TRATTAMENTO DEI DATI - Euthalia Fragrances

PRIVACY NOTICE

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 — GDPR

Last updated: 26 August 2026

Data Controller

The Data Controller is:

Euthalia Fragrances S.r.l.
Registered office: Via T. Reggio 10/A, 16123 Genoa (GE), Italy
VAT No. and Tax Code: 02518710997
E-mail: info@euthaliafragrances.com

Scope of this Privacy Notice

This Privacy Notice describes the processing of personal data carried out by Euthalia Fragrances S.r.l. through:

the website www.euthaliafragrances.com;
the online store;
purchases made through the e-commerce platform;
requests sent through contact forms, e-mail or other communication channels;
post-purchase review requests;
any subscription to the newsletter;
promotional and customer relationship activities, including those carried out at the showroom.

This Privacy Notice replaces any previous privacy notices published on the website to the extent that they are inconsistent with the processing activities actually carried out by Euthalia.

Personal data processed

Depending on the circumstances, Euthalia may process the following categories of personal data:

identification data: first name, surname;
contact details: e-mail address, telephone number, any WhatsApp contact number;
billing and shipping data: address, city, country, tax identification number or VAT number, where required;
order data: products purchased, amounts, order date, order status, delivery method;
payment-related data, to the extent necessary to manage the transaction;
data contained in messages sent through contact forms, e-mail or other channels;
data relating to newsletter subscription and communication preferences;
data relating to post-purchase review requests;
technical browsing data, such as IP address, technical identifiers, browser and device information, technical logs;
data collected through cookies or similar technologies, as described in the cookie banner and cookie policy.

For the ordinary purposes of the website and e-commerce activities, Euthalia does not request or process special categories of personal data pursuant to Article 9 GDPR.

Data not collected directly from the data subject

Some data included in newsletter lists or promotional databases may originate from previous collections, imports or commercial activities.

Euthalia is verifying the origin of such data, the legal basis for the relevant processing and the documentation of consent, where required.

In the absence of a valid legal basis, such data will not be used for new commercial communications.

Purposes and legal bases of processing

5.1 Website browsing and technical security

Technical data required for browsing the website are processed to enable the website to function, ensure website security, and prevent abuse, unauthorised access or harmful activities.

Legal basis: the legitimate interest of the Controller in ensuring the security and proper functioning of the website, as well as the technical need to provide the service requested by the user.

5.2 Online purchases and order management

The data provided during the purchase process are processed to:

receive and manage the order;
confirm the purchase;
arrange shipment;
provide assistance regarding the product or order;
manage any returns, complaints or after-sales requests;
comply with tax, accounting and administrative obligations.

Legal basis: performance of a contract or pre-contractual measures requested by the data subject; compliance with legal obligations.

5.3 Payments

Online card payments are managed through Stripe, via a dedicated WooCommerce integration.

Euthalia does not store full payment card details. The data necessary to manage the transaction are processed by the payment service provider in accordance with its own contractual terms and privacy notices.

Legal basis: performance of the purchase contract; compliance with legal obligations; legitimate interest in fraud prevention and transaction security.

5.4 Shipping and delivery

The data necessary for delivery are communicated to couriers, logistics operators or other parties entrusted with shipment.

Legal basis: performance of the purchase contract.

5.5 Contact requests and customer assistance

Data sent through contact forms, e-mail or other communication channels are processed exclusively to reply to the data subject’s request, provide information, assistance or support.

Messages sent through the website forms are forwarded to the addresses used by Euthalia to manage requests and may be processed through the website’s technical e-mail system.

Euthalia is updating the configuration of its contact forms in order to standardise texts, recipients, privacy information and request management procedures.

Data submitted for contact requests are not used for marketing purposes, unless the data subject gives separate and specific consent.

Legal basis: performance of pre-contractual or contractual measures requested by the data subject; Euthalia’s legitimate interest in managing communications received.

5.6 Newsletter and commercial communications by e-mail

Euthalia may send newsletters, news, invitations, information about products, events, initiatives and commercial communications to users who have given their consent.

Only in the cases permitted by Article 130, paragraph 4, of Italian Legislative Decree No. 196/2003, Euthalia may use the e-mail address provided by the customer in the context of a purchase to send communications relating to its own products or services similar to those purchased, without prejudice to the data subject’s right to object at any time.

Euthalia will use for new commercial communications only contacts for which it has a valid legal basis and documented consent, where required.

Existing newsletter lists are being verified and updated. Euthalia will not send new commercial communications to existing lists until the validity of the relevant legal basis and the proper functioning of the unsubscribe procedures have been verified.

The data subject may withdraw consent or object to receiving further communications at any time through the unsubscribe link included in each commercial communication, or by writing to info@euthaliafragrances.com.

Legal basis: consent of the data subject; only in the cases permitted by applicable law, Article 130, paragraph 4, of Italian Legislative Decree No. 196/2003.

5.7 Commercial communications via WhatsApp or other contact details provided at the showroom

When a customer voluntarily provides a contact detail at the Euthalia showroom and authorises the use of the chosen channel, Euthalia may use that contact detail to send news, previews, invitations, information about products, events and commercial communications.

Consent is optional, does not affect the purchase and may be withdrawn at any time, including separately for each communication channel.

Legal basis: consent of the data subject.

5.8 Post-purchase review requests

If the customer gives the relevant consent during checkout, Euthalia may use the e-mail address and order data to send a request to review the products purchased.

The request is sent through the website’s e-mail system, usually 10 days after completion of the order, and concerns the products purchased.

The customer may withdraw consent or object to receiving further requests through the link included in the e-mail or by contacting Euthalia.

