Pursuant to Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, Rima Fonti informs the users of the website rimafonti.com about the processing of personal data.
The Artisan-Sellers who fulfil the order: Customer's name and shipping address, shared with them as independent data controllers for the sole purpose of shipping and order fulfilment (Art. 6.1(b) GDPR).
Stripe: payment service provider.
Couriers: for order delivery.
o2switch: website hosting provider.
Cookies
The website uses exclusively technical cookies necessary for its operation (cart, checkout session, authentication). We do not employ profiling or marketing cookies, so no prior consent is required.
Technical cookies in use:
wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart — cart and purchase session management (duration: session or 48 hours).
wordpress_logged_in_*, wordpress_test_cookie — authentication for registered users (duration: session, until browser is closed).
rf_lang — stores your chosen language (duration: 30 days).
rf_gelato_ok, rf_has_account — support for account verification popups (duration: session).
Cookies set by Stripe on its own domain (stripe.com) during checkout for anti-fraud purposes (subject to the Stripe privacy policy).
For statistical measurement of traffic, we use self-hosted Matomo in cookieless mode: no cookies are written on your device, your IP address is anonymised (last two octets removed) before storage, and geolocation (country/city) is performed via a local DB-IP City Lite database, with no transfer to third parties. This processing falls under the exemption from consent as recommended by EDPB Guidelines and CNIL Deliberation No. 2020-091 on audience measurement tools.
You can manage or delete cookies at any time via your browser settings. Disabling technical cookies may affect the operation of the cart, checkout and user account.
Data Transfers
Some data may be transferred to the United States (for example, through Stripe). Such transfers are carried out in accordance with the safeguards provided by the GDPR, including the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
Data Retention
Personal data is retained for the following periods:
Tax and accounting data: 10 years, in compliance with legal obligations.
Browsing data (raw Matomo logs): 6 months (180 days).
Under Articles 15 to 22 of the GDPR, you have the following rights:
Right of access: to obtain confirmation of the processing of your data and receive a copy thereof.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure: to request the deletion of your personal data.
Right to restriction of processing: to request the restriction of the processing of your data.
Right to object: to object to the processing of your data.
Right to data portability: to receive your data in a structured, machine-readable format.
Withdrawal of consent: to withdraw your consent at any time, without affecting the lawfulness of processing based on consent given prior to withdrawal.
Right to lodge a complaint: to file a complaint with the Information Commissioner's Office (ICO) or with the Italian Data Protection Authority – Garante per la protezione dei dati personali (garanteprivacy.it).
We respond to any request without undue delay and in any event within one month of receipt, extendable by two further months where the request is complex or numerous (Art. 12(3) GDPR).
Changes
Rima Fonti reserves the right to amend this privacy policy at any time. Changes will be published on this page with an indication of the date of the last update.
Minors
Purchasing on the website requires the contractual capacity provided by the applicable law (in the UK and Italy: 18 years). For consent to data processing (Art. 8 GDPR / UK GDPR), the minimum age varies: 13 years in the UK, Portugal, Belgium; 14 years in Italy, Spain; 15 years in France, Greece; 16 years in Germany, Netherlands, Ireland, Poland. Below the applicable age, consent from the holder of parental responsibility is required. Rima Fonti does not knowingly collect data from minors without such consent.