Last updated: 29 August 2026
This Privacy Policy describes how the personal data of users who visit adellidesign.com, use the e-commerce features, create an account, place an order or contact Adelli Design are processed. Personal data are processed in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable national legislation.
1. Data Controller
The Data Controller is: Adzic Bogdan, operating under the trade name “Adelli Design”.
Registered address: Via Nazario Sauro 8/A
VAT No.: 03269480210
E-mail: info@adellidesign.com
Website: https://www.adellidesign.com
For requests concerning the protection of personal data and the exercise of the rights described in this Privacy Policy, the Data Controller may be contacted at the email address indicated above.
2. Personal Data Processed
Depending on how the website is used, the following categories of personal data may be processed:
identification and contact data, such as first name, last name, email address and telephone number;
billing and shipping data, such as address, city, postal code, province/region and country;
data relating to customer accounts, login credentials and stored preferences;
data relating to orders, including products purchased, quantities, amounts, order status, shipping method, any refunds or cancellations, and the payment method used;
data voluntarily provided through contact forms, emails, order notes or support requests;
– technical and browsing data, such as IP address, browser, operating system, device information, technical logs, date and time of requests and pages visited, to the extent necessary for operation, security and, subject to consent where required, statistical measurement.
3. Purposes and Legal Bases for Processing
Management of Purchases and Orders
Data are processed to receive and manage orders, process purchases, arrange shipping, communicate with customers, and manage returns, refunds, disputes and pre- and post-sales support.
Legal basis: Performance of a contract or pre-contractual measures requested by the data subject (Article 6(1)(b) GDPR).
Administrative, Accounting and Tax Obligations
Data relating to purchases and associated documents may be processed and retained in order to comply with applicable legal obligations.
Base giuridica: Adempimento di un obbligo legale (art. 6, par. 1, lett. c GDPR).
Creazione e gestione dell’account
L’utente può creare un account per consultare gli ordini, gestire indirizzi e dati personali, accedere ai metodi di pagamento salvati tramite il provider e velocizzare gli acquisti successivi. La creazione dell’account non è obbligatoria quando è disponibile l’acquisto come ospite.
Legal basis: Performance of a contract or measures requested by the data subject (Article 6(1)(b) GDPR).
Requests for Information and Support
Data submitted through contact channels are used to respond to requests and provide support.
Legal basis: Performance of pre-contractual measures and, where applicable, the legitimate interest of the Data Controller in managing requests received (Article 6(1)(b) and (f) GDPR).
Security and Prevention of Abuse
Technical data and logs may be processed to protect the website, prevent unauthorised access, fraud and unlawful use, and ensure the integrity of systems.
Legal basis: Legitimate interest of the Data Controller in ensuring the security of its services and protecting its rights (Article 6(1)(f) GDPR).
Statistics and Measurement
Subject to consent, Google Analytics 4 is used to understand, in statistical form, how the website is used and to measure interactions and e-commerce events.
Legal basis: Consent of the data subject (Article 6(1)(a) GDPR), where required.
4. E-commerce, WooCommerce and Customer Accounts
The website uses WordPress and WooCommerce to manage the catalogue, cart, checkout, orders, shipping, customer accounts and transactional emails. Data relating to orders and accounts are stored in the website database and may include names, contact details, addresses, products ordered, amounts, order status and the payment method used.
Registered customers may access their personal area to view orders, manage addresses, modify their account details and, where available, manage payment methods saved through the payment provider. Purchases may also be made as a guest where this option is available.
5. Payments and Stripe
Electronic payments are processed through Stripe. Depending on the payment method selected, identification data, email address, billing address, technical information, transaction data and information necessary for fraud management and prevention may be processed.
Adelli Design does not store complete payment card details in its own database. The data required for the transaction are processed by the payment provider according to the respective privacy roles; depending on the activity carried out, Stripe may act as a data processor on behalf of the merchant and/or as an independent data controller.
The checkout may also make payment methods such as Apple Pay, Google Pay or Link available through Stripe. If the user chooses one of these methods, the relevant provider may process data in accordance with its own privacy policy. Payment by bank transfer may also be offered.
Stripe Privacy Policy: stripe.com/it/privacy
6. Google Analytics 4, Site Kit and Consent
The website uses Google Analytics 4 through Google Site Kit to obtain statistical information about website usage and to measure interactions and e-commerce events. The use of Analytics cookies is subject to the user’s consent through the banner managed with Complianz; consent preferences are communicated through WP Consent API and Google Consent Mode.
Before consent is given, Analytics storage is denied and Analytics cookies are not set. Depending on how Consent Mode operates, Google may nevertheless receive limited cookieless technical signals necessary to manage consent status and measurement in accordance with the applicable settings.
Google Analytics may process, among other things, browsing events, browser and device information and approximate location data. For users in the European Union, Switzerland and the United Kingdom, Google states that individual IP addresses are neither logged nor stored: the IP address is used to derive approximate location information and is then deleted before being logged in Analytics systems.
Google Analytics 4 data retention period: data associated with events are configured with a retention period of 2 months, while data associated with users are configured with a retention period of 14 months. The retention period for user data is reset in the event of new user activity, according to the Google Analytics property settings.
Google Privacy Policy: policies.google.com/privacy
7. Cookies and Similar Technologies
The website uses cookies and similar technologies. Strictly necessary cookies are used for the operation of the website and for language, cart, session, authentication, checkout and security management. Statistical cookies are used only in accordance with the preferences expressed by the user where consent is required.
