Privacy Policy

(in accordance with EU Regulation 2016/679, “GDPR”)

 

 

 

This Privacy Policy describes the personal data we collect when you use our website www.theparaggi.com (hereinafter, the “Website”) or interact with our brand Paraggi. It also explains the purposes for which we use your data and the rights you are entitled to as a data subject.

Please note that the processing activities described in this policy refer exclusively to the services available on the Website. The Website may contain links to third-party sites that operate independently and are directly responsible for their own data processing activities. We encourage you to consult the respective privacy and cookie policies of such third parties.

​

Data Controller

The Data Controller, with respect to the personal data collected through the use of the Website and the services offered therein, is:

Al.ma S.r.l.
Registered office: Strada Piccione Selvette, 2 A2 - 06134 - Piccione (PG), Italy.
E-mail: info@theparaggi.com​

​

Why We Use Your Data

We collect and process your personal data for the following purposes:

​​​

​

1. Website Browsing

Data processed: technical data necessary for navigation (e.g., IP address, browser type, operating system).
Legal basis: legitimate interest in enabling the proper functioning and security of the Website.
Retention period: technical data are stored for the time strictly necessary to ensure Website security and functionality.

​

​

2. Online Purchase of Products

Data processed: personal data required to complete a purchase (name, surname, address, e-mail, payment information).
Legal basis: performance of a contract of sale.
Retention period: for the time necessary to execute the contract and fulfill legal obligations (e.g., tax and accounting).

​

​

3. Customer Care

Purpose: we provide customer support via chat, e-mail, online forms, or social media channels.
Data processed: name, e-mail, and any other data required to respond to your request.
Legal basis: performance of pre-contractual or contractual measures; legitimate interest in improving service quality.
Retention period: strictly necessary to handle your request.

​

​

4. Participation in Satisfaction Surveys

Data processed: information provided voluntarily by the Customer.
Legal basis: consent.
Retention period: until withdrawal of consent or for a period not exceeding 12 months.

​

​

5. Direct Marketing

Purpose: sending newsletters and promotional communications about Paraggi products.
Data processed: contact details and preferences.
Legal basis: your consent.
Retention period: until you withdraw consent or request deletion.

​

​

6. Profiling

Purpose: to send personalized commercial communications based on your purchase history, browsing habits, and interaction with our Website and social channels.
Data processed: purchase history, country of origin, gender, age, browsing data, and interaction with Paraggi.
Legal basis: consent.
Retention period:

• Interaction data: 12 months from collection.

• Purchase data: 3 years from the date of purchase.

​

​

7. Fraud Prevention

Data processed: data strictly necessary to verify and prevent fraudulent transactions.
Legal basis: legitimate interest in protecting the Company and its Customers.
Retention period: for the duration necessary to carry out security checks and comply with legal obligations.

​

​

8. Reserved Area Registration

Purpose: creation of a personal account on the Website.
Data processed: registration data provided by the Customer.
Legal basis: performance of pre-contractual and contractual obligations.
Retention period: until account deletion.

​

​

9. Statistical Analysis

Purpose: to analyze browsing and purchasing trends in order to improve products and services.
Data processed: anonymized or aggregated data.
Legal basis: legitimate interest.
Retention period: as strictly necessary for statistical purposes.

​

​

10. Gift Purchases

Purpose: sending products purchased on the Website as gifts to recipients designated by the Customer.
Data processed: personal and contact details of both the purchaser and the recipient.
Legal basis: performance of the sales contract; legitimate interest in ensuring delivery.
Retention period: for the time required to fulfill contractual and legal obligations.

​

​

11. Invoicing

Purpose: issuing invoices for purchases.
Data processed: name, surname, contact details, billing address, tax ID/VAT number.
Legal basis: compliance with legal obligations.
Retention period: as required by applicable tax and accounting laws.

​

​

Cookies

The Website uses cookies in certain areas. Please refer to the Cookie Policy, to be read in conjunction with this Privacy Policy.

​

Data Processing Methods

Personal data are processed by authorized personnel using both electronic and manual tools, adopting appropriate security measures to protect the integrity, confidentiality, and availability of the data.

​

Social Networks

Paraggi may process data shared through interactions on social networks (e.g., Instagram, Facebook). Such data are subject both to this Privacy Policy and to the privacy rules of the respective platforms.

​

Transfer of Data Outside the EU

Where necessary, personal data may be transferred to countries outside the European Union, ensuring compliance with GDPR requirements and adequate safeguards (e.g., adequacy decisions, standard contractual clauses).

​

Rights of the Data Subject

As a data subject, you may exercise the following rights under Articles 15–22 of the GDPR by writing to info@theparaggi.com:

• Right of access: to know whether your data is being processed and to receive a copy.

• Right to rectification: to request correction or integration of inaccurate or incomplete data.

• Right to erasure: to request deletion when data are no longer necessary or lawfully processed.

• Right to restriction of processing: to request restriction under specific conditions.

• Right to data portability: to receive your data in a structured format and transmit it to another controller.

• Right to withdraw consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

• Right to object: to object at any time to processing based on legitimate interest, including profiling.

• Right to lodge a complaint: with the competent Data Protection Authority if you believe processing infringes the GDPR.

We will respond to your requests within 30 days of receipt. In certain cases, we may ask for additional information to verify your identity.

 

Updates to This Policy

We may periodically update this Privacy Policy. We encourage you to review it regularly to stay informed about any changes.

Last update: September 2025