Privacy Policy
Privacy Policy
Last updated: 03th August 2026
This Privacy Policy explains how Lanificio Rogna Srl collects, uses and protects personal data when you visit www.lanificiorogna.com, place an order, contact us or subscribe to our emails. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. Who is responsible for your data (Data Controller)
Lanificio Rogna Srl
Registered office: Via Monte Rosa 6/B, 28100 Novara (NO) — Italy Operational office: Costa Del Piazzo 39, 13900 Biella (BI) — Italy
VAT no. / Codice Fiscale / Registro Imprese no.: 02724820036 Share capital: € 15,000.00 fully paid up Certified email (PEC): lanificiorognasrl@pro-pec.it
Email: info@lanificiorogna.com Phone: +39 351 4570845
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. All privacy enquiries should be sent to the address above.
2. What we collect, why, and on what legal basis
2.1 Browsing data and server logs
Data: IP address, browser type and language, device type, operating system, referring page, pages viewed, time of visit. Purpose: operating the site securely, diagnosing faults, preventing fraud and abuse. Legal basis: legitimate interest (Art. 6(1)(f)) in keeping the site available and secure. Retention: 12 months, unless a longer period is needed to investigate a specific security incident.
2.2 Enquiries by email or phone
Data: name, email address, phone number, company or atelier name, and anything else you choose to tell us. Purpose:answering your question, sending quotations, stock checks. Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b)); legitimate interest for general business correspondence (Art. 6(1)(f)). Retention: 24 months after the last contact.
2.3 Orders and payments
Data: name, billing and shipping address, email, phone, VAT number where applicable, order contents, order history, delivery status, partial payment data (card type, last four digits, authorisation result). Purpose: processing and delivering your order, invoicing, handling returns and warranty claims, meeting accounting and tax obligations. Legal basis: performance of a contract (Art. 6(1)(b)); compliance with legal obligations under Italian tax and accounting law (Art. 6(1)(c)). Retention: 10 years for invoices and accounting records, as required by Italian law. Other order data is deleted earlier where no longer needed.
Full card numbers are never received or stored by us. Payments are processed directly by our payment providers.
2.4 Customer account
Data: name, email, password (stored in hashed form), saved addresses, order history. Purpose: letting you log in, reorder and track deliveries. Legal basis: performance of a contract (Art. 6(1)(b)). Retention: until you delete your account or ask us to delete it.
2.5 Newsletter and marketing emails
Data: email address, name (optional), and engagement data such as whether an email was opened or a link clicked.Purpose: sending news about collections, availability and events. Legal basis: your consent (Art. 6(1)(a)). Where you are an existing customer and we email you about similar products, we rely on legitimate interest / the soft opt-in permitted by Art. 130(4) of the Italian Privacy Code, and you may object at any time. Retention: until you unsubscribe, plus a suppression record so we do not contact you again.
You can withdraw consent at any time using the unsubscribe link in every email or by writing to info@lanificiorogna.com. Withdrawal does not affect the lawfulness of processing carried out before it.
2.6 Advertising and measurement via the Meta Pixel
Data: your IP address, browser and device information, pages viewed on our site, and actions such as adding an item to the cart or completing a purchase. Where you have a Facebook or Instagram account, Meta may connect this activity to your account. Purpose: measuring the effectiveness of our advertising, building audiences and showing you relevant ads on Facebook and Instagram. Legal basis: your consent (Art. 6(1)(a)), collected through our cookie banner. The pixel does not load until you consent, and you may withdraw consent at any time. Retention: as set by Meta; see the Meta Privacy Policy at www.facebook.com/privacy/policy.
For the collection and transmission of this data we act as joint controllers with Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland, under Art. 26 GDPR. The essence of our joint controller arrangement is set out in Meta's Controller Addendum. Meta is solely responsible for what it does with the data afterwards. You may exercise your rights against either of us, but requests concerning Meta's own processing are best addressed to Meta directly.
We do not use Google Ads.
2.7 Website analytics
Data: pages viewed, time spent, referring source, approximate location derived from IP address, device and browser type, and actions such as searches, cart additions and completed orders. Purpose: understanding how the shop is used so we can improve it. Legal basis: your consent (Art. 6(1)(a)), collected through our cookie banner, except for aggregated statistics produced by our e-commerce platform that do not allow us to identify you. Retention: as configured in the relevant tool, typically no longer than 14 months for identifiable data.
We use the analytics functions built into our Shopify store. We do not use Google Analytics.
2.8 Cookies and similar technologies
See section 7 below.
