What we hold,
and for how long.

The data controller is the company that operates this shop, MCA ABBIGLIAMENTO S.R.L., at its registered office in Catania, Italy. Its full statutory identification is on the note legali page.

For anything about your data, write to support@mcaabbigliamento.shop with “data protection” in the subject line, or call +39 320 583 7412. A person answers, and we reply within thirty days at the outside.

We process personal data under the General Data Protection Regulation (EU) 2016/679 and Legislative Decree 196/2003, the Italian Privacy Code, as amended by Legislative Decree 101/2018.

Placing an order

Data

Name, email, telephone, delivery address, order contents, order reference.

Purpose

To conclude and perform the contract: to pick, ship, track and support the order.

Legal basis

Performance of a contract, Article 6(1)(b).

An order that was started and not paid

Data

The same fields, submitted at the checkout step before payment.

Purpose

To be able to complete the order by hand, and to follow up once where an order was evidently abandoned by accident.

Legal basis

Steps taken at your request prior to entering a contract, Article 6(1)(b); and our legitimate interest in recovering an incomplete order, Article 6(1)(f). You may object at any time and we will delete the record.

Contact and group-order enquiries

Data

Name, email, telephone if you give it, country, and whatever you write in the message.

Purpose

To read the enquiry and answer it.

Legal basis

Consent, given by ticking the box on the form, Article 6(1)(a).

The letter

Data

Email address only.

Purpose

To send the Linora letter, roughly three times a year.

Legal basis

Consent, Article 6(1)(a), always collected as a separate tick and never bundled with an order.

Legal and accounting records

Data

Invoices and transaction records.

Purpose

Tax and accounting obligations under Italian law.

Legal basis

Legal obligation, Article 6(1)(c).

We never ask for, receive or store card numbers. Payment details are entered directly on the payment provider’s own secure page and never pass through this website.

• We do not sell or rent personal data to anyone, for any purpose.
• We do not build advertising profiles or run automated decision-making or profiling that produces legal or similarly significant effects.
• We do not load a third-party advertising or measurement tag on this site.
• We do not ask for data we do not need. There is no date of birth field, no gender field and no account to create.
• We do not knowingly collect data from anyone under 13.

Only those who have to, and only for what they do:

• Carriers, to deliver the parcel: name, address, telephone.
• The payment services provider, to take payment: the amount, the order reference and the details you enter on their own page.
• Our email and hosting providers, as processors, to run the site and send transactional email.
• Our accountant, and public authorities where the law requires it.

Every processor is bound by a contract under Article 28 of the GDPR. Where any of them is outside the European Economic Area, the transfer is covered by an adequacy decision or by the European Commission’s standard contractual clauses; you can ask us which applies to a given provider and we will tell you.

Enquiries and group-order requests

Up to 24 months from the last exchange, then deleted.

Started but unpaid orders

Up to 6 months, then deleted.

Completed orders and support history

For the duration of the 2-year legal guarantee plus the limitation period, so that a claim can be answered.

Letter subscriptions

Until you unsubscribe or ask to be removed.

Invoices and accounting records

Ten years, as Italian tax law requires.

Under the GDPR you may ask us to:

• confirm whether we hold data about you, and give you a copy — access, Article 15;
• correct anything inaccurate — rectification, Article 16;
• delete it — erasure, Article 17;
• restrict what we do with it — Article 18;
• hand it over in a portable format — Article 20;
• stop processing based on legitimate interest — objection, Article 21;
• withdraw a consent at any time, without affecting what was lawful before — Article 7(3).

Write to support@mcaabbigliamento.shop. We do not charge for this and we do not ask why. We may need to confirm who you are before acting on a request, which is protection for you rather than an obstacle.

Every letter carries a one-click unsubscribe link. Unsubscribing does not affect anything to do with an order.

If you think we have handled your data badly, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali: https://www.garanteprivacy.it. You may also complain to the supervisory authority of the EU country where you live or work.

You are welcome to raise it with us first, but you are not required to.

This shop is not intended for, and may not be used by, anyone under 13. We do not knowingly collect data from anyone under 13, and if we learn that we have, we delete it.

Between 13 and 17, a parent or guardian’s email address is required at checkout and their agreement is sought before the order is dispatched.

Cookies and equivalent storage are covered separately, including how to change or withdraw your choice, on the cookie policy page.