Privacy Policy

Privacy Policy

This Policy is drafted in accordance with EU Regulation 2016/679 (GDPR), Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018, and all other applicable regulations regarding personal data protection.

1. Data Controller

Controller: Alessandro Canonico (KanoCollectibles)

Headquarters: Piazza D. Franceschetti, 5/16 – 31036 Istrana (TV), Italy

VAT ID: 05548800266

Email: info@kanocollectibles.com

2. Personal Data Collected

2.1 Data provided directly by the user

While browsing and using the Website, KanoCollectibles collects the following personal data:

Personal details: name, surname
Contact details: email address, telephone number
Shipping data: delivery address (street, house number, postcode, city, country)
Billing data: billing address, tax code (if required)
Payment data: managed directly and securely by payment providers (Stripe, PayPal, etc.) – KanoCollectibles does not store credit/debit card data

2.2 Automatically collected data

The following data are automatically collected while browsing the Website:

IP address
Browser type and operating system
Visited pages and duration of visit
Referring site

This data is collected using cookies and similar technologies. For more details, please refer to the Cookie Policy.

3. Purpose and Legal Basis of Processing

a) Performance of a contract (Art. 6.1.b GDPR): order processing, payment management, product shipping, order-related communications, complaint and return management.

b) Legal obligation (Art. 6.1.c GDPR): fulfilment of tax, accounting, and administrative obligations provided for by Italian and European legislation.

c) Legitimate interest (Art. 6.1.f GDPR): fraud prevention, IT security of the Website, improvement of services offered, anonymous statistical analysis of user behaviour.

d) Consent (Art. 6.1.a GDPR): sending newsletters, promotional communications, and updates on new products, subject to explicit user authorization. Consent can be freely revoked at any time.

4. Data Retention

Personal data are retained for the time strictly necessary to achieve the purposes for which they were collected:

Order data: 10 years (tax and accounting obligation pursuant to D.P.R. 633/1972 and D.P.R. 600/1973)
Data for promotional communications: until consent is revoked
Browsing data and technical logs: maximum 12 months

5. Data Communication and Sharing

Personal data are not sold or transferred to third parties. They may be communicated, exclusively for the indicated purposes, to the following categories of subjects:

Couriers and shippers: for order delivery
Payment providers (e.g., PayPal, Stripe): for managing financial transactions
IT and hosting service providers: for technical website management
Accountant / Accounting firm: for tax compliance
Public authorities: in cases provided for by law

All third parties are designated as Data Processors pursuant to Art. 28 GDPR and process data exclusively for the purposes contractually agreed upon.

6. Data Transfer Outside the EU

Some of the technical services used (e.g., analytics providers, payment platforms) may involve the transfer of data to non-EU countries. In such cases, KanoCollectibles ensures that the transfer complies with the guarantees provided by the GDPR (Adequacy Decisions, Standard Contractual Clauses, etc.).

7. Data Subject Rights

Pursuant to Articles 15-22 of the GDPR, the user has the right to:

Access: obtain confirmation of the processing of their data and receive a copy thereof
Rectification: correct inaccurate or incomplete data
Erasure (right to be forgotten): obtain the erasure of their data, except for legal retention obligations
Restriction: obtain restriction of processing in certain cases
Data portability: receive their data in a structured, commonly used and machine-readable format
Objection: object to processing for direct marketing purposes or based on legitimate interest
Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise their rights, the user can contact KanoCollectibles at info@kanocollectibles.com. The Controller will respond within 30 days of receiving the request.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Data Security

KanoCollectibles adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, or disclosure, including: SSL/TLS encrypted connection, data access limited to authorized personnel, regular updating of IT systems.

9. Minors

The Website and KanoCollectibles' services are not intended for individuals under 16 years of age. KanoCollectibles does not knowingly collect personal data from minors. If data of minors is found to have been collected without parental or guardian consent, such data will be immediately deleted.

10. Changes to the Privacy Policy

KanoCollectibles reserves the right to update this Policy at any time. Changes will be published on the Website with an indication of the update date.

11. Contacts