Privacy policy
Data controller
UELatino — VAT 13509120013 Via Luigi Capriolo 55/A, 10139 Torino (TO), Italia Email: vendite@uelatino.com — Phone: +39 351 942 8261 This notice covers the UELatino online shop and explains, under Regulation (EU) 2016/679 (GDPR), how we process your personal data.
What data we process
- What you give us for an order: first and last name, email, phone, delivery address, any notes for the courier and, if you choose collection, the Poste point to collect from. - Order data: products bought, amounts, chosen payment method and any discount code. - Account data, if you create one: your email (we send you a code to sign in) and what you save in your profile, including whether you want our emails. - Technical data: your IP address and the information your browser sends with each request, recorded in server logs for security and to run the site. From the IP we only work out the country, to suggest the right shop: we do this with a database on our own server, without sending it to anyone. - Your cart: when it changes, we send our servers the products and quantities in it, under a random code kept in your browser and, if you are signed in, linked to your account. - Visit statistics: pages seen, products opened and added to the cart, searches, country, language, type of device (phone or computer) and the site you came from. We do not know who you are: instead of your IP address we keep a code worked out from the date, the IP and the browser with a secret key, which changes every day and cannot be traced back to you. We do not process your card details: Stripe or PayPal handle them directly.
Why we process it, and on what basis
- To handle your order: confirmation, payment, shipping, support, returns and warranty. Basis: performance of the contract (Art. 6(1)(b) GDPR). - To run your account and let you sign in. Basis: performance of the contract. - To meet legal obligations, such as tax and accounting. Basis: legal obligation (Art. 6(1)(c)). - To protect the site from abuse and fraud and defend our rights. Basis: legitimate interest (Art. 6(1)(f)). - To check, when an order contains alcohol, that you declare you are at least 18. Basis: legal obligation. - To count visits and the carts that never become orders, and so learn how to improve the shop. Basis: legitimate interest (Art. 6(1)(f)); the statistics do not identify you. - To send you offers and news and, if you leave products in your cart, a single reminder a few hours later with a link to get it back. Only if you have an account and ticked “Send me offers and news by email”. Basis: consent (Art. 6(1)(a)), which you can withdraw at any time by unticking it in your account or by writing to us. We do not use your data for profiling or for anyone else's advertising.
Is it required?
The data the order form asks for is needed to deliver and invoice: without it we cannot complete the order. Fields marked optional (such as notes for the courier) you can leave out.
Who we share it with
Only those we need to provide the service, appointed as processors where required: - Hostinger, which hosts the online shop and our WooCommerce shop, where orders are recorded. - Nova Qwerty (VAT 12993770010), which provides Kipuntu, the management system we run the catalogue, orders and shipping with; the data is on Google Cloud servers in Belgium (EU). - Brevo, which sends the platform's emails (sign-in codes, order confirmations, cart reminders and, if you asked for them, offers and news). - The couriers Poste Italiane and BRT, who receive name, address, phone and email for delivery. - Stripe and PayPal, for payments: they process payment data as independent controllers, under their own policies. - Advisers and authorities, where the law requires it (for example for accounting). We do not sell your data to anyone.
Transfers outside the EU
Our providers keep the data in the European Union. Some (such as Google, Stripe and PayPal) belong to groups based in the United States: if data is transferred outside the EU, this happens with the safeguards the GDPR provides, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Orders and accounting records: 10 years, as Italian law requires (Art. 2220 of the Civil Code). - Account: until you ask us to close it. - Sign-in codes: a few minutes; a session lasts 30 days. - Carts: 90 days from the last change. - Visit statistics: 400 days. - Technical server logs: for a limited period, then deleted. After that, the data is deleted or anonymised. - A dedication's picture: until 5 days after the order is delivered; if it is not used in an order, 1 day. The dedication's text stays with the order.
How we protect it
The site uses encrypted connections only (HTTPS). Access to our systems is limited to the people who need it and protected; service credentials are stored encrypted.
Your rights
At any time you can ask us to: - access your data and receive a copy; - correct or update it; - erase it, except what the law requires us to keep; - restrict its processing, or object to processing based on legitimate interest; - receive it in a machine-readable format (portability). Write to vendite@uelatino.com: we reply within one month. If you think the processing is not lawful, you can complain to the data protection authority of the country you live in, or to the Italian Garante (www.garanteprivacy.it).
Cookies
The site uses technical cookies only, needed for it to work. The details are in the cookie policy.
Changes
If we change this notice, we will publish the new version here. Last updated: 14 October 2026.