Privacy policy

Privacy notice

What data we process

We may process data such as your name, email address, billing and delivery address, phone number, order information, communications with customer service and technical data about how you use the site.

Full payment card details are handled by the payment service providers and are not stored directly by us.

Why we use the data

We process personal data when necessary to:

manage orders, payments, shipping and returns;
provide customer service;
meet tax, accounting and legal obligations;
prevent misuse and protect the site;
send marketing communications when you have given your consent;
carry out analytics or advertising activities when your consent is requested through the cookie banner.

The legal bases may be the performance of the contract, compliance with legal obligations, legitimate interest or consent, depending on the processing.

Advertising and measurement with Meta

If you accept marketing cookies, we use the advertising tools of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland, to measure and optimise our advertising campaigns on Facebook and Instagram.

We use the Meta Pixel, which runs in the browser, and the Meta Conversions API, through which Shopify also sends certain events to Meta via a server-to-server connection.

These tools are activated for marketing purposes only after your consent. If you do not accept marketing cookies, the Meta Pixel is not activated and the signal for your choice is also applied to events sent through the Conversions API.

What information may be transmitted

Depending on the actions you take on the site, events such as the following may be sent to Meta:

page views;
product views;
searches on the site;
adding products to the cart;
starting checkout;
adding payment information;
purchase.

Events may include information about the product, the value of the transaction and the currency.

When available, data used to improve event matching may also be transmitted, including:

email address;
phone number;
first and last name;
city, postcode and country;
IP address;
browser user agent;
the Meta identifiers _fbp and _fbc;
the click identifier from a Facebook or Instagram ad.

Some identifying data is hashed before transmission where Meta's tools provide for this. Hashing does not necessarily make the data anonymous.

Why we use this data

We use these tools to:

measure the results of advertising campaigns;
link visits and purchases to the ads that were seen or clicked;
improve campaign optimisation;
create and use audiences for advertising purposes.

The legal basis for this processing is your consent under Article 6(1)(a) GDPR.

You can withdraw your consent at any time through the Cookie settings link in the site footer. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Relationship with Meta

For the collection and transmission of data through Meta's tools, LUNEA MILANO and Meta may act as joint controllers within the limits set by applicable law and by the agreements relating to Meta's tools.

For any further processing carried out by Meta for its own purposes, Meta acts as an independent controller.

Meta's joint controller agreement is available here: https://www.facebook.com/legal/controller_addendum

For more information on how Meta processes personal data, see Meta's Privacy Policy: https://www.facebook.com/privacy/policy

Who we share data with

Data may be shared, to the extent necessary, with providers who help us run the online shop, payments, deliveries, customer service, technical infrastructure, analytics and marketing.

These parties process the data according to the role and obligations set by applicable law.

If you have consented to marketing cookies, we also share the data described in the section “Advertising and measurement with Meta” with Meta Platforms Ireland Ltd. for advertising measurement, attribution, campaign optimisation and audience creation.

Transfers outside the EEA

Some technology providers may process data outside the European Economic Area. Where necessary, we use the mechanisms provided by the GDPR for such transfers.

Meta may transfer personal data to, or make it accessible in, the United States. For transfers covered by the EU-U.S. Data Privacy Framework, Meta Platforms, Inc. states that it participates in that framework. In other cases, the transfer mechanisms provided by applicable law are used.

Retention

We keep data only for as long as necessary for the purposes for which it was collected and to meet applicable legal obligations, including tax and accounting obligations.

Your rights

In the cases provided for by the GDPR you can request access, rectification, erasure, restriction of processing, data portability and object to processing. You can also withdraw your consent at any time for processing based on consent.

To exercise your rights, write to assistenza@luneamilano.it.

You also have the right to lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali).

If you sign up for the newsletter, we will use your email address to send you marketing communications. You can withdraw your consent at any time through the link in the emails or by writing to us.