–customers –

according to art. 13 of EU Regulation 2016/679 of the European Parliament and of Council (hereinafter “GDPR”)
In order to make you (“Concerned”) fully aware of the treatment of your data made by Souvenir Stores S.r.l. (“Holder”), – owner of the name and of the brand “SOUVENIR”, We inform you of the following.


Your personal data will be processed for the following purposes:

  1. 1. Promotion by email of the activities and/or products commercialized by the Holder
  2. 2. interact with social networks (Facebook and Instagram) for promotional activities also through the use of cookies (see dedicated section)
  3. 3. receive and manage purchase orders, supply of products and services, process the payments and communicate using the contact details provided by you in relation to orders, products, services and promotional offers
  4. 4. manage the functionality of the site to make it suitable for online commerce, analyze performance, correct errors and improve its use and efficiency
  5. 5. prevent and detect fraud and abuse in order to protect the security of the site
  6. 6. comply with legal obligations in accounting, tax, health and food security, trade and consumption.
Legal basis of the treatment

With reference to the purposes referred to in points 1., 2., 4. and 5., the processing of your personal data finds its legal basis in the legitimate interest of the Data Controller in communicating and promoting their commercial activities, also through direct marketing, and to maintain the site and online platform suitable for e-commerce function as well as in an adequate state of effectiveness and efficiency.
Concerning the purposes referred to in point 3., processing your personal data is based on the legal grounds of preliminary activities to the conclusion of the contract and/or the execution of the contract with you stipulated.
Regarding the purpose referred to in point 6., the processing of personal data is based on the legal grounds in the legal obligations that the Holder must respect to execute the contract.

Categories of personal data

The data that are processed are those collected from you for the purposes indicated above. These are personal data, contact details and other identification data collected while browsing the website (see cookies section). Personal data of particular categories indicated in art. 9 of GDPR (formerly “sensitive data”) are not processed.

Data retention period

The duration of the retention will be that one strictly necessary for the pursuit of the individual purposes described above. The retention won’t last in any case beyond the possible and legitimate opposition to the treatment, except for the treatment of legal obligations.

Data recipients and processors’ controllers (“data processors”)

The data provided will not in any way be disseminated and/or transferred and/or communicated to countries outside the European Union. They may be communicated, within the limits of the purposes indicated above, to companies of the group to which Souvenir Stores srl belongs or to subjects who perform activities on behalf of the Data Controller (“Data Processor”) (for example: couriers, online platform services provider, online payment processing, accountant, credit collection agencies and legal firms).
In order to be able to offer the customer Klarna’s payment methods, we may pass the customer’s personal data to Klarna at checkout in the form of contact details and order details, so that Klarna can assess the customer’s suitability for its payment methods and customize these payment methods. Transferred customer’s personal data are treated according with Klarna’s privacy policy.

Rights of the concerned party

In accordance with articles 15, 16, 17, 18, 20 and 21 of the GDPR, it is the right of the concerned party to be able to contact the Data Controller at any time, in order to access his/her personal data, obtain their rectification, cancellation, limitation of treatment or to oppose to it, in addition to the right to data portability.

Furthermore, in the event of violations, the concerned party has the right to lodge a complaint against the Supervisory Authority of the State in which he habitually lives, works or the place where the alleged violation occurred.

Data controller

The Data Controller is Souvenir Stores S.r.l. in Prato.
The contact details for information concerning the use of the data, the list of Data Processors to whom the data are communicated as part of the processing and, possibly, to exercise the rights indicated above as a Concerned party, are: i) Company’s domicile, for postal address ii) for email contact.