Privacy policy

Domori.com’s Privacy Policy


1            Whoprocesses your data

The data controller is:

DomoriS.p.A.

Registeredoffice: Via Pinerolo 72-74, 10060 None (Turin), Italy

Contact email for privacy and e-commerce matters: cs.ecommerce@domori.com

You may use this address for any query or requestconcerning your personal data.

 

2             What data we collect

When you use the domori.com website, we collectvarious categories of data:

 

2.1         Data you provide tous

  • email address (for contact, registration, newsletter and purchases);
  • other data you enter into forms (e.g. chat messages, contact form fields, etc.).

 

2.2         Data collected automatically duringbrowsing

  • website usage data (pages visited, browsing time, clicks, mouse movements, scroll events, touch events, etc.);
  • technical information about the device and browser you use;
  • IP address and system logs (for security and maintenance purposes).

 

2.3         Data collected through cookies and tracking tools

  • technical and functionality cookies (necessary for the operation of the website and the online shop);
  • analytics/statistical cookies (e.g. Google Analytics 4);
  • marketing and profiling cookies (e.g. Meta/Facebook, Google Ads, remarketing).

For further details on cookies, you can see thewebsite's Cookie Policy. 

 

3             Why we process your data(purposes and legal bases)

We process your data only where we have a legal basisunder the GDPR.

 

3.1         Provision of the service andmanagement of purchases

  • to enable you to browse the website and use its features;
  • to manage your account, in case of registration;
  • to enable you to purchase products online and to manage payment and delivery;
  • to provide you with customer support (including via chat).

Legalbasis:

  • performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR).

 

3.2         Contact and commercialcommunications

  • to respond to your enquiries submitted trough the contact form or by email;
  • to send you newsletters and commercial communications, if you subscribe to the mailing list (e.g. via Mailchimp or the Mailchimp widget).

Legalbasis:

  • your consent for newsletters and marketing (Article 6(1)(a) GDPR);
  • performance of pre-contractual/contractual measures in responding to enquiries (Article 6(1)(b) GDPR).

You may withdraw your consent to the newsletter at anytime via the unsubscribe link contained in the emails or by writing to the DataController.

 

3.3         Security, prevention of abuse andlegal defence

  • to protect the website from spam, bots and unlawful use (e.g. via Google reCAPTCHA);
  • to ensure the security and maintenance of the website (system logs, technical checks);
  • to defend the Data Controller's rights in case of disputes or abuse.

Legalbasis:

  • the legitimate interest of the Data Controller (Article 6(1)(f) GDPR) and compliance with legal obligations.

 

3.4         Statisticalanalysis and improvement of the website

  • to analyse the use of the website in aggregated and anonymised form in order to improve its content and features (e.g. Google Analytics 4, Meta Events Manager, heat mapping with Smartlook).

Legalbasis:

  • the legitimate interest of the Data Controller or, where required, your consent given through the cookie banner (Article 6(1)(f) or (a) GDPR).

 

3.5         Advertising, remarketing andprofiling

  • to show you personalised advertisements based on your interests (e.g. via the Meta pixel, Google Ads Remarketing, Facebook Remarketing, Meta Custom Audiences);
  • to measure the effectiveness of advertising campaigns (conversion tracking).

Legalbasis:

  • your express consent given through the cookie banner (Article 6(1)(a) GDPR).
  • You may withdraw or change your consent to marketing cookies at any time using the tools available on the website and your browser settings, or by consulting the Cookie Policy for opt-out instructions.

 

4            Externalservices that use your data

In order to provide the service, we use third-partyplatforms and suppliers, which process your data as processors or, in somecases, as independent controllers.

By wayof example:

  • Hosting and infrastructure: OVHcloud; PrestaShop (e-commerce platform).
  • Tag and tracking management: Google Tag Manager.
  • Analytics and statistics: Google Analytics 4; Meta Events Manager.
  • Marketing and newsletters: Mailchimp; Mailchimp widget; Meta/Facebook; Google Ads.
  • Live chat and session recording: Smartsupp; Smartlook.
  • Payments: PayPal.
  • External content: Font Awesome, Google Fonts, Adobe Fonts, Google Maps, YouTube.

Each supplier states in its own privacy policy whichdata it processes and by what means; we invite you to consult these policiesfor further details.

 

5            Wheredata and non-EU transfers are processed

Data is processed at the Data Controller's premisesand at the premises of the service suppliers indicated above.

In some cases, data may be transferred to countriesoutside the EU (for example, for services such as Google, Meta, Mailchimp,etc.).

In such cases, the transfer takes place in compliancewith the GDPR, on the basis of:

  • adequacy decisions of the European Commission, and/or
  • standard contractual clauses, and/or
  • other appropriate safeguards provided for by law.

You may request further information about thesafeguards applied by writing to the Data Controller.

 

6            Howlong we retain your data

Unlessotherwise indicated:

  • data collected for contractual purposes are retained for as long as necessary to perform the contract and to comply with legal obligations (e.g. tax and accounting obligations);
  • data processed on the basis of legitimate interest is retained until that interest is satisfied or until you object, where such right may be exercised;
  • data processed on the basis of consent (e.g. newsletter, marketing, profiling cookies) is retained until consent is withdrawn.

In any event, the Data Controller may retain data forlonger where required by law or by an order of a competent authority.

At the end of the retention periods, data are deletedor irreversibly anonymised. From that point onwards, it will no longer bepossible to exercise the rights of access, rectification, erasure orportability in respect of such data.

 

7            Yourrights

As a data subject, you have the following rights(within the limits and subject to the conditions provided for by the GDPR):

  • Withdrawal of consent: you may withdraw the consent given at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Access: you may obtain confirmation as to whether or not your data is being processed and receive a copy of it.
  • Rectification: you may request the correction or updating of inaccurate or incomplete data.
  • Erasure: you may request the erasure of your data in the cases provided for by Article 17 GDPR.
  • Restriction: you may request that processing be restricted to certain purposes, in the cases provided for by Article 18 GDPR.
  • Portability: you may receive your data in a structured, commonly used and machine-readable format and request its transfer to another controller, where technically feasible.
  • Objection: you may object to processing based on legitimate interest or on the performance of a task carried out in the public interest, on grounds relating to your particular situation.
  • Objection to direct marketing: you may object at any time, free of charge and without giving reasons, to the processing of your data for direct marketing purposes (including profiling connected with such marketing). In that case, your data will no longer be processed for these purposes.
  • Complaint to the supervisory authority: you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with another competent supervisory authority.

To exercise your rights, you may write to cs.ecommerce@domori.com.

The Data Controller will respond as soon as possible,and in any event within one month, subject to any extensions provided for bythe GDPR.

 

8            Legaldefence and legal obligations

Your data may be used by the Data Controller to defenditself in legal proceedings or in the preparatory stages thereof, in the eventof litigation or disputes relating to the use of the website or the services.

The Data Controller may be required to disclose datato public authorities upon legitimate request.

 

Updates to thisprivacy notice

The Data Controller may amend this privacy notice atany time, for example to bring it into line with new legislation or withchanges to processing activities.

In the event of relevant changes, where technicallyand legally possible, users will be informed via the website or through otheravailable contact channels.

We invite you to consult this page periodically and tocheck the date of last amendment: 9 April 2026.