Privacy and Cookie Policy

Privacy Policy of www.omuamoon.com

Last Update: December 11, 2024

Astromelia S.R.L. (“we” or “the Data Controller”), headquartered at Via Michelangelo Schipa 118, 80122 Naples – Italy, VAT number 09637521213, is committed to protecting the privacy of its users (“the Users”) globally. This Privacy Policy is drafted in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), Legislative Decree no. 196/2003 as amended by Legislative Decree no. 101/2018, and other applicable international data protection regulations, including the California Consumer Privacy Act (CCPA) and relevant non-EU laws.

This policy applies exclusively to the online activities of this website and concerns data collected through this website. It does not apply to information collected through other channels.

1. Data Controller

The Data Controller is Astromelia S.R.L., headquartered at Via Michelangelo Schipa 118, 80122 Naples – Italy, VAT number 09637521213, and can be contacted at: info@omuamoon.com.

2. Categories of Data Collected

We collect the following categories of personal data:

• Data provided directly by the user: name, surname, email address, phone number, shipping and billing address, payment information.
• Browsing data: IP address, device type, operating system, browser, pages visited, duration of visit.
• Log files: automatically collected information to ensure proper website functionality and security, including:
  • IP address.
  • Browser type and device parameters.
  • Internet Service Provider (ISP) name.
  • Date and time of visit.
  • Referring and exit pages.
  • Number of clicks.

These data are processed in aggregated and anonymized form for statistical purposes and to monitor the correct functionality of the website.

Providing personal data is optional, but failure to provide such data may prevent the provision of requested services.

3. Purposes of Data Processing

We process personal data for the following purposes:

• Contract execution: order management, product delivery, invoicing, and customer support.
• Legal compliance: fulfillment of fiscal, accounting, and other mandatory regulations.
• Direct marketing: sending newsletters, promotions, and commercial communications with the user’s prior consent.
• Analysis and improvement: analyzing preferences to optimize our offer and enhance user experience.
• Security: preventing unauthorized access or harmful activities for the website and its users.

4. Legal Basis for Data Processing

The processing of personal data is based on the following legal grounds:

• Contract execution: to provide requested products or services.
• Consent: for marketing purposes and promotional communications.
• Legal obligations: to comply with applicable laws.
• Legitimate interest: to prevent fraud, improve our services, and ensure platform security.

For users located outside the EU, data processing complies with applicable local laws, such as the CCPA for California residents.

5. Data Processing Methods

Personal data are processed using electronic and manual tools, with adequate technical and organizational measures to ensure a level of security appropriate to the risks, in accordance with Article 32 of the GDPR and other applicable international regulations. These measures include:

• Pseudonymization and encryption of data, where applicable.
• Access controls and continuous system monitoring.
• Training of authorized personnel.

6. Data Retention

Personal data are retained for the time strictly necessary to achieve the purposes outlined above and, in any case:

• 10 years for data related to fiscal and accounting obligations, as required by law.
• Until consent is withdrawn for marketing purposes.
• 7 days for data collected for security purposes (e.g., to block attempts to harm the website).

At the end of the retention period, data will be deleted or irreversibly anonymized.

7. Data Communication and Sharing

Personal data may be shared with:

• Service providers: e.g., payment services, shipping, hosting, email marketing platforms.
• Consultants and professionals: for legal, fiscal, or contractual obligations.
• Public authorities: as required by law or upon request.
• Subsidiaries or affiliates: for internal administrative purposes.

Data will never be sold to third parties for commercial purposes without the user’s explicit consent.

8. International Data Transfers

If it becomes necessary to transfer personal data outside the European Economic Area (EEA), we ensure that such transfer complies with Articles 44 et seq. of the GDPR and applicable international regulations, ensuring adequate levels of protection through:

• Standard Contractual Clauses approved by the European Commission.
• Adequacy decisions by the European Commission for the destination country.
• Other measures provided by applicable laws.

9. User Rights

Users have the following rights regarding their personal data under Articles 15-22 of the GDPR and applicable local laws:

• Access: request confirmation of data existence and receive a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request data deletion in cases provided by law.
• Restriction: limit data processing under certain circumstances.
• Portability: receive data in a structured, machine-readable format.
• Objection: object to processing for legitimate reasons or direct marketing purposes.

California residents have additional rights under the CCPA, including the right to know what data are collected and the right to request their deletion.

Requests can be sent to: info@omuamoon.com. Users also have the right to file a complaint with the Data Protection Authority (www.garanteprivacy.it) or the relevant local authority.

10. Privacy Policy Updates

We reserve the right to update this Privacy Policy at any time. Changes will be communicated to users via notices on the website or other appropriate means.

For further information, contact us at: info@omuamoon.com