Privacy Policy
ESSETI SRL is committed to protecting and respecting your privacy. Below, you will find detailed information on how we process your personal data.
This Privacy Policy explains how we collect and process personal data provided or collected through our digital platforms, allowing visitors to access our website smartstorum.com and use our services. This Privacy Policy is drafted in accordance with the General Data Protection Regulation (GDPR) of the European Union and relevant local legislation.
ESSETI SRL (Reg N. 01402600470), located at VIA MASSA AVENZA 38/B – 54100 – MASSA (MS), is the owner of the website smartstorum.com and the data controller. This Privacy Policy applies to the following categories of individuals:
Buyers
Potential buyers
Users of our website
Suppliers and business partners
We process personal data only for specific and legitimate purposes, using the appropriate legal basis. Below are the purposes and legal bases for processing personal data for each group of individuals.
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected. If we process your personal data based on your consent, we will continue to do so until you withdraw your consent. The retention periods for personal data are detailed below.
How do we collect your personal data?
We collect the data you provide when you contact us regarding products, services, or information, access our websites, participate in public forums or other activities offered through our digital tools, respond to customer surveys, or communicate with us in any other way. We also collect data using various technologies, such as cookies. For more information on cookies, please refer to our Cookie Policy.
We process your personal data for various purposes depending on the type of relationship you have with us. The purposes and retention periods are described in the tables below.
When acting as a buyer:
| Purpose of processing | Personal data processed | Legal basis | Retention period |
|---|---|---|---|
| Make a purchase on our website | Name, surname, delivery address, company name (if legal entity), VAT number (if legal entity), email address (username), encrypted password, phone number, country of residence | Contract | 5 years from order completion |
| Communication related to the order | Same as above | Contract | 5 years from order completion |
| Send newsletters via email | Email address, name, surname | Legal obligation | Until withdrawal |
| Send personalized newsletters via profiling | Email address, name, surname, profile information | Consent | Until withdrawal |
| Marketing based on profiling | Profile data | Consent | Until withdrawal |
| Send customer satisfaction surveys | Email address, name, surname, survey responses | Legitimate interest | 1 year from the survey date |
| Conduct statistical analysis | Aggregated purchase/view data (non-identifiable) | Legitimate interest | 1 year |
| Initiate legal claims | Data depending on the case, minimizing where possible | Legal obligation | As per applicable regulations |
When acting as a website visitor or potential buyer:
| Purpose of processing | Personal data processed | Legal basis | Retention period |
|---|---|---|---|
| Send newsletters via email | Email address, name, surname | Consent | Until withdrawal |
| Send personalized newsletters via profiling | Email address, name, surname, profile information | Consent | Until withdrawal |
| Marketing based on profiling | Profile data | Consent | Until withdrawal |
| Respond to your inquiries | Email address or phone number, name, surname | Legitimate interest | 3 months from end of communication |
| Send customer satisfaction surveys | Email address, name, surname, survey responses | Legitimate interest | 1 year |
| Conduct statistical analysis | Aggregated purchase/view data (non-identifiable) | Legitimate interest | 1 year |
| Ensure website security | IP address | Legitimate interest | 1 year |
| Initiate legal claims | Data depending on the case, minimizing where possible | Legal obligation | As per applicable regulations |
We do not transfer your personal data to third parties, except in the following cases:
If affiliated companies or third-party providers perform services on our behalf, such as responding to your inquiries, delivering packages, or offering customer service. These companies are prohibited from using your data for purposes other than those assigned or required by law.
If we share your data internally or with third parties for purposes such as ensuring security, protecting our rights and property, or complying with legal obligations.
All third parties receiving personal data are required to safeguard it under specific agreements and are not authorized to use it for any purpose beyond the agreed contractual scope.
The protection of your personal data is a top priority. We implement technical, organizational, and physical measures to protect your data from unauthorized access, disclosure, modification, or destruction.
Measures include:
Regular software and hardware updates
Ongoing employee training
Monitoring and audits of data processors
Securing our physical premises
While we strive for high standards of security, no system is completely foolproof. We appreciate your understanding.
You have the right to exercise control over your personal data. To do so, contact us in writing.
Note that some services may be unavailable if you do not consent to personal data processing. Furthermore, without certain data, we may not be able to personalize your experience.
You can exercise your rights by writing to:
ESSETI SRL
VIA MASSA AVENZA 38/B – 54100 – MASSA (MS)
With “Personal Data Protection” written on the envelope
Or via email at info@essetimedia.com, with “Personal Data Protection” in the subject line.
Your rights include:
Access: Know whether your data is processed and access it.
Rectification: Correct or update inaccurate or incomplete data.
Restriction: Request processing limitation under certain conditions.
Deletion: Request data erasure unless retention is legally required.
Portability: Receive your data in a structured, machine-readable format and transfer it to another controller.
We may update this Privacy Policy to reflect changes in legislation, technology, or practices. The latest version will always be available at smartstorum.com. We encourage periodic review. Where required by law, we will request your consent before implementing changes.