Privacy policy

Last updated: 29/07/2026

This Privacy Policy describes how Panificio Perrone S.n.c. di Perrone Giuseppe e c., owner of the website panificioperronematera.sbs, collects, uses, stores, and protects the personal data of users who visit the site, purchase products, use the online store's services, or contact us.

The website is operated by Panificio Perrone S.n.c. di Perrone Giuseppe e c., VAT number IT00567160775, registered office in Via Dante Alighieri 96, 75100 Matera, MT, Italy.

For any question regarding this Policy or the processing of personal data, you can contact us at panificioperronematera@gmail.com, via certified email (PEC) at panificioperrone@pec.it, or by phone at +39 0835 384451.

Data controller

Panificio Perrone S.n.c. di Perrone Giuseppe e c.
Address: Via Dante Alighieri, 96 - Matera (75100), Italy
Email: panificioperronematera@gmail.com
Phone: +39 0835 384451
VAT number: IT00567160775
Certified email (PEC): panificioperrone@pec.it

Types of personal data processed

While browsing the website, creating an account, submitting requests, using chat, or placing an order, we may process various categories of personal data.

Identification and contact data

We may process first name, last name, email address, phone number, billing address, shipping address, and other data necessary to manage orders, deliveries, support requests, and communications with the customer.

Order and purchase data

We may process information relating to purchased products, viewed products, items added to the cart, order amounts, order date, chosen payment method, order status, shipping, in-store pickup, any customer requests, and purchase history.

Payment data

Payments are managed through third-party payment providers and through Shopify Payments. Available payment methods on the site may include payment cards, Shop Pay, Apple Pay, Google Pay, Klarna, and PayPal.

Panificio Perrone does not directly store complete payment card data. Such data is processed by the respective payment providers in accordance with their own terms and privacy policies.

Shipping and delivery data

To fulfil orders, we may process first name, last name, shipping address, phone number, email, order details, and other information necessary to prepare and deliver products, both for Italy and for the other EU countries served (Germany, Belgium, Austria, Spain, and France).

Shipments are managed through GLS. The data necessary for delivery may therefore be shared with GLS and with partners of its European logistics network to enable shipping, package tracking, management of any storage, complaints or damages, and communication with the customer regarding delivery, including when this takes place towards other EU Member States.

If the customer chooses in-store pickup, order data is used to prepare the pickup at the physical store.

Customer account data

If you create or use a customer account, we may process account-related data such as email address, login credentials managed by the platform, saved addresses, order history, and preferences linked to the account.

Communication data

When you contact us by email, phone, chat, form, or other channels, we may process the information you provide, including identification data, contact details, message content, support requests, and information related to orders or products.

Technical and browsing data

While using the website, technical data may be collected, including IP address, device type, browser, operating system, pages visited, interactions with the site, cart data, session data, cookies, and similar technologies.

The IP address or approximate geographic information may also be used to automatically detect the market from which the user is browsing, in order to show prices, availability, and conditions applicable to the country of origin; the final price and conditions are in any case determined by the delivery address entered at checkout.

For more information on cookies and similar technologies, please refer to our Cookie Policy.

Purposes and legal bases of processing

Order management and provision of services

We use personal data to receive, confirm, prepare, ship, and manage orders, to enable payment, to provide support, and to communicate with the customer regarding the purchase. The legal basis for this processing is the performance of the contract or the performance of pre-contractual measures requested by the data subject.

Payments and fraud prevention

Data necessary for payment is processed to complete transactions, verify payments, prevent fraud, and ensure the security of purchases. The legal basis is the performance of the contract, the legitimate interest in the security of the store, and, where applicable, compliance with legal obligations.

Shipping and pickup of orders

We use shipping data to deliver purchased products via GLS, including to the other EU countries served, or to arrange in-store pickup, when available and chosen by the customer. The legal basis is the performance of the sales contract.

Customer support and operational communications

We use personal data to respond to customer requests, handle complaints, provide after-sales support, send communications relating to orders, and maintain the relationship with the customer. The legal basis is the performance of the contract, compliance with legal obligations, or the legitimate interest in providing support and properly managing the relationship with the customer.

Tax, accounting, and legal obligations

We use personal data to comply with obligations required by law, including tax, accounting, and administrative obligations, requests from authorities, and retention of documentation relating to orders. The legal basis is compliance with legal obligations.

Direct marketing

If you give your consent, we may use your email address to send you promotional communications, news, offers, and updates on our products. The legal basis is the data subject's consent. You can withdraw your consent at any time using the unsubscribe link included in emails, or by contacting us using the details provided in this Policy. We do not currently use SMS marketing.

Analytics and website improvement

We use analytics tools, including Google Analytics via Shopify's Google & YouTube channel and Microsoft Clarity, to understand how users interact with the site, improve the browsing experience, monitor the performance of the online store, and optimise content and features. Microsoft Clarity anonymously collects data relating to browsing behaviour, including mouse movements, clicks, and page scrolling, through session recordings and aggregated heatmaps.

When these tools involve the use of non-essential cookies or technologies, processing takes place on the basis of consent expressed through the cookie banner.