Euthalia may keep a technical exclusion list solely in order to comply with withdrawals or objections and prevent further unwanted messages.

Legal basis: consent of the data subject.

5.9 Legal obligations, accounting and protection of rights

Euthalia processes data necessary to comply with tax, accounting, administrative and security obligations, and to establish, exercise or defend a right in judicial or extrajudicial proceedings.

Legal basis: compliance with legal obligations; legitimate interest in protecting the rights of the Controller.

Cookies and tracking technologies

The website uses technical cookies necessary for its operation and may use, subject to consent where required, cookies or similar technologies for statistical, functional, measurement or marketing purposes.

Consent is managed through the cookie banner.

Euthalia is updating its cookie policy and, with the technical support of the appointed web agency, is verifying the actual list of cookies, tags and tracking technologies used on the website.

The verification concerns, in particular, any tools connected to:

Google Tag Manager;
Google Analytics;
Google Ads;
Meta/Facebook/Instagram;
Pinterest;
maps;
social feeds;
similar services or other third-party scripts.

Non-technical cookies and tools are managed through the cookie banner and must be activated only according to the preferences expressed by the user. Euthalia is verifying the correct classification and prior blocking of non-technical tools.

The cookie policy will be updated once the technical verification has been completed.

Recipients of personal data

Personal data may be processed by Euthalia’s authorised personnel and by technical or professional service providers, within the limits necessary for their respective activities.

In particular, data may be communicated or made accessible to:

hosting, maintenance and website management providers;
web agency or parties entrusted with technical maintenance;
e-commerce platform and related plugins;
payment service providers, including Stripe;
couriers and logistics operators;
administrative, tax, accounting and legal advisers;
e-mail, SMTP, newsletter or messaging service providers;
security, backup, logging and website protection providers;
cookie, analytics, advertising or tag management providers, where actually active and according to the preferences expressed by the user.

Providers processing data on behalf of Euthalia are appointed, where necessary, as processors pursuant to Article 28 GDPR.

Data are not sold to third parties.

Customer data are not communicated to distributors or retailers for their own independent commercial purposes, unless specifically requested or consented to by the data subject.

Transfers outside the European Economic Area

Euthalia does not intend to transfer personal data directly outside the European Economic Area.

However, some technology service providers used for the operation of the website, payments, communications, security, analytics or marketing tools may involve processing, storage or access from countries outside the European Economic Area.

In such cases, the transfer takes place in compliance with Articles 44 et seq. GDPR, on the basis of an adequacy decision, Standard Contractual Clauses or other safeguards provided for by applicable law.

Euthalia is completing the technical verification of the providers actually used in order to update this section in greater detail.

Retention periods

Personal data are retained for the time necessary to achieve the purposes for which they were collected and, subsequently, for the periods required by law or necessary to protect the rights of the Controller.

In particular:

data relating to orders, invoicing and accounting obligations are retained for the period required by applicable tax and civil law;
data relating to contact requests are retained for the time necessary to manage the request and for any need to protect the Controller’s rights;
data used for newsletters, marketing and commercial communications are retained until consent is withdrawn and, in the absence of withdrawal, for no longer than 36 months from the last significant and voluntary interaction of the data subject with Euthalia;
any new significant interaction, such as a purchase, a contact request, participation in an event, an update of contact details or a voluntary reply, may restart that period;
technical logs relating to transactional and operational e-mails are generally retained for a maximum of 30 days, unless further retention is necessary in the event of technical anomalies or disputes;
technical backups of the website and database are retained for security, recovery and business continuity purposes, with access limited to authorised persons and for the technical period necessary according to the retention settings adopted;
technical exclusion or unsubscribe lists may be retained for the time necessary to document the withdrawal or objection and prevent further unwanted contacts.

Upon expiry of the relevant retention periods, data are deleted or anonymised, unless further retention is permitted or required by law.

Withdrawal of consent and objection

Where processing is based on consent, the data subject may withdraw consent at any time.

Where processing concerns commercial communications sent pursuant to Article 130, paragraph 4, of Italian Legislative Decree No. 196/2003, the data subject may object at any time to receiving further communications.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Withdrawal or objection may be exercised:

through the unsubscribe link included in commercial e-mail communications;
by replying STOP or using any other method indicated in WhatsApp messages;
by writing to info@euthaliafragrances.com.

Rights of the data subject

In the cases provided for by the GDPR, the data subject may exercise the following rights:

right of access to personal data;
right to rectification;
right to erasure;
right to restriction of processing;
right to object;
right to data portability;
right to withdraw consent;
right to lodge a complaint with the Italian Data Protection Authority.

Requests may be sent to:

info@euthaliafragrances.com

Profiling and automated decision-making

Euthalia does not use personal data collected through the website, e-commerce platform, newsletter or showroom for automated decision-making processes producing legal effects or similarly significantly affecting the data subject.

At present, Euthalia does not carry out behavioural profiling through algorithms designed to automatically determine tastes, preferences, discounts, invitations or personalised communications.

Any future profiling activities or automated processing will be preceded by an updated privacy notice and, where required, by specific consent.

Minors’ data

The website and Euthalia’s services are not specifically intended for minors.

If Euthalia becomes aware that it is processing minors’ data without valid authorisation, it will take the appropriate measures required by applicable law.

Updates to this Privacy Notice

This Privacy Notice may be updated due to regulatory, organisational or technical changes.

Euthalia is completing a technical review of the providers, plugins, cookies, newsletter systems, tracking tags and integrations actually active on the website.

This Privacy Notice may therefore be supplemented or updated once that review has been completed.

Last updated: 26 August 2026.