to operate our business and provide our services.

Recipients may include:

  • Shopify and providers supporting our e-commerce infrastructure;

  • payment service providers;

  • banks and financial service providers where necessary;

  • Packlink and shipping couriers;

  • IT, hosting and cybersecurity providers;

  • Cloudflare;

  • Resend;

  • email and marketing service providers;

  • Meta Platforms, where its advertising technologies are enabled and consent has been obtained where required;

  • Google, where its analytics or advertising technologies are enabled and consent has been obtained where required;

  • accountants, tax advisers, lawyers and other professional advisers;

  • public authorities where disclosure is required by law.

Depending on the circumstances, these organisations may process personal data as processors acting on our instructions, independent controllers, or joint controllers in accordance with applicable law and their respective services.

We do not disclose personal data to third parties for purposes unrelated to those described in this Privacy Policy unless required or permitted by law.

11. INTERNATIONAL DATA TRANSFERS

Some of our service providers operate internationally and may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred to a country outside the EEA that is not recognised by the European Commission as providing an adequate level of data protection, appropriate safeguards are used where required by law.

These safeguards may include:

  • European Commission adequacy decisions;

  • Standard Contractual Clauses approved by the European Commission;

  • other transfer mechanisms recognised under applicable data protection law;

  • supplementary technical and organisational safeguards where appropriate.

You may contact us for further information regarding the safeguards applicable to international transfers concerning your personal data.

12. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.

In particular:

  • order, invoice, accounting and transaction information is retained for the period required by applicable tax, accounting and commercial laws;

  • information relating to returns, refunds, customer service and contractual relationships may be retained for the time necessary to manage the request and for applicable limitation periods;

  • marketing information is retained until you withdraw your consent, unsubscribe or the information is no longer necessary for the relevant marketing purpose;

  • cookie and tracking information is retained according to the duration of the individual technologies described in our Cookie Policy or consent management interface;

  • security information may be retained for the period reasonably necessary to detect, investigate and prevent fraud, abuse or security incidents.

At the end of the applicable retention period, personal data is deleted or anonymised unless further retention is required by law or necessary for the establishment, exercise or defence of legal claims.

13. YOUR DATA PROTECTION RIGHTS

Subject to the conditions established by applicable law, you may have the right to:

  • obtain confirmation as to whether we process your personal data;

  • access the personal data we hold about you;

  • request correction of inaccurate or incomplete personal data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing based on legitimate interests;

  • object at any time to processing for direct marketing purposes;

  • receive certain personal data in a structured, commonly used and machine-readable format and request its transmission to another controller where applicable;

  • withdraw your consent at any time where processing is based on consent;

  • lodge a complaint with the competent data protection authority.

To exercise your rights, contact us at info@aetherclo.it.

We may need to request reasonable information to verify your identity before responding to certain requests.

14. RIGHT TO LODGE A COMPLAINT

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Italy, the competent authority is the:

Garante per la protezione dei dati personali

You may also have the right to lodge a complaint with the supervisory authority of the EU or EEA country in which you habitually reside, work or where the alleged infringement occurred.

We encourage you to contact us first if you have any questions or concerns regarding how we process your personal data.

15. AUTOMATED DECISION-MAKING

We may use automated systems to assist with fraud detection, payment security and website security.

Aether does not intend to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, unless such processing is permitted by applicable law and you are provided with the information and safeguards required by law.

Third-party payment, fraud prevention or e-commerce providers may operate their own automated systems in accordance with their respective privacy policies.

16. DATA SECURITY

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

We also rely on reputable service providers that implement their own security measures.

However, no method of transmission or electronic storage can guarantee absolute security.

17. DATA MINIMISATION

We aim to collect only personal data that is adequate, relevant and necessary for the purposes described in this Privacy Policy.

We do not intentionally request information relating to areas such as your health, political opinions, religious beliefs, sexual orientation or other special categories of personal data in connection with ordinary purchases from our store.

Please do not provide such information unless specifically necessary and requested for a legitimate purpose.

18. CHILDREN

Our products and services are not specifically directed at children.

We do not knowingly collect personal data from children in circumstances in which parental or guardian consent would be required under applicable law.

If you believe that a child has provided personal data to us improperly, please contact us so that we can investigate and, where appropriate, delete the information.

19. THIRD-PARTY WEBSITES

Our website may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy policies before providing personal information to them.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our services, technologies, providers, legal requirements or business practices.

When we make changes, we will update the “Last updated” date shown at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice or request new consent before materially changing how personal data is processed.

21. CONTACT US

For any questions concerning this Privacy Policy, the processing of your personal data or the exercise of your privacy rights, please contact. us