Privacy policy

INFORMATION PURSUANT TO ART. 13 OF THE EUROPEAN UNION REGULATION 2016/679 ON THE PROTECTION OF PERSONAL DATA

- INTERNET SITE PURCHASES https://thenapking.com -

Bellavia S.R.L. Via Pietro Nenni, 27 90146 Palermo Rev 01/26 of 06/29/2026 Attachment 3.6_thenapking

Dear Customer, in relation to the personal data provided by you, we inform you of the following:

Data Controller The Data Controller is BELLAVIA S.R.L. – VIA PIETRO NENNI, 27 – 90146 PALERMO, E-mail info@thenapking.com

Navigation Data The computer systems and software procedures used to operate the site acquire, during their normal operation, personal data whose transmission is implicit in the use of Internet communication protocols, such as IP addresses, domain names of the devices used, URI addresses of the requested resources, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response, and other parameters relating to the operating system and the user's IT environment. Such data are processed to ensure the correct functioning of the site, the security of networks and information, and to obtain aggregate statistical information on the use of the site. The legal basis of the processing is the legitimate interest of the Data Controller in the security and correct technical management of the site (Art. 6, par. 1, let. f GDPR). The provision of data is necessary for navigation. Navigation data are not used to identify the user but could, by their very nature, allow such identification through processing and association with data held by third parties. The data are kept for a limited period proportionate to the purposes indicated above, except for any need to ascertain crimes by the Judicial Authority.

Purposes of Processing Your identifying personal data, such as name, surname, telephone number, and postal address, may be processed for the following purposes:

  • 1. to access the e-commerce services of our site, for the related contractual, administrative and accounting purposes, and for the related deliveries. The data may also be processed to allow the user's registration in the reserved area, the management of the personal account, and the consultation of the order history. The legal basis is the existence of contractual relationships; the provision of data for these purposes is optional, but any refusal could result in the partial or total impossibility of fulfilling your purchases. The data collected for contractual, administrative and accounting purposes may be kept for 10 years, while the data processed for deliveries may be kept for the duration of the delivery service provision and for any purposes required by law.

  • 2. To request information by sending common personal data via the contact forms on the site (such as name, surname, e-mail address, telephone number, and other data eventually indicated in the message). The legal basis of the processing is the execution of pre-contractual measures adopted at the request of the interested party (Art. 6, par. 1, let. b GDPR). The provision of data is optional, but failure to provide them makes it impossible to respond to the request. The data will be kept for the time strictly necessary to manage the request and, subsequently, for any period necessary for the protection of the Data Controller's rights.

  • 3. For sending our commercial offers, subject to your consent. Consent is optional, but in case of refusal, you will not be able to receive our commercial offers. The data collected for this purpose will be processed until consent is revoked.

Chat Service Furthermore, the site provides users with a chat service that allows them to directly contact the Company to request information, receive assistance, or obtain support in relation to the services offered. The use of the chat involves the processing of personal data that the user voluntarily decides to enter during the conversation, such as, for example, name, e-mail address, telephone number, and any other information contained in the messages sent. In addition, the system could record some technical data relating to the usage session, such as the IP address, the date and time of access, and information on the browser used. The data are processed exclusively to manage the user's request, provide the requested support, and, where necessary, contact them back to follow up on the conversation. The processing is based on the execution of pre-contractual measures adopted at the request of the interested party or, depending on the content of the request, on the legitimate interest of the Data Controller in ensuring an effective assistance service. The provision of data is optional; however, failure to provide the necessary information could prevent the Company from providing the requested service or responding to the requests made. The information collected through the chat will be kept for the time strictly necessary to manage the request and, subsequently, for the period necessary to protect the rights of the Data Controller or to comply with applicable legal obligations.

Data Recipients and Transfers Abroad Your Data will be processed for the above purposes by employees and/or collaborators of the Data Controller in their capacity as persons authorized to process data and/or internal processing contacts and/or system administrators; by third parties (for example, suppliers, professionals, couriers, etc.) where they carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors. Some suppliers used by the Data Controller (such as, by way of example, Shopify and payment service providers) could also process data outside the European Economic Area. In such cases, the transfer will take place exclusively in compliance with Articles 44 and following of the GDPR, through adequacy decisions or other guarantees provided for by the legislation. The Data Controller may communicate your Data to public bodies to comply with obligations under laws, regulations, or EU legislation, or imposed by the Authorities, who will process them in their capacity as independent data controllers. Furthermore, your data will be communicated to third parties (for example, Shopify, Apple Pay, PayPal, G Pay) who act as independent data controllers for payment management.

Data Subject's Rights At any time you may exercise your rights towards the Data Controller, pursuant to Articles 15-22 of EU Regulation 2016/679, and in particular the rights of access, rectification, and integration, as well as obtaining the cancellation, limitation, or opposition to the processing of data for legitimate reasons, by sending a registered letter with return receipt to the address of the Data Controller indicated above or by sending an email to the address info@thenapking.com