Marketing, advertising, and measurement

The website may use tools linked to Facebook & Instagram, Google & YouTube, and TikTok for marketing purposes, advertising measurement, custom or lookalike audiences, or similar purposes, where permitted by the user. When these tools involve the use of non-essential cookies or technologies, processing takes place on the basis of consent expressed through the cookie banner.

Website security

We use technical and browsing data to ensure website security and to prevent unauthorised access, misuse, fraud, or harmful activity. The legal basis is the data controller's legitimate interest in protecting the website, users, and the online store.

Shopify platform

Our online store is built and operated through Shopify, which provides the e-commerce platform, checkout, cart, payment tools, privacy tools, order-related services, and technical features necessary for the website to function, including automatic market localisation and management of country-specific sales conditions.

Shopify may process users' personal data as a service provider or, in some cases, in its own independent capacity, depending on the services and features used.

Some data may also be processed by Shopify to provide, protect, improve, and develop its own services, as described in the applicable Shopify policies.

Providers and third parties

To manage the website and provide our services, we may share personal data with providers and third parties, to the extent necessary for the purposes described in this Policy. These parties may include:

Shopify, for the management of the e-commerce platform, checkout, cart, orders, payments, privacy tools, and related services, including the technical management of foreign markets and related shipping and checkout rules
Shopify Payments and payment providers, for payment processing
PayPal, for payments made via PayPal
Klarna, for payments and messages related to the Klarna services available on the site
Apple Pay, Google Pay, Shop Pay, and card networks, for their respective payment services
GLS, for shipping and delivery of orders in Italy and the other EU countries served
Google, for Google Analytics, Google & YouTube, and Google Merchant Center
Microsoft, for Microsoft Clarity, a behavioural analytics and session-recording tool
Meta, for Facebook & Instagram and related advertising tools
TikTok, for advertising and measurement features
Google Reviews Rocket, for displaying Google reviews
Messaging and Inbox, for chat, messaging, and customer support features
technical providers, consultants, tax, legal, or administrative professionals, when necessary
public authorities or authorised parties, when required by law

Providers process data in accordance with their respective policies and, where applicable, as data processors or independent data controllers.

Cookies and similar technologies

The website uses cookies and similar technologies for the technical operation of the store, to remember preferences, for statistical analysis, and, subject to consent, for marketing and advertising purposes.

Cookie consent is managed through Shopify's native cookie banner, which allows you to accept, reject, or customise preferences by category.

For detailed information, please refer to our Cookie Policy.

Newsletter and promotional communications

If you subscribe to the newsletter or give your consent to email marketing, we may send you promotional communications, offers, news, and updates about our products.

You can withdraw your consent at any time by clicking the unsubscribe link included in the communications you receive, or by contacting us using the details provided in this Policy.

Even after unsubscribing from promotional communications, we may continue to send you non-promotional communications relating to orders, your account, payments, shipping, or support.

Data retention

We retain personal data for as long as necessary for the purposes for which it was collected and to comply with legal, tax, accounting, or administrative obligations. In particular:

data relating to orders, payments, and invoicing is retained for the period required by applicable tax and accounting regulations
customer account data is retained until the account is deleted or for as long as necessary to provide the service, subject to legal retention obligations
data relating to support requests is retained for as long as necessary to handle the request and protect any related rights
data processed for marketing purposes is retained until consent is withdrawn or deletion is requested, subject to any legal obligations
data collected through cookies and similar technologies is retained as described in the Cookie Policy and in the settings of the respective tools

International transfers

Some providers used by the website, including Shopify, Google, Meta, TikTok, Klarna, PayPal, Microsoft, or other technical providers, may process personal data outside the European Economic Area.

In such cases, data transfer is based on tools and safeguards provided for by applicable law, such as adequacy decisions, standard contractual clauses, or other mechanisms recognised by law.

Data subject rights

Within the limits and conditions provided for by applicable law, you may exercise the following rights:

right of access to personal data
right to rectification of inaccurate or incomplete data
right to erasure of data
right to restriction of processing
right to object to processing
right to data portability
right to withdraw consent, where processing is based on consent
right to lodge a complaint with the competent supervisory authority

You can exercise your rights by contacting us at panificioperronematera@gmail.com or via certified email (PEC) at panificioperrone@pec.it. Before acting on a request, we may need to verify the identity of the requester.

Complaints

If you believe that the processing of your personal data infringes applicable law, you can contact us using the details provided in this Policy. You also have the right to lodge a complaint with the competent supervisory authority for the protection of personal data.

Data security

We adopt reasonable technical and organisational measures to protect the personal data processed through the website. However, no data transmission or storage system can be considered completely secure. We encourage you to use secure channels and not to share unnecessary confidential information.

Minors

The website is not specifically directed at minors. We do not knowingly collect personal data from minors without the consent of those exercising parental responsibility, where required by law. If you believe that a minor has provided us with personal data without authorisation, please contact us using the details provided in this Policy.

Links to third-party websites

The website may contain links to third-party sites, platforms, or services. We are not responsible for the privacy practices, content, or security of sites or services not directly operated by us. We encourage you to review the privacy policies of third parties before using their services.

Updates to this Policy

This Privacy Policy may be updated over time, for example in the event of changes to the services used, the website's features, or applicable law. Any updates will be published on this page, indicating the date of last update.

Contact

Language

Privacy policy