Information notice under Articles 12, 13 and 14 of Regulation (EU) 2016/679 (GDPR)

1. Data controller and contact details

Data controller: KAWAIISSIMA SHOP

Corso Goffredo Mameli 58/A, 25122 Brescia (BS), Italy.

General information, privacy and data protection requests: info@kawaiissima.com

Orders, payments, deliveries, returns, refunds, warranties and after-sales support: support@kawaiissima.com

WhatsApp for written support: +39 324 886 8428.

Privacy rights requests should preferably be sent to info@kawaiissima.com. WhatsApp is intended mainly for written customer support communications.

2. Scope

This notice covers data processed through the websites, online forms, customer area, checkout, email, WhatsApp and technical tools connected to the online shop.

The websites may contain links to external services. Processing carried out by those providers is governed by their own privacy notices.

3. Categories of personal data

Identification and contact data: name, surname, email, phone number, WhatsApp number, delivery and billing addresses.

Account data: protected credentials, saved addresses, preferences, wish lists and order history.

Purchase data: products, quantities, prices, discounts, order number and status, delivery method, returns, refunds and warranties.

Tax data: tax code, VAT number, business name, billing address, SDI recipient code or certified email address where required.

Payment data: selected method, amount, currency, result and transaction identifier. Full card details and the CVV are normally processed directly by the payment provider.

Support data: message content, photographs of products or packaging, receipts and documents strictly necessary to handle the request.

Technical data: IP address, logs, browser, device, operating system, language, visited pages, session, basket and information collected through cookies.

KAWAIISSIMA SHOP does not normally request special categories of personal data. Users should not send health data or other sensitive information unless strictly necessary.

4. How and where data is collected

Data may be provided directly by the user during registration, purchase, completion of a form or a support request.

Some data may be received from payment providers, carriers, logistics operators, technicians, hosting providers or other service providers necessary to deliver the service.

Where a customer provides another person's data, such as a gift recipient's details, the customer confirms that they are authorised to provide it.

5. Purposes and legal bases

Account and order management: performance of a contract or steps requested before entering into a contract.

Payments, deliveries, returns, refunds and warranties: performance of the contract and compliance with legal obligations.

Invoicing, accounting and tax obligations: compliance with legal obligations.

Customer support and replies: performance of the contract, pre-contractual steps or legitimate interests in providing support and documenting communications.

Security, fraud prevention and legal claims: legitimate interests and, where necessary, compliance with legal obligations.

Newsletters and promotions: optional and withdrawable consent. Order-related messages are not marketing.

Non-essential analytics, marketing and profiling cookies: consent expressed through Cookiebot.

Where processing relies on legitimate interests, KAWAIISSIMA SHOP balances its interests against the rights and freedoms of the individuals concerned.

6. Mandatory and optional data

Data required to place and fulfil an order, process payment, deliver products, issue tax documents or handle a return is mandatory. Without it, the requested service may not be available.

Consent to newsletters, marketing and non-essential cookies is optional. Refusal does not prevent use of the essential website functions or online purchases.

7. Customer account

Users may create an account to view orders and save selected information. Login details must be kept confidential.

Users may request account closure by writing to info@kawaiissima.com. Data that must be retained for tax, contractual or legal defence purposes will not be deleted before the applicable retention period expires.

8. Payments

Payments may be handled by external providers shown at checkout, such as Stripe, PayPal or available digital wallets.

KAWAIISSIMA SHOP normally receives only the information needed to verify the transaction result and handle the order, refund or dispute.

Full card numbers, CVV codes, PINs, bank passwords and one-time authentication codes must not be sent by email or WhatsApp.

9. Delivery, returns and support

Data strictly necessary for delivery may be disclosed to the appointed carrier or logistics provider.

To handle returns, damage, incorrect products or warranty claims, KAWAIISSIMA SHOP may request the order number, an explanation and useful photographs. Unnecessary information should be obscured.

After-purchase requests should be sent to support@kawaiissima.com or by WhatsApp to +39 324 886 8428.

10. WhatsApp

When WhatsApp is used, the phone number, profile name, message content, submitted files and communication timestamps may be processed.

WhatsApp also processes data under its own privacy notice. Formal privacy requests should preferably be sent to info@kawaiissima.com.

11. Newsletters, marketing and reviews

Promotional communications are sent only where a valid legal basis exists, normally consent. Consent is not required to make a purchase and may be withdrawn at any time through the unsubscribe link or by writing to info@kawaiissima.com.

Where reviews are enabled, content posted by users may be visible to other visitors. Reviews may be moderated to prevent abuse, unlawful content or fraud.

12. Recipients and processors

Data may be processed by authorised personnel and disclosed, where necessary, to hosting providers, website technicians, the e-commerce platform, security and backup providers, payment providers, banks, carriers, tax or legal advisers, email providers, Cookiebot and other services actually used.

