This Website collects certain Personal Data from its Users.
Data Controller
Project Spina Sagl, Via Pretorio 13a, 6900 Lugano (Switzerland) (CHE-135.340.483), operating in Europe through its Italian tax representative Project Spina Sagl c/o R.F. G-Project Srl, Piazzale Gerbetto 6, 22100 Como (CO), Italy – VAT IT12954760018, Tax Code 97839650013, SDI: M5UXCR1.
Controller's email address: info@federicamantelli.com
Types of Data collected
Among the Personal Data collected by this Website, independently or through third parties, are: first name, last name, email, phone number, shipping/billing address, postal code, city, province, country, Cookies, payment data (handled directly by payment service providers, not by this Website), Usage Data, User ID.
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific notices displayed prior to the collection of the data.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory: if the User refuses to provide it, it may be impossible for this Website to provide the Service (e.g. completing an order). Where Data is marked as optional, Users are free to withhold it without any consequence to the availability of the Service.
Method and place of processing the collected Data
Method of processing
The Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. Processing is carried out using computers and/or IT-enabled tools. Besides the Controller, Data may be accessible to persons involved with the organisation of this Website (administrative, commercial, legal staff) or external parties (technical service providers, couriers, hosting providers), designated as Data Processors where necessary. An updated list of Processors can be requested from the Controller.
Legal basis of processing
The Controller processes Personal Data relating to the User where one of the following applies: the User has given consent for one or more specific purposes; processing is necessary for the performance of a contract with the User (e.g. fulfilling an order); processing is necessary for compliance with a legal obligation to which the Controller is subject (e.g. invoicing); processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.
Place
Data is processed at the Controller's operating offices and at the premises of the service providers listed in this document, which may also be located outside the European Union (e.g. the United States, for e-commerce hosting and analytics/marketing tools). Such transfers are carried out on the basis of Standard Contractual Clauses approved by the European Commission or other adequate safeguards provided by the supplier. Users may request further information from the Controller regarding the safeguards applied.
Retention period
Personal Data collected for the performance of a contract (e.g. an order) is retained until the contract is fully performed and for the period required by applicable tax and accounting obligations. Data collected on the basis of consent (e.g. newsletter, statistics, advertising) is retained until such consent is withdrawn.
Purposes of processing the collected Data
User Data is collected for the following purposes: management and fulfilment of orders (online sale of goods); payment management; contacting the User for customer support purposes; tax and accounting obligations; where activated with specific consent, sending commercial communications/newsletters, statistics and website traffic analysis, advertising and remarketing.
Detailed information on the processing of Personal Data
Note: the list below reflects the services actually in use as of the last update date of this page; it will be updated as soon as further tools are activated (e.g. an email marketing platform). The absence of a tool from this list means it is not currently used on this Website.
E-commerce platform and hosting
Shopify (Shopify Inc., 151 O'Connor Street, Ottawa, Ontario, Canada) is the platform on which this Website is built and hosted, and on which accounts, product catalogue, orders and checkout are managed. Personal Data collected: identification data, contact data, order data, Usage Data, Cookies. Place of processing: see Shopify's Privacy Policy.
Payment handling
Payments are processed through Shopify Payments, integrated into this Website's checkout. Payment card data is collected directly by Shopify Payments and is not processed or stored by this Website. See Shopify's Privacy Policy. Any additional payment methods activated in the future will be added to this section.
Statistics and advertising (Google Analytics 4, Meta Ads)
Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for transfers outside the EEA, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is a statistical analysis service that allows us to understand how the Website is used (pages visited, products viewed, purchase path). Personal Data collected: Usage Data, Cookies, online identifier. This service is active only with the User's consent, given via the banner on this Website. Place of processing: see Google's Privacy Policy.
Meta Pixel and Meta Conversions API (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) are used to measure the effectiveness of our advertising campaigns on Facebook and Instagram and for remarketing purposes. For this processing, certain Data relating to orders and browsing (e.g. email address and phone number, cryptographically hashed before being sent; pages and products viewed; cart value and content) may be shared with Meta, either directly from the User's browser or from our server. This service is active only with the User's consent, given via the banner on this Website. Place of processing: see Meta's Privacy Policy. To manage your advertising preferences on Meta: Meta Ad Settings.
Sale of goods online
Personal Data collected during the order process (name, shipping/billing address, email, phone) is used to fulfil the order, including payment and delivery, and for related tax obligations.
Shipping
Data necessary for delivery (name, address, phone) is provided to the courier responsible for shipping, solely for the purpose of carrying out the delivery.
Transfer of Data outside the EU
The Controller may transfer Personal Data collected within the EU to third countries (e.g. the United States, Canada) solely in compliance with a specific legal basis (an adequacy decision of the European Commission or Standard Contractual Clauses). Users may request information from the Controller regarding the legal basis applicable to each transfer.
User rights
Users may exercise the following rights regarding their Data: withdraw consent at any time; object to processing; access their Data; verify and request rectification; obtain restriction of processing; obtain erasure or removal of their Data; receive their Data or have it transferred to another controller (portability); lodge a complaint with the competent data protection supervisory authority.
To exercise these rights, Users may contact the Controller at info@federicamantelli.com. Requests are handled free of charge as soon as possible, and in any case within one month.
Additional information about processing
Legal defence: the User's Personal Data may be used by the Controller in legal proceedings or in preparation for defence against abuse in the use of this Website or related Services.
System logs and maintenance: for operational and maintenance purposes, this Website and any third-party services used may collect System Logs, which may include Personal Data such as the User's IP address.
"Do Not Track" requests: this Website does not support "Do Not Track" requests.
Changes to this privacy policy
The Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page. Please check this page regularly, referring to the date of the last update.
Last updated: 10 August 2026.
Definitions and legal references
Personal Data (or Data): any information that directly, indirectly, or in connection with other information, allows for the identification or identifiability of a natural person.
Usage Data: information collected automatically through this Website, including IP addresses, pages visited, time of requests, browser and operating system characteristics.
User: the individual using this Website, corresponding to the Data Subject unless otherwise specified.
Data Controller (or Controller): the natural or legal person which determines the purposes and means of the processing of Personal Data; for this Website, Project Spina Sagl as indicated above.
Cookie: small piece of data stored on the User's device - see Cookie Policy.
This document is based on multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).