LEGAL INFORMATION
Last updated: 10 September 2026
1. Data controller
Diego Dri, Via Volturno 17, Udine, Italy — VAT no. 03203030303 — email: info@diegodri.com.
2. Data processed
The website may process identification and contact data, the contents of enquiries, data required for quotations, orders, payments and shipping, as well as technical browsing data, security logs, preferences and cookie consents. Complete payment data is handled by payment providers and is not stored directly by the website.
3. Purposes and legal bases
- responding to enquiries and preparing quotations: pre-contractual measures;
- managing purchases, payments, shipping and assistance: performance of a contract;
- complying with tax, accounting and legal obligations: legal obligation;
- protecting the website, preventing abuse and maintaining security: legitimate interest;
- measuring use of the website through Google Analytics and similar technologies: consent, where required.
4. Provision of data
Data marked as required in forms is necessary to respond or prepare a quotation. Failure to provide it may prevent the enquiry from being handled. Consent to non-essential cookies is optional and may be withdrawn at any time.
5. Recipients and providers
Data may be processed by providers supporting hosting and maintenance (Aruba), website and enquiry management (WordPress, WooCommerce and related components), email, security, payments (PayPal), cookie consent (CookieYes) and, only after consent where required, statistical measurement (Google Analytics). Some providers act as processors; others, including PayPal for its own payment purposes, may act as independent controllers under their respective privacy notices.
6. Transfers outside the EEA
Some providers may process data outside the European Economic Area. In such cases, transfers take place on the basis of an adequacy decision or safeguards provided by the GDPR, such as standard contractual clauses.
7. Retention
Enquiries that do not result in a transaction are retained for the time required to handle them and, as a rule, no longer than 24 months. Contractual, tax and accounting data is retained for the periods required by law, normally 10 years. Technical and security logs are retained for periods proportionate to their purpose. Analytics data is retained according to the service configuration; the effective period will be checked and documented before publication.
8. Data subject rights
You may request access, rectification, erasure, restriction, portability and objection, and may withdraw consent without affecting processing already carried out. Requests should be sent to info@diegodri.com. You may also lodge a complaint with the Italian Data Protection Authority: garanteprivacy.it.
9. Automated decisions
The website does not make decisions based solely on automated processing that produce legal or similarly significant effects.
10. Cookies
For details about cookies, Google Analytics, consent and related preferences, please see the Cookie Policy.