3. Is providing your data mandatory?
Providing the data marked as required at checkout or in a contact form is necessary to conclude and perform a contract with us. Without it we cannot process your order or reply to your enquiry. Providing your email for the newsletter, and consenting to analytics and advertising cookies, is entirely optional.
4. Who we share your data with
We do not sell your personal data. We share it only with the following categories of recipients, who act either as processors on our instructions under Art. 28 GDPR or as independent or joint controllers where indicated:
| Recipient | Role | Purpose |
|---|---|---|
| Shopify International Ltd. / Shopify Inc. | Processor | E-commerce platform and hosting of the online store |
| Klarna Bank AB | Independent controller | Payment, identity and credit checks where you choose Klarna |
| [Other payment providers — CONFIRM] | Independent controllers | Processing card payments and fraud prevention |
| DHL | Independent controller | Delivering your order and providing tracking |
| Meta Platforms Ireland Ltd. | Joint controller | Advertising measurement and audience building, subject to your consent |
| [Email marketing provider — CONFIRM] | Processor | Sending newsletters and transactional emails |
| Our accountant, auditors and legal advisers | Processors or independent controllers | Bookkeeping, tax filings, legal defence |
| Public authorities | Independent controllers | Where disclosure is required by law |
Klarna and other payment providers process your data under their own privacy policies as independent controllers, including for credit and identity checks. Please consult their notices for details.
An up-to-date list of processors is available on request from info@lanificiorogna.com.
5. Transfers outside the EEA
Some of our providers, including Shopify and Meta, are established in or transfer data to countries outside the European Economic Area, in particular the United States. Where this happens, the transfer is protected by one of the safeguards permitted under Chapter V GDPR:
- an adequacy decision of the European Commission, including the EU–US Data Privacy Framework where the recipient is certified; or
- Standard Contractual Clauses adopted by the European Commission under Art. 46(2)(c), supplemented where necessary by additional technical and organisational measures.
You may request a copy of the relevant safeguards by writing to info@lanificiorogna.com.
6. How long we keep your data
We keep personal data only as long as necessary for the purposes described above, and then delete or anonymise it. The main periods are set out in section 2. Where a legal obligation requires a longer period — in particular the ten-year retention of accounting records under Italian law — that period prevails.
7. Cookies
Our site uses cookies and similar technologies. We distinguish:
- Strictly necessary cookies, which make the shop work — session management, cart contents, login, security and load balancing. These do not require consent under Art. 122 of the Italian Privacy Code.
- Analytics cookies, which help us understand how the site is used.
- Marketing cookies, including those set by the Meta Pixel, which measure our advertising and allow relevant ads to be shown to you on Facebook and Instagram.
Analytics and marketing cookies are set only after you give consent through our cookie banner. You can accept, refuse or change your choices at any time via [link to cookie settings], and you can also delete cookies through your browser settings. Refusing non-essential cookies does not affect your ability to browse or buy.
A full list of the cookies used, their purpose and their duration is available in our [Cookie Policy].
8. Your rights
Under Articles 15 to 22 GDPR you have the right to:
- access the personal data we hold about you and obtain a copy;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten") where one of the grounds in Art. 17 applies;
- restrict processing in the cases listed in Art. 18;
- data portability — receive the data you provided in a structured, machine-readable format and have it transmitted to another controller, where processing is based on consent or contract and carried out by automated means;
- object at any time to processing based on our legitimate interests, and at any time and without giving reasons to processing for direct marketing;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, write to info@lanificiorogna.com or to the postal address in section 1. We will respond within one month, extendable by two further months for complex requests, and we may ask you to confirm your identity before acting.
9. Right to lodge a complaint
If you believe your data has been processed unlawfully, you may lodge a complaint with the Italian supervisory authority:
Garante per la protezione dei dati personali Piazza Venezia 11, 00187 Roma, Italy garante@gpdp.it — www.garanteprivacy.it
You may also complain to the supervisory authority of the EU Member State where you live or work, or where the alleged infringement took place.
10. Automated decision-making
We do not carry out automated decision-making producing legal or similarly significant effects within the meaning of Art. 22 GDPR. Klarna and other payment providers may apply automated fraud or credit checks as part of their own services; their privacy notices explain this.
11. Children
Our site and products are intended for professional and adult customers. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with data, please contact us and we will delete it.
12. Security
We apply appropriate technical and organisational measures under Art. 32 GDPR, including encrypted transmission via HTTPS, access controls limiting data to staff who need it, and the use of providers who offer adequate security guarantees.
13. Changes to this policy
We may update this Privacy Policy to reflect changes in our processing or in the law. The current version is always published on this page with the date of the last update. Material changes will be notified in a prominent way, and where required we will ask for renewed consent.