Privacy Policy
Who is responsible for your data
The data controller for this website, music.ercolano.it, is Art Decor Suites S.r.l., with registered office at Via Angelo Cosenza 90, 80062 Meta (NA), Italy — VAT and tax number 10361701211. For any question about your personal data, or to exercise your rights, you can write to us at info@ercolano.it.
We process personal data in accordance with the EU General Data Protection Regulation (Regulation EU 2016/679, "GDPR") and applicable Italian law. This policy explains what we collect, why, and the choices you have.
What data we collect
Depending on how you use the site, we may collect:
Identity and contact details you provide — name, email address, shipping and billing address, telephone number — when you place an order, create an account or contact us.
Order information — the products you buy, order value and history.
Payment information — processed directly by our payment providers; we do not store your full card details on our servers.
Technical and usage data — IP address, browser type, device information and pages visited, collected through cookies and similar technologies.
Any content you send us through the contact form or by email.
Why we use your data and our legal basis
We use your personal data for the following purposes, each with its legal basis under the GDPR:
To process and deliver your orders, manage your account and provide customer support — necessary to perform our contract with you (Art. 6(1)(b)).
To issue invoices and meet accounting, tax and other legal obligations — compliance with a legal obligation (Art. 6(1)(c)).
To protect the site against fraud and abuse, and to keep our service secure and working — our legitimate interest (Art. 6(1)(f)).
To measure and improve how the site performs, and to run our advertising, through analytics and marketing cookies — based on your consent (Art. 6(1)(a)), which you can withdraw at any time.
Payments
Payments are handled by our payment providers, WooPayments (operated by Automattic Inc. on Stripe infrastructure) and PayPal. When you pay, your payment details are transmitted directly to and processed by these providers under their own privacy policies and security standards. We receive only the information needed to confirm and fulfil your order.
Analytics and advertising
We use Google Analytics (through Google Site Kit) to understand how visitors use the site, and Google Ads to measure the results of our advertising and reach potential customers through search and conversion campaigns. We also use Google for WooCommerce to list our products across Google's shopping surfaces. These services may set cookies and process technical data such as your IP address. They run only where analytics and marketing cookies are permitted. We do not use these tools to build advertising profiles for remarketing.
Spam and security (Cloudflare Turnstile)
To protect our forms, checkout and login against automated abuse, we use Cloudflare Turnstile, a privacy-focused bot-protection service. It may process technical information such as your IP address and browser signals to tell humans from bots. It does not track you for advertising and is subject to Cloudflare's privacy terms.
Email communications
Transactional emails — order confirmations, shipping and tracking notifications, account messages — are sent through Brevo (via the FluentSMTP plugin). These emails are necessary to perform our contract with you and are not marketing messages. We do not send promotional newsletters without your consent.
Who we share your data with
We do not sell your personal data. We share it only with trusted providers who process it on our behalf, under appropriate agreements, and only as needed to run our business:
Our hosting provider, which stores the website and its data on secure servers.
Our payment providers (WooPayments and PayPal), to process payments.
Google, for analytics and advertising.
Cloudflare for bot protection on our forms and checkout (Turnstile).
Brevo, to deliver transactional emails.
Shipping couriers, to deliver your order and provide tracking.
Our backup service, to keep secure copies of the site.
We may also disclose data where required by law or to protect our legal rights.
International data transfers
Some of our providers (in particular Google, PayPal, Cloudflare and Automattic) are based outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, it is protected by appropriate safeguards recognised under the GDPR — such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
How long we keep your data
We keep your personal data only as long as necessary for the purposes described here. Order and invoicing data is retained for the period required by Italian tax and accounting law (generally 10 years). Account data is kept until you delete your account or ask us to remove it. Analytics and marketing data is retained according to the settings of the relevant service.
Your rights
Under the GDPR you have the right to access your data; to have it corrected or erased; to restrict or object to its processing; to data portability; and to withdraw any consent you have given, at any time, without affecting processing already carried out. To exercise any of these rights, write to us at info@ercolano.it. We will respond within the time limits set by law.
If you believe your data is not being handled correctly, you also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or the supervisory authority of your country of residence.
Cookies
This site uses cookies and similar technologies. For details of which cookies we use and how to manage your preferences, please see our Cookie Policy.
Data security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including secure hosting, encrypted connections and regular backups. No system can be guaranteed completely secure, but we work to keep your data safe.
Changes to this policy
We may update this Privacy Policy from time to time. The current version is always the one published on this page, with its date shown below.
How to contact us
Art Decor Suites S.r.l. — Via Angelo Cosenza 90, 80062 Meta (NA), Italy. Email: info@ercolano.it · PEC: gierc@pec.artdecorsuites.com · VAT 10361701211.
Last updated: 17 July 2026
