Privacy policy

Data Controller
Petit Sujet di G.H., Via Marcello II, 22 – 00165 Rome (Italy).
Email: gamzehakverdi@petitsujet.com

Personal Data We Collect
When you visit or make a purchase on our Website, we collect personal data necessary to process your order and deliver your books. This includes:

  • Technical Data: IP address, browser type, and language preference (managed via TranslatePress for proper site display).
  • Identity and Contact Data: Name, surname, billing address, shipping address, email address, and phone number.
  • Order and Transaction Data: Details about the books purchased, order date, total amount, and payment status.

Purpose and Legal Basis for Data Processing
We process your personal data on the following legal bases under Article 6 of the GDPR:

  • Performance of a contract (Art. 6(1)(b)): to process purchases, ship books, manage customer support, and maintain secure shopping cart operations.
  • Compliance with legal obligations (Art. 6(1)(c)): to issue invoices, comply with tax and accounting laws (including Art. 74 DPR 633/72), and retain transaction records as required.
  • Legitimate interests (Art. 6(1)(f)): to ensure website security, prevent fraud, and display content in your preferred language for proper site functionality.

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated.

Purposes of Processing
We process your personal data for the following purposes:

  • Website Functionality: To display content in your preferred language and maintain secure shopping cart operations.
  • Order Fulfillment & Contract Performance: To process purchases, ship books, and manage customer support.
  • Legal & Accounting Obligations: To comply with tax laws, invoicing requirements, and book sales regulations (Art. 74 DPR 633/72).

Data Sharing and Third-Party Providers
We do not sell or rent your personal data to third parties. We only share necessary data with trusted service providers to complete your order:

  • Website Infrastructure: WordPress core services, WooCommerce, Spectra, and TranslatePress operating locally on our server environment.
  • Shipping Services: Poste Italiane (and international postal partners) to deliver your physical orders.
  • Payment Processors: PayPal and WooCommerce to process online payments securely. We do not store or access your credit card details on our servers.

International Data Transfers
For orders shipped to or from non-EU countries (such as the United Kingdom), necessary personal data (such as shipping address and order value) is transmitted to logistics providers and customs authorities to ensure compliance with customs procedures (e.g., CN22/CN23 declarations).
Where any service provider processes data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or Adequacy Decisions.

Data Retention Period

  • Order and transaction data (name, address, email, order details): retained for 10 years from the end of the financial year, as required by Italian tax and accounting laws.
  • Technical session data (IP address, browser logs): retained for no longer than 30 days, unless required for security investigations or legal obligations.

Requirement to Provide Data
Providing your personal data (name, address, email, payment details) is necessary to process and deliver your order. If you do not provide this information, we will not be able to fulfill your purchase.

Your Rights Under the GDPR
Under European data protection law (GDPR), you have the right to:

  • Access, correct, or request the deletion of your personal data.
  • Restrict or object to the processing of your data.
  • Request data portability.

To exercise any of these rights, please contact us at support@petitsujet.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

Cookies and Similar Technologies
Our website uses cookies and similar technologies to ensure proper functionality, analyze traffic, and improve user experience. For detailed information, please refer to our Cookie Policy.