Privacy

Privacy notice pursuant to Article 13 of the European Regulation (EU) 2016/679 (GDPR). We would like to inform you that the European Regulation protects individuals with regard to the processing of personal data. This processing will be based on the principles of fairness, lawfulness, transparency, and protection of your privacy and your rights.

1. Data Controller

The Data Controller is Nuova Corti Shop S.r.l., with registered office at Via Palestro 19, 41049 Sassuolo (MO), Italy, VAT no. IT03083040364, represented by its legal representative. The Data Controller can be contacted by e-mail at amministrazione@nuovacorti.it, by registered letter with return receipt, or at the Company's registered office.

2. Types of Data Processed

The data processed are identifying data, such as first name, last name, date and place of birth, residence, e-mail address, and telephone number.

3. Purposes of Processing

Your personal data, provided at the time of purchase, will be processed solely for the purpose of:

• receiving the requested information and obtaining a quote for the product of interest;
• establishing the contractual relationship governing the purchase of the product (bicycle and accessories) and carrying it out;
• managing tax and accounting data as required by laws, contracts, and regulations;
• sending administrative information by e-mail and communicating changes to the terms, contractual conditions, and this Notice;
• carrying out direct marketing activities, subject to your specific consent, to inform you about purchase opportunities and promotions from our shop;
• complying with legal obligations and orders from administrative or judicial authorities;
• pursuing a legitimate interest of the Company, protecting our operations, our rights, and our security.

4. Legal Basis for Processing

The legal basis justifying the processing is the contract with Nuova Corti Shop S.r.l. (which is finalized at the time of purchase) and your explicit consent for the points that require it (e.g. marketing).

5. Methods of Processing

Personal data may be processed both on paper and electronically, in ways strictly necessary to fulfil the purposes stated above. Processing may also be carried out by third parties who provide specific processing, administrative, or support services. All operations are carried out in a way that ensures the integrity, confidentiality, and availability of the data.

6. Consequences of Not Providing Data

With regard to data necessary for performing the contract or fulfilling a regulatory obligation (for example, keeping accounting and tax records), failure to provide such data will prevent the contractual relationship from being established.

7. Data Retention

Data are kept only for the period necessary based on management needs and applicable regulatory obligations. In general, data are retained in line with Article 2220 of the Italian Civil Code (ten years from the last entry) and with European and tax regulations, and are subsequently deleted.

8. Data Security

All your personal data are stored on secure servers (or in paper copies kept in a locked room at the registered office, accessible only with prior authorization). Card payment data are handled exclusively by payment providers (Stripe, PayPal): the Company never sees or stores card numbers in any case, which travel over an encrypted connection to the banking provider.

9. Disclosure of Data

Your identifying data may be disclosed to: Public Administrations for the performance of institutional functions; professional firms (e.g. accountants) for accounting, administrative, tax, and legal assistance (if an invoice is requested); supervisory bodies and judicial authorities in the cases provided for by law; banks for the management of collections and payments; and entities that process data in fulfilment of legal obligations. The list of data processors can be viewed upon request by the data subject.

10. Profiling and Dissemination

Your personal data are not subject to dissemination or to any fully automated decision-making process, including profiling, and are processed solely in Italy. Where necessary, any transfer outside the EU will take place in compliance with applicable legal provisions, following the signing of the standard contractual clauses provided by the European Commission.

11. Rights of the Data Subject

The rights recognized by the GDPR include: the right to request access to your data; the rectification of inaccurate data or the completion of incomplete data; the erasure of data (Article 17 GDPR); the restriction of processing (Article 18 GDPR); the portability of data; the right to object to processing; and the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before the withdrawal).

You may exercise your rights by sending a written communication to the Data Controller, Nuova Corti Shop S.r.l., by e-mail to amministrazione@nuovacorti.it, by registered letter with return receipt, or at the Company's registered office.

You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garante@gpdp.it) if you believe your data are being processed in violation of Regulation (EU) 2016/679.

Cookies

The website uses technical cookies necessary for its operation and, subject to consent, analytics and marketing cookies. Preferences can be managed through the cookie banner and may be changed at any time. No non-essential cookies are installed before consent is given.

Anti-spam Protection (Google reCAPTCHA)

To protect the website's forms (login, registration, password recovery, newsletter, job applications, and orders) from abuse and automated submissions, we use the reCAPTCHA service provided by Google Ireland Limited. The service is loaded only when you submit a form and collects technical data (for example, IP address, browser information, and interaction with the page) to distinguish people from automated programs. Legal basis: the Data Controller's legitimate interest in website security (Article 6(1)(f) GDPR). Google's Privacy Policy and Terms of Service apply.