Privacy policy
PRIVACY POLICY – OUTLETZONE
1) Data controller
The Data Controller is:
This Outletzone website is operated by:
Outlet zone
VAT number: IT03931760122
Owner: Michele Gerace
Registered office: Via Bligny 20, Varese, VA, 21100, ITALY
Contact email: -----------
2) Types of data processed
Depending on how you interact with the site, we may process:
Browsing and technical data
(e.g., IP address, device identifiers, browser, operating system, logs, usage data, cookies/similar tools)
Data provided by the user
(e.g., name, surname, email, telephone number, shipping/billing address, and any tax code/VAT number if required for invoicing)
Purchase data and customer care
(e.g., purchased products, amounts, order history, support requests, returns, communications)
Payment details
Outletzone does not store complete card details. Payments are handled by providers (e.g., Shopify Payments, PayPal), who process the data required for payment according to their own policies.
Marketing data (only if you authorize)
(e.g. newsletter subscription, preferences, email interactions, consents)
3) Purpose of the processing and legal basis
We process data for the following purposes:
A) Site navigation and security
-
Purpose: to enable navigation, prevent abuse/fraud, ensure security and functionality
-
Legal basis: legitimate interest (security) and/or execution of pre-contractual measures for the provision of the requested service
B) Order management, shipments and delivery
-
Purpose: manage cart, checkout, orders, shipments, deliveries and operational communications
-
Legal basis: performance of a contract and/or pre-contractual measures
C) Legal and tax obligations
-
Purposes: accounting, invoicing, tax/administrative obligations, requests from authorities
-
Legal basis: legal obligation
D) Customer service, complaints, returns and refunds
-
Purpose: respond to requests, manage returns/refunds, complaints and disputes
-
Legal basis: performance of the contract; legitimate interest (defense of a right)
E) Marketing (newsletter, promotions)
-
Purpose: sending promotional communications and offers
-
Legal basis: consent (revocable at any time)
F) “Soft spam” (only if you enable and manage it correctly)
-
Purpose: to send emails about products/services similar to those purchased
-
Legal basis: legitimate interest pursuant to art. 130, paragraph 4 of the Privacy Code, with the right to object at any time.
If you don't want to use soft spam, we'll remove it. If you use it, it also needs to be configured correctly in Shopify/email tools.
G) Statistics/analytics and personalized advertising
-
Purpose: measure traffic and performance, improve the site, advertising campaigns (e.g. Meta/Google)
-
Legal basis: consent via Cookie banner (for non-technical cookies)
4) Provision of data: mandatory or optional
-
The information required to complete the order (e.g., address, contact information, payment information) is mandatory : without it, we cannot sell/ship.
-
Data for marketing/newsletter purposes is optional .
-
Data collected through analytics/marketing cookies are processed only if you provide consent via a banner (where required).
5) Data recipients (who can process them)
The data may be processed by:
-
authorized personnel of the Owner
-
technical providers (hosting, maintenance, email, platform management)
-
couriers and logistics for delivery
-
payment provider (e.g. PayPal, Shopify Payments)
-
consultants (e.g. accountant, lawyer) if necessary
-
public authorities in cases provided by law
Shopify
Outletzone uses Shopify as its e-commerce platform: Shopify may process data on behalf of the Data Controller as a data processor for the provision of the service.
6) Transfers outside the EU
Some providers (including Shopify and/or marketing/analytics tools) may also process data outside the European Economic Area .
In such cases, the transfer takes place on the basis of adequate guarantees provided by the GDPR, such as:
-
Adequacy decisions (if applicable)
-
Standard Contractual Clauses (SCCs) and supplementary measures, where necessary
7) Storage times
We retain data for the time strictly necessary for the purposes indicated:
-
Orders, invoices and tax obligations: typically 10 years (legal obligations)
-
Customer support and complaints: for the time necessary for management and, if necessary, for defense in the event of litigation
-
Customer account (if any): as long as the account is active; after prolonged inactivity we may delete/anonymize according to internal criteria ( e.g. 24/36 months )
-
Marketing/newsletter: until consent is revoked or unsubscribed; then limited retention for objection management
-
Cookies: according to the duration indicated in the Cookie Policy and in the banner
8) Rights of the interested party
You have the right to:
-
access to your data
-
rectification
-
cancellation (within the limits of the law)
-
limitation
-
portability (when applicable)
-
opposition (especially to marketing and soft spam)
-
revoke consent at any time (without affecting any processing already carried out)
To exercise your rights: write to [ ------------- ] .
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or the competent authority in your EU country.
9) Security
We adopt appropriate technical and organizational measures to protect data (limited access, updated systems, incident management procedures). No system is "zero-risk," but we manage security according to reasonable e-commerce standards.
10) Minors
The Site and sales services are intended for users who have the legal capacity to enter into binding contracts under applicable law.
If you believe that a minor has provided us with data without authorization, please contact us.
11) Cookie Policy and preferences
Outletzone uses cookies and tracking tools.
For details and to manage consent, consult the Cookie Policy and/or the cookie banner on the site.
12) Changes to this policy
This Privacy Policy may be updated. The version published on the website is the current version.
Last updated: [01/02/2026]