Privacy Policy
How we collect, use, and protect your personal data when you visit or shop with Gibson Studio – in line with EU GDPR and Italian data protection law.
Data Controller
The Data Controller responsible for your personal data is:
Gibson Studio
Ditta Individuale – P.IVA 04342260231
Verona, Italy
Email: info@gibsonstudio.it
Phone: +39 327 723 3430
For any privacy-related inquiries, contact us at the email address above.
Personal Data We Collect
- Identity data: first name, last name
- Contact data: email address, phone number, shipping and billing address
- Transaction data: order details, purchase history, payment information (processed securely via third-party payment providers — we do not store full card details)
- Account data: username, encrypted password, account preferences
- Technical & advertising data: IP address, browser and device information, pages visited, click and conversion events captured via cookies and pixels (see Section 8)
- Marketing data: your preferences regarding marketing communications
We do not intentionally collect special category data (e.g. health data, racial or ethnic origin, religious beliefs). If you voluntarily provide such information, we treat it with additional care.
How We Collect Your Data
- Directly from you, when you register an account, place an order, or contact us
- Automatically, when you browse our website, via cookies, analytics tools and advertising pixels (see Section 8)
- From third parties, such as payment processors, advertising platforms (Meta, Google, TikTok), and our fulfillment centers
Legal Basis for Processing (GDPR Art. 6)
- Performance of a contract (Art. 6(1)(b)): processing your order, managing your account, handling returns and support
- Legal obligation (Art. 6(1)(c)): retaining transaction records as required by Italian and EU tax and commercial law
- Legitimate interests (Art. 6(1)(f)): fraud prevention, website security, and improving our services. We have assessed that these interests are not overridden by your rights
- Consent (Art. 6(1)(a)): advertising cookies/pixels (Meta, Google Ads, TikTok, Pinterest) and marketing emails. You may withdraw consent at any time (see Sections 8 and 11)
How We Use Your Data
- To process and fulfill your orders, including sharing necessary data with our fulfillment centers
- To manage your account and provide customer support
- To send transactional emails (order confirmations, shipping notifications)
- To send marketing newsletters and promotional offers – only with your explicit consent
- To show you relevant ads and measure their performance on Meta, Google, and TikTok (and Pinterest, once active) – only after cookie consent
- To comply with legal and tax obligations, and to detect and prevent fraud
How We Share Your Data
We do not sell your personal data. We share it only with the following categories of recipients, only to the extent necessary:
| Recipient | Purpose | Data shared |
|---|---|---|
| Fulfillment Centers | Produce & ship your order | Name, address, order details |
| Payment provider(s) | Process payment (PCI-DSS compliant) | Payment/transaction data |
| Google (Analytics, Ads, Tag Manager) | Site analytics, advertising, remarketing | Technical & behavioral data, via cookies |
| Meta (Facebook/Instagram Pixel) | Advertising, conversion tracking, remarketing | Technical & behavioral data, via cookies |
| TikTok Pixel | Advertising, conversion tracking, remarketing | Technical & behavioral data, via cookies |
| Pinterest Tag (planned) | Advertising, conversion tracking | Technical & behavioral data, via cookies |
All advertising/analytics providers above are only activated once you consent via our cookie banner (Section 8). We may also disclose data when required by law, regulation, or court order.
International Data Transfers
Some providers (Google, Meta, TikTok, Pinterest, our fulfillment centers) are located outside the European Economic Area, including in the United States. When we transfer data outside the EEA, we rely on appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions, where applicable
You may request a copy of the applicable safeguards by contacting us at info@gibsonstudio.it.
Cookies and Tracking Technologies
We use cookies and similar technologies to enable essential functionality, analyze usage, and support advertising (including the Meta Pixel, Google Ads/Analytics, TikTok Pixel, and, once approved, the Pinterest Tag). Non-essential cookies only load after you give explicit consent via our cookie banner.
For the full list of cookies, their purpose, duration, and how to manage your preferences, see our Cookie Policy.
Data Retention
- Order/transaction data: 10 years (Italian tax & commercial law — D.P.R. 633/72, Codice Civile)
- Account data: for as long as your account is active, plus up to 2 years after closure unless a longer period is legally required
- Marketing data: until you withdraw consent
- Analytics/advertising data: typically up to 26 months, per each platform’s default retention settings
When data is no longer needed, it is securely deleted or anonