Privacy and Legal Area

In compliance with articles 13 (for data collected from the interested party) and 14 (for data not collected from the interested party) of Regulation (EU) 2016/679 (GDPR) the Users of this Website are given the following information, which refers exclusively to the processing carried out through said Website itself and not through other possible websites accessed through links present on this site, for which we suggest viewing the relative information provided by the respective Owners.

Data controller

Piazza Affari s.n.c. di Lunardi Nicola & C.
Piazza Affari s.n.c. by Lunardi Nicola & C., Tax code. and VAT number 02192410237, with registered office at 37047 San Bonifacio (VR), Via Camporsolo n. 11A, email, Certified email:

The Data Controller reserves the right to appoint a web agency as the person responsible for the processing of personal data on this Site, and the aforementioned data will be handled for the purposes of technical assistance, maintenance, technical management and the like. Contact details for this agency may be communicated to the User following a formal request to the addresses indicated above.

The Data Controller and the Data Processor also process the Users' data thanks to their own in-house representatives, specially designated and provided with instructions for the correct processing of personal data, both digitally and orally.

Type of data processed and collection sources

  • Browsing data

  • Cookies, we invite you to read our information about them here

  • Data provided voluntarily by the user, including: common data (identification data, personal data, billing information and the like)

  • Sources: browsing, other sites, cookies and the like; user; public sources

In the first place we will be able to process browsing data, as well as cookies, and therefore invite you to read our information about this here.

We may also process data provided voluntarily by the user, for example through the contact form or by sending a communication via e-mail, including common personal data (identifiers, personal details, billing and similar) to the extent that this is necessary according to the request received.

The data could come from automatic sources or from voluntary sources, as well as from public sources. For example, it could come from the user's browsing history, which could bring with it information related to previous consultations of other sites, including in particular cookies and other similar technologies. The data could also be given voluntarily by the user or by other people connected to them. Other data could come from public sources, such as those dealt with in the field of research or coming from company surveys, research on public databases and the like.

Purpose of processing the data

  • Providing Users with the web services offered by the Site

  • Fulfilment of a pre-contractual and / or contractual obligation

  • Processing User requests

  • Cookie management

The personal data of the Users of this Website, as described above, will be processed in the manner and in the forms prescribed by the GDPR, in order to allow for the functions of this Website, with particular - but not exclusive - reference to the procedures described therein; collection of data, contact forms, any registration / access procedure to the reserved area, subscription to the newsletter (please refer to the specific privacy information), purchase procedure and relative shopping cart and the like.

In particular, the personal data provided to the Data Controller will be processed for the following purposes:

  • to respond to the specific requests made to the Owner through the Website and its communication tools (contact form, information request forms and the like);

  • for the possible subscription to the newsletter and the subsequent sending of various sales and information emails concerning the field in which the Owner operates, with appropriate consent given by the user by ticking the relevant box;

  • for the only purpose of subscribing to the newsletter, please refer to the specific privacy statement published there;

  • for other purposes ancillary to or related to those indicated above and in any case within the scope of the activities of the Website;

  • for the processing of the e-mail address provided by the interested party in the context of the sale of a product or service, also to be used, without further consent to send any emails about further direct sale of products or services similar to those subject of the sale itself; the interested party can in any case express his / her refusal and oppose such data processing, both initially and at a later stage, easily and free of charge, by following the instructions given in each subsequent communication.

The processing of the data provided in a generic way, as well as during automatic collection whilst browsing, will be carried out for the sole purpose of ascertaining and controlling access to the Website. This also applies to technical cookies, by which we mean session cookies, functional or analytical cookies which possess the requirements specified by the Guarantor.

In all cases, for these analytical cookies and in compliance with the Guarantor's clarifications, the Website has provided for the anonymisation of IP addresses and the collection and use of the aforementioned browsing data (without prejudice to the anonymisation of IP addresses ) so as to allow monitoring of the progress of the Website and improve the service offered, giving the User a better browsing experience. Please refer to the specific cookie policy for more information.

Legal basis for the processing of data

  • Consent

  • Fulfilment of a contractual obligation or social contact

  • Information

  • Soft spam

  • Legitimate interest

  • Direct marketing

The processing of personal data is based on the right to information, on the fulfilment of contractual obligations or social contact, or where necessary by giving free and conscious consent by filling in the appropriate information fields in the dedicated form.

Legitimate interest of the owner

  • Exercising the rights of the IT company

  • Provision of the service by the Owner

  • Direct marketing

The processing of personal data is also based on the legitimate interest of the Data Controller, such as the exercise of its rights in the context of the IT company, the provision of the contractual service and the implementation of direct marketing operations.

Mandatory provision

  • Some data is mandatory, other items are optional, depending on the purpose of the data processing which will be specifically indicated on each occasion.

The provision of data relating to Users’ browsing history, for the purposes mentioned above, depends on the degree of privacy that the User has enabled or disabled through his/her browser. In some cases, disabling may affect browsing on this website. For certain modules of this website, the provision of browsing data and / or the use of technical cookies is mandatory to allow for the proper functioning of the website.

The provision of some personal data is in any case necessary for the structure of the Website and its procedures. By way of example:

  • to send messages via the contact form or to subscribe to the newsletter, the minimum data required, such as USERNAME and / or the name / surname and / or e-mail address and / or other data identifying the sender;

  • for registration and access to the special reserved area of ​​the Website, USERNAME and PASSWORD are mandatory in any case.

Any possible request for other optional data will be preceded by requiring a tick in a special box indicating approval.

The provision of all other data is optional, in accordance with the type of information that the User wishes to give to the Website.

Consequences of non-provision of data

  • Failure to receive commercial information.

Failure to provide personal data prevents the Data Controller from sending updates on its sales and promotions.

Possible recipients of personal details

  • Communication: YES

  • Recipients: partner companies and consultants to the Owner

  • Intra EU transfer: YES

  • Transfer outside the EU: YES (under the Privacy Shield regime)

The data may be communicated to connected companies, connected or controlled by the Data Controller, as well as to consultants, or even to third parties that operate, also in the name and on behalf of the Data Controller, to provide the services connected to the purposes indicated in this information, both within the EU and outside the EU (in the latter case, they will be exclusively those adhering to the Privacy Shield protocol).

Browsing data and the like (please refer to the above), as well as profiling cookies including those from third parties (please refer to the Cookie Information on this Web Site), will be communicated to the respective third parties concerned, where these do not manage the data directly as Data Controllers.

Period of retention of data

  • Until request is made to be cancelled

The data provided by the interested party will be stored until the a request for cancellation is expressed by the interested party, which will include taking action through their browser, removal of cookies, a formal or otherwise expressed, request for cancellation.

The browsing data will be kept for the time technically necessary to fulfil any of the functions for which they were collected.

Rights of the interested party

Rights (articles 15 - 22 GDPR):

  • access

  • correction

  • cancellation

  • limitation

  • portability

Forms and terms of operation: art. 12 GDPR

Via e-mail:
Each interested party has the right of access, correction, cancellation (oblivion), limitation, receipt of notification in the event of correction, cancellation or limitation, and portability, as well as opposition and not being subject to an automated individual decision, including profiling, pursuant to articles from 15 to 22 of the GDPR.

These rights can be exercised in the forms and terms of art. 12 GDPR, by written communication sent to the Owner via e-mail to the following address

The Owner will give an adequate reply as soon as possible and, in any event, within 1 month from receipt of the request.

Right to revoke consent

  • by e-mail

  • at one of our stores

You can revoke this consent at any time by:

  • sending an email to the Owner at;

  • express communication at a point of sale belonging to the Owner.


  • YES (consent)

The personal data provided with this form will be subject to profiling.

Profiling allows the Data Controller to evaluate certain personal aspects of the Interested party related in particular to their preferences, their interests, their tastes with reference to the products sold and the activities carried out by the Owner, in order to allow the Owner to offer the Interested Party a more specific sales service aimed at his requirements.