Privacy Policy

Effective date: [01/10/2024] — Last updated: [17/07/2026]

This Privacy Policy describes how apoggi.com (the "Site" or the "Service"), owned by Armando Poggi S.r.l., collects, uses, stores, and protects the personal data of its users.

By using the Site, you consent to the collection and use of your personal data as described in this Privacy Policy. Please do not access or use the Service if you do not agree to the processing of your data as described herein.

1. Data Controller

Armando Poggi S.r.l.
Registered office: Via Calzaiuoli 103r – 50122 Florence (FI), Italy
Tax Code and VAT Number: 05041660480
REA FI Number – 514037
Certified email (PEC): armandopoggi@pec.leonet.it
Email for privacy requests: web@apoggi.com
Phone: +39 055 211719

2. What Data We Collect, For What Purposes, and On What Legal Basis

The legal bases referred to below are based on Article 6 of Regulation (EU) 2016/679 (GDPR):

• Consent: a free, specific, and informed expression of your will.
• Performance of a contract: necessary for your purchase or for pre-contractual steps taken at your request.
• Legal obligation: necessary to comply with tax, accounting, or regulatory obligations.
• Legitimate interest: the Controller's interest, balanced against your rights.

2.1 Identification and Contact Data

What we collect: first and last name, email address, phone number, shipping and billing address, date of birth (where required).
Purpose: account management, order fulfilment, customer support.
Legal basis: Performance of a contract.
Retention: for the duration of the contractual relationship and in any case no longer than 365 days from the last interaction, unless a longer legal obligation applies.

2.2 Payment and Tax Data

What we collect: billing details, Tax Code, VAT number (for business purchases), SDI code, PEC, transaction history, bank account details (for bank transfers and refunds). Credit/debit card data is processed directly by our payment providers (see Section 5) and is never transmitted to or stored on our servers.
Purpose: secure payment processing, tax and accounting compliance.
Legal basis: Performance of a contract / Legal obligation.
Retention: 10 years, as required under Italian tax law.

2.3 Browsing Data and Online Identifiers

What we collect: IP address, browser type and version, operating system, pages visited, time spent on the Site, cookie identifiers, referrer URL.
Purpose: platform security, performance optimisation, usage statistics, personalised advertising (subject to consent).
Legal basis: Consent (for non-essential cookies and personalised advertising) / Legitimate interest (for system logs necessary for security).
Retention: up to 425 days. For full details on cookies, their specific purposes, and how to manage or withdraw your consent, please see our Cookie Policy.

2.4 Communication Data

What we collect: customer support messages, email correspondence, WhatsApp messages, PEC communications, contact form submissions.
Purpose: providing customer support and handling enquiries.
Legal basis: Performance of a contract.
Retention: 730 days.

2.5 Marketing Data (Optional)

What we collect: email address, preferences and interests, product interaction history, for users who voluntarily subscribe to the newsletter or consent to promotional communications.
Purpose: sending newsletters, offers, and personalised communications.
Legal basis: Consent.
Retention: until consent is withdrawn.

3. How We Obtain Your Data

We collect data directly from you when you: create an account, place an order, fill out a form, subscribe to our newsletter, contact our customer service, or browse the Site (usage data collected automatically).

4. Whether Data Provision Is Mandatory

Providing the data necessary to perform the contract (name, address, email, payment details) is mandatory: without it, we cannot process your purchase, arrange shipping, or provide support. Providing data for marketing or profiling purposes is optional, and declining to do so does not affect your access to the Site's core services.

5. Who We Share Your Data With

Personal data may be disclosed, strictly to the extent necessary, to the following categories of recipients, acting either as independent data controllers or as data processors appointed by Armando Poggi S.r.l.:

• E-commerce platform: Shopify (online store hosting)
• Payment providers and methods: credit/debit cards, PayPal, Klarna, Scalapay, Shop Pay, Apple Pay, Google Pay, bank transfer, cash on delivery (handled via GLS courier)
• Couriers and shipping providers: GLS Italy and other couriers responsible for delivery
• Analytics and advertising tools: tracking tools and advertising pixels integrated through Shopify's native features (e.g. Shopify Customer Events / Pixel Manager), used for statistical analysis and personalised advertising campaigns on platforms such as Google and Meta, activated only with your consent
• Tax, legal, and administrative consultants of the Controller
• Public authorities, where required by law

We do not sell or share personal data with third parties for purposes other than those listed above.

6. International Data Transfers

Some of the providers listed above may be based, or operate servers, in the United States or other countries outside the European Economic Area. In such cases, the transfer is carried out on the basis of Standard Contractual Clauses approved by the European Commission or towards countries recognised as providing an adequate level of protection, ensuring a level of protection equivalent to that guaranteed within the EU. Further information is available upon request from the Controller.

7. Your Rights

Under the GDPR, you have the right to:

• obtain confirmation that data concerning you exists and access it;
• request rectification if it is inaccurate or incomplete;
• request erasure ("right to be forgotten"), within the limits set by law;
• obtain restriction of processing in specific circumstances;
• receive your data in a structured format and transfer it to another controller (data portability);
• object to processing based on legitimate interest, including direct marketing;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, please write to web@apoggi.com. We will respond within one month of your request, or within an additional two months for particularly complex requests, with justification provided.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent Data Protection Authority if you believe that the processing of your personal data violates applicable law. In Italy, complaints can be filed with the Garante per la Protezione dei Dati Personali: www.garanteprivacy.it.

9. Data Security

We implement appropriate technical and organisational security measures to protect personal data from unauthorised access, loss, or improper disclosure. However, no system is completely secure; in the event of a data breach that poses a risk to your rights, we will comply with the notification obligations set out in the GDPR.

10. Cookies

The Site uses technical, analytics, and profiling cookies. For a full list of the cookie categories used, their purposes, duration, and how to manage or withdraw your consent, please see our Cookie Policy.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be published on this page along with the updated date. In case of material changes affecting processing based on consent, we will request your renewed consent where necessary.

12. Contact Us

Armando Poggi S.r.l.
Via Calzaiuoli 103r – 50122 Florence, Italy
Email: web@apoggi.com
Phone: +39 055 211719

privacy policy by CookieScript: last updated 17/07/2026