Providers acting on behalf of KAWAIISSIMA SHOP are appointed as processors where required. Some providers, including certain payment services, may act as independent controllers.

Personal data is not sold to third parties.

13. Transfers outside the European Economic Area

Some providers may process data outside the European Economic Area. Such transfers are based on an adequacy decision, Standard Contractual Clauses, the Data Privacy Framework where applicable, or another safeguard permitted by the GDPR.

Further information may be requested from info@kawaiissima.com.

14. Retention periods

Orders, contracts and tax documents: for the duration of the relationship and normally up to 10 years for accounting and tax obligations, unless disputes or longer statutory periods apply.

Accounts: until deletion is requested or the account is closed, subject to mandatory retention obligations.

Support communications: normally up to 24 months after the request is closed, unless warranty, disputes or legal obligations require longer retention.

Marketing: until consent is withdrawn and subject to periodic review; inactive data is reviewed and is not retained longer than necessary.

Security logs: for a period proportionate to system protection and incident management.

Cookies: for the periods stated in the Cookiebot Cookie Declaration.

15. Security

KAWAIISSIMA SHOP applies technical and organisational measures proportionate to the risk, including HTTPS, access controls, updates, backups, restricted privileges and incident procedures.

No system can guarantee absolute security. Personal data breaches are handled in accordance with the GDPR.

16. Children

The website is not specifically directed at children. Purchases must be made by persons with the necessary legal capacity or with the authorisation of a person exercising parental responsibility.

In Italy, for online services based on consent, a child aged 14 or over may provide consent within the limits of the law; below that age, authorisation from a person exercising parental responsibility is required.

17. Data subject rights

Where applicable, individuals may request access, a copy, rectification, completion, erasure, restriction, portability, objection and information about recipients and international transfers.

Consent may be withdrawn at any time without affecting processing carried out before withdrawal. Individuals may object to direct marketing at any time.

Requests must be sent to info@kawaiissima.com. KAWAIISSIMA SHOP responds without undue delay and normally within one month; this period may be extended in complex cases allowed by the GDPR.

Additional information may be requested where necessary to verify the identity of the requester.

18. Complaints and automated decisions

Individuals may lodge a complaint with the Italian Data Protection Authority and retain the right to seek a judicial remedy.

KAWAIISSIMA SHOP does not normally make decisions based solely on automated processing that produce legal or similarly significant effects. Payment or security providers may perform automated anti-fraud checks under their own notices.

19. What cookies are

Cookies are small files or identifiers stored or read on a user's device. This Cookie Policy also covers similar technologies such as pixels, tags, local storage and tracking tools.

The website uses Cookiebot by Usercentrics to display the banner, collect and record choices and generate an up-to-date Cookie Declaration.

20. Cookie categories

Necessary: required for the session, basket, login, checkout, security, language and storage of consent choices. They do not require consent and cannot be disabled in the panel.

Preferences: remember non-essential choices. They remain disabled until consent where they are not strictly technical.

Statistics: measure website use. KAWAIISSIMA SHOP follows a cautious approach and blocks them before consent unless the strict requirements for treating them as technical cookies are met.

Marketing: may measure campaigns, support remarketing or personalise advertising. They are activated only after consent.

Unclassified: tools still being classified. Non-essential unclassified tools must not be used before consent.

21. Cookiebot banner and consent management

On the first visit, the banner allows users to reject, accept all or choose individual categories. Before a choice is made, non-essential categories remain disabled.

Closing the banner with the "X" keeps only necessary cookies and does not mean accepting all cookies.

Consent requires a positive action. Silence, inactivity, continued browsing or scrolling do not constitute consent.

Choices may be changed or withdrawn at any time through the "Cookie preferences"/"Change consent" link or Cookiebot widget available on the website. Refusal and withdrawal must be as easy as acceptance.

The banner may be shown again when purposes, providers or cookies materially change, when the previous choice can no longer be recognised or in other cases permitted by the Italian Authority's guidance.

22. Cookie list and third-party services

The Cookie Declaration generated by Cookiebot is the current cookie list and states each cookie's name, provider, purpose, category, duration and type.

The website may use payment, analytics, social, external content or tag-management tools. Non-essential tools remain blocked until consent. Third parties process data under their own privacy notices.

Users may also delete or block cookies through their browser. Disabling necessary cookies may affect login, basket and checkout functions.

23. Updates and final provisions

This notice may be updated to reflect legal, technical or organisational changes. The latest version is published on the website with its update date.

Acceptance of the terms of sale does not replace marketing or cookie consent. Browsing or purchasing does not amount to consent to optional processing.

The footer should keep the "Privacy Policy", "Cookie Policy" and "Cookie preferences" links easily accessible.