Privacy Policy

The data controller responsible for the personal data collected through this website is Lecco Pesca, with registered address at Via delle Basse 1, 43044 Collecchio (PR), Italy, VAT number [VAT number to be added], company registration [Company registration name/tax code to be added]. For any question regarding the processing of personal data, you can contact us by email at leccopesca@gmail.com or by phone at +39 0521 302024.

This policy explains how we collect, use, and protect the personal data of visitors browsing our website and customers who place orders or request our services, in accordance with Regulation (EU) 2016/679 (the "GDPR") and applicable Italian data protection law.

While you browse and use our site, we may collect the following categories of personal data: identification and contact details provided when you create an account or place an order (first and last name, email address, phone number); shipping and billing addresses; order history, payment records, and purchase details; browsing data and information collected through cookies and similar technologies; and any information you voluntarily submit through our contact or quote-request forms, for example when requesting our rod repair and rebinding service.

We do not collect or store full payment card details. Card data is processed directly and securely by our payment provider, described below, and is never held on our own systems.

We process personal data for the following purposes: (a) managing your account and fulfilling orders, including payment processing, shipping, and after-sales support, on the basis of performance of a contract to which you are a party or steps taken at your request prior to entering into a contract; (b) complying with legal, tax, and accounting obligations, such as retaining invoices and sales records, on the basis of a legal obligation; (c) preventing fraud and keeping our website and transactions secure, on the basis of our legitimate interest; (d) responding to enquiries and quote requests you submit voluntarily, on the basis of pre-contractual steps or our legitimate interest in providing assistance; (e) sending marketing communications, but only where you have given your specific, freely revocable consent.

Providing the data needed to fulfil a contract is mandatory: without it, we cannot process your registration, order, or request. Providing data for marketing purposes is optional, and you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To operate our services, we work with third-party providers who act as data processors under Article 28 GDPR, engaged under appropriate data processing agreements: Stripe, for secure online payment processing; Supabase, for database hosting, account authentication, and file storage; Resend, for sending transactional emails such as order confirmations and shipping notifications; DeepL and/or Google Cloud Translation, for automatic translation of website content into the languages we offer; and Vercel, for website hosting and delivery.

These providers process personal data solely for the purposes described above and in accordance with our instructions. We do not sell personal data, and we do not share it with third parties for purposes other than those set out in this policy, except where required by law or requested by a competent authority.

Some of the providers listed above may process personal data outside the European Economic Area. Where this occurs, we ensure the transfer is carried out in compliance with applicable law, relying on safeguards recognised under the GDPR such as the European Commission's Standard Contractual Clauses, adequacy decisions issued by the European Commission, or other equivalent safeguards.

Where available, we prefer to use EU-based hosting regions offered by our providers in order to minimise transfers of personal data outside the European Union.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. In particular: account data is kept for the duration of our relationship with you and deleted or anonymised within a reasonable period after you request account closure; order, invoice, and accounting records are kept for the period required by applicable Italian tax and civil law, generally up to 10 years; data collected through contact or quote-request forms is kept for as long as needed to handle your enquiry and, absent further interaction, deleted within a reasonable period; data processed on the basis of marketing consent is kept until you withdraw that consent.

Once the applicable retention period has expired, personal data is deleted, destroyed, or irreversibly anonymised, unless further retention is required to establish, exercise, or defend a legal claim.

As a data subject, you have the right to request access to your personal data, rectification of inaccurate data, erasure of your data ("the right to be forgotten"), restriction of processing, and portability of your data in a structured, commonly used, machine-readable format, and to object to processing carried out on the basis of our legitimate interest. Where processing is based on consent, you also have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You can exercise these rights by writing to leccopesca@gmail.com. We will respond without undue delay and in any event within the time limits set by applicable law. You also have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it), the Italian data protection authority, if you believe our processing of your personal data infringes applicable law.

Our website uses essential (technical) cookies that are necessary for its core functionality, such as remembering your selected language and the contents of your shopping cart. These cookies are always active and do not require your consent, as they are strictly necessary to provide the service you request. We may also use additional analytics or functional cookies, but only with your prior consent.

When you first visit the site, a cookie banner allows you to accept, reject, or customise non-essential cookies. For more information about the categories of cookies we use and how to manage your preferences, please refer to the cookie banner and its settings, which remain accessible at any time from the website.

Our website and services are intended for adult users only. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a minor without appropriate parental consent, we will take steps to delete that data promptly.

For any question about this policy or to exercise the rights described above, please contact us by email at leccopesca@gmail.com, by phone at +39 0521 302024, or by post at Via delle Basse 1, 43044 Collecchio (PR), Italy.