Last updated: 19 June 2026
1. Data Controller
+
The data controller is Espresso Coffee Shop S.r.l., Via San Benedetto 45/B, 35037 Teolo (PD), Italy — VAT IT04682090289 — email info@espressocoffeeshop.com — PEC espressocoffeeshopsrl@pec.it. Processing complies with Regulation (EU) 2016/679 (GDPR).
2. Data we collect
+
Full name; shipping and billing address; email; phone; payment data (handled by secure providers; ECS does not store full card data); order data; browsing data (IP, device, on-site behaviour). We do not collect special categories of data.
3. Purposes and legal bases
+
We process data for:
- Order management, shipping and support — performance of the contract (art. 6.1.b);
- Tax and accounting obligations — legal obligation (art. 6.1.c);
- Newsletter and promotional communications — consent (art. 6.1.a), revocable at any time;
- Site analytics, remarketing and personalised advertising — consent via cookie banner;
- Fraud prevention and security — legitimate interest (art. 6.1.f).
4. Cookies and tracking technologies
+
We use technical (necessary) cookies and, subject to your consent (opt-in) via the banner: Google Analytics/Ads and Google Ads Remarketing, Facebook (Meta) Pixel and Meta Event Manager, Microsoft Clarity, Google Tag Manager. You can manage or withdraw your preferences at any time via the banner or your browser settings.
5. Recipients and external services
+
Data may be processed by providers acting as processors: PrestaShop (platform), OVHcloud (hosting), Stripe/PayPal/Klarna (payments), Brevo/Mailchimp (email marketing), Google reCAPTCHA, Google Fonts, jsDelivr CDN, WhatsApp widget, carriers for delivery. We do not sell personal data to third parties.
6. Non-EU transfers
+
Any transfers outside the European Economic Area take place with adequate safeguards (e.g. the European Commission's Standard Contractual Clauses).
7. Retention
+
We retain data for as long as necessary for the stated purposes and as required by law (e.g. 10 years for accounting records); marketing data until consent is withdrawn.
8. Your rights
+
You have the right of access, rectification, erasure, restriction, portability, objection and withdrawal of consent (arts. 15–22 GDPR). To exercise them, email info@espressocoffeeshop.com. You also have the right to lodge a complaint with a supervisory authority (in Italy, the Garante per la protezione dei dati personali, www.garanteprivacy.it).
9. Changes
+
This policy may be updated; changes will be posted on this page with a new "Last updated" date.