Privacy Policy

Pursuant to Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018
 

1. Data Controller

The Data Controller is DECEM s.r.l.
Registered office: Via Sandro Gallo 157/G – 30126 Venice (VE) – Italy
VAT No. 04862380278
Email: info@xdecem.com
 

2. Purpose of Processing

Personal data voluntarily provided through the website www.xdecem.com (e.g. by filling out the contact form or subscribing to the newsletter) will be processed for the following purposes:

• responding to requests sent via form or email;

• sending service or purchase-related communications;

• sending newsletters, marketing or promotional content (only with explicit consent);

• fulfilling legal and tax obligations;

• managing orders, purchases, and shipments.
   

3. Nature of Data and Processing Methods

• Only common personal data will be processed (name, surname, email, phone, address).

• Data will be processed using manual, electronic, and telematic tools, in compliance with principles of lawfulness, fairness, transparency, and confidentiality.

• No sensitive or judicial data are processed.
   

4. Legal Basis

The processing is based on:

• execution of pre-contractual or contractual obligations (Art. 6(1)(b) GDPR);

• legal obligations (Art. 6(1)(c) GDPR);

• explicit consent (Art. 6(1)(a) GDPR) for newsletters and promotional communications.
   

5. Data Provision

Providing data is optional; however, failure to provide mandatory data may prevent the correct handling of requests or purchases.
 

6. Data Retention

Data will be stored only as long as strictly necessary to achieve the stated purposes and, in any case:

• for contractual and tax purposes: according to legal obligations (10 years for accounting/tax compliance);

• for marketing/newsletters: until consent is withdrawn;

• in general, no longer than the time required to provide the requested service.
   

7. Data Sharing and Transfer

Data may be shared with:

• IT and website management providers;

• shipping and logistics companies (e.g. couriers), appointed as Data Processors under Art. 28 GDPR;

• legal or tax consultants, when required by law.

Data will not be disclosed or transferred outside the EU unless adequate safeguards are in place as required by the GDPR.
 

8. Data Subject Rights

Under Articles 15–22 GDPR, you have the right to:

• access your personal data;

• request rectification or erasure;

• restrict or object to processing;

• receive your data in portable format;

• withdraw consent at any time (without affecting the lawfulness of prior processing);

• lodge a complaint with the Italian Data Protection Authority.

To exercise your rights: contact info@xdecem.com.
 

9. Minors

Processing personal data of children under 16 years is lawful only with authorization from the person holding parental responsibility.
 

10. Security

DECEM s.r.l. adopts adequate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, or disclosure.
 

11. Updates

This Privacy Policy may be updated in case of regulatory changes or modifications in the organization of the Data Controller. Updates will be published on this page.