The consent banner allows users to accept, reject or modify their preferences. Users may reopen the consent settings and change their choice at any time.
For an up-to-date list of cookies, their purposes, duration and associated services, please refer to the Cookie Policy generated and maintained through Complianz and available on the website.
8. Hosting, Technical Infrastructure and Email
The website is hosted using Hostinger services. On behalf of the Data Controller, the hosting provider processes the data required to provide the technical infrastructure, host files and databases, manage logs, backups, security and service availability, in accordance with the applicable contractual and data-processing agreements.
Emails relating to orders, accounts, support and requests may pass through the email service provider associated with the domain. Such communications are processed to the extent necessary to provide the requested service.
9. Transactional Emails
The email address provided by the user may be used to send communications strictly related to the service, including order confirmations and updates, shipping information, account registration, password setup or recovery, and communications relating to payments, refunds or cancellations. These communications do not constitute promotional newsletters.
10. Recipients and Categories of Parties that May Process Data
Personal data may, to the extent necessary, be disclosed to parties providing services to the Data Controller, including:
providers of hosting, infrastructure, backup, security and email services;
providers of the e-commerce platform and related technical components;
payment providers, including Stripe, and any wallets selected by the user;
Google for Analytics/Site Kit services, within the limits of the user’s consent preferences;
couriers and logistics operators for order delivery;
administrative, accounting, tax and legal advisers;
IT providers and professionals responsible for maintenance or technical support;
– public authorities or other parties where disclosure is required by law.
Where required by the GDPR, parties processing data on behalf of the Data Controller are appointed as data processors pursuant to Article 28 GDPR. Personal data are neither publicly disclosed nor sold to third parties.
11. Transfers of Data to Third Countries
Some technology providers used by the website are part of international groups and may process data outside the European Economic Area. In such cases, transfers take place on the basis of mechanisms provided for under the GDPR, such as adequacy decisions, the European Commission’s Standard Contractual Clauses and any additional applicable safeguards.
For further details regarding transfers carried out by individual providers, please refer to their respective privacy policies and data-processing agreements.
12. Retention Periods
Data are retained for the time necessary for the purposes for which they were collected and subsequently for the periods required by applicable law or necessary to protect the rights of the Data Controller. Based on the current configuration of the store:
Inactive customer accounts: up to 36 months of inactivity, unless further retention is necessary in connection with orders or legal obligations.
Pending orders: up to 7 days, unless operational requirements justify further retention.
Failed orders: up to 30 days.
Cancelled orders: up to 12 months.
Completed and refunded orders: up to 10 years, or for any different period required by applicable administrative, accounting and tax legislation.
Contact and support requests: for the time necessary to manage the request and subsequently for the period necessary to protect the rights of the parties.
Data processed on the basis of consent: until consent is withdrawn, unless another legal basis exists for continued retention.
Google Analytics 4: data associated with events are configured with a retention period of 2 months, while data associated with users are configured with a retention period of 14 months. The retention period for user data is reset in the event of new user activity, according to the Google Analytics property settings.
Third-party providers may apply their own retention periods to data processed in their capacity as independent data controllers, in accordance with their respective privacy policies and legal obligations.
13. Nature of the Provision of Data
Providing the data necessary to identify the customer, process the order, manage payment and arrange shipping is necessary in order to enter into and perform the contract. Failure to provide such data may make it impossible to complete the purchase. Creating an account is optional where guest checkout is available. Consent to statistical cookies is optional, and refusal does not prevent the use of the website’s essential features.
14. Rights of the Data Subject
In the cases provided for by Articles 15–22 GDPR, the data subject may exercise the following rights:
obtain confirmation as to whether or not personal data concerning them are being processed and gain access to such data;
obtain the rectification of inaccurate data and the completion of incomplete data;
request the erasure of data in the cases provided for by law;
request restriction of processing;
object to processing in the cases provided for;
receive the data in a structured, commonly used and machine-readable format and, where applicable, request data portability;
withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn;
– lodge a complaint with the competent supervisory authority.
Requests may be sent to info@adellidesign.com Before acting on a request, the Data Controller may request information reasonably necessary to verify the identity of the person making the request.
15. Complaint to the Supervisory Authority
A data subject who believes that the processing of their personal data infringes the GDPR may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), without prejudice to any other administrative or judicial remedy.
Italian Data Protection Authority:
16. Data Security
The Data Controller adopts technical and organisational measures appropriate to the level of risk in order to protect personal data against loss, destruction, alteration, disclosure or unauthorised access. Such measures may include encrypted connections, access controls, software updates, backups and security tools. However, no IT system can guarantee an absolute level of security.
17. Fraud Prevention and Automated Provider Processes
The Data Controller does not carry out, within the website, decisions based solely on automated processing that are intended to produce significant legal effects on the user. Payment and security providers may use automated systems to prevent fraud, abuse or payment risks in accordance with their own terms and privacy policies; such checks may affect the authorisation of a transaction.
18. Links to External Websites and Services
The website may contain links to external services or profiles, including social networks. This Privacy Policy applies exclusively to processing carried out within the Adelli Design website. External websites and services apply their own privacy policies.
19. Changes to this Privacy Policy
This Privacy Policy may be amended or updated as a result of regulatory changes, the introduction of new services, changes to providers or changes in the methods of processing. The updated version will be published on this page together with the date of the latest update.
