Privacy Policy Slow Living in Umbria 

*1. Data Controller*

The data controller is:

*Charline Oosterlinck – Slow Living in Umbria*

Address: Via Sant'Arcangelo 1B, 06059 Todi (PG), Italy

Email: charoost@me.com

Phone: 0032(0)476409750

*2. Types of Data Collected*

Throughout the various services offered—online sales of flowers, candles, wreaths, delivery services, newsletters—we may collect:

- first name and last name

- shipping/billing address

- email address

- phone number (if provided)

- order information (products, quantity, payment method)

- any preferences expressed (colors, decoration type, delivery notes)

- mandatory billing information (if applicable)

*3. Purpose and legal basis of processing*

Your data is processed for the following purposes:

- execution of the sales contract (e-commerce, product delivery, invoicing) — legal basis: necessary for the fulfillment of a contract. [1] - order management and related communications (e-mail confirmation, shipment tracking, customer service) - tax and accounting obligations under Italian law - (only with your consent) sending newsletters or promotional communications regarding new products, offers, and events — legal basis: free and informed consent.

*4. Data retention*

Personal data relating to an order will be retained for the time necessary to process the order, and subsequently for the period required by Italian tax law (generally 10 years), unless you request deletion in accordance with your rights (see point 6).

*5. Disclosure to third parties / data transfer*

Your data may be disclosed to third parties only if necessary for: 

•⁠ ⁠shipping (couriers) 

•⁠ ⁠payment management (payment institutions) 

•⁠ ⁠tax and accounting compliance

 They will not be sold or transferred for marketing purposes to external third parties. [2] If you send orders outside the EU, you will be promptly informed and, where required, the necessary guarantees will be adopted. 

6. Rights of the interested party

Pursuant to GDPR/2016 (EU) 679/2016, you have the following rights:

- Right of access — you can request what personal data we have about you

- Right of access — you can request what personal data we have about you

- Right to rectification — you can request the modification or updating of inaccurate data

- Right to erasure ("right to be forgotten"), when the need for processing is no longer there

- Right to restriction of processing

- Right to data portability — where applicable

- Right to object to processing for marketing purposes

*7. Data Security*

I take appropriate technical and organizational measures to protect your data from unauthorized access, loss, modification, or unintended disclosure—such as the use of HTTPS connections, database protection, regular backups, and access restricted to authorized personnel.

*8. Cookies and Tracking Tools*

The site uses cookies and/or third-party tools (e.g., for payments, shipping, and analytics). Your consent is required upon first access to these tools, in accordance with applicable law.

*9. Changes to the Privacy Policy*

I reserve the right to update this policy at any time. I will inform you of any relevant changes via the site, or by email if you are an existing customer. I recommend that you periodically review this page. [4]

*10. Contact Us*

For questions, requests for clarification, to exercise your rights, or to make a complaint, please write to charoost@me.com

Dated 1/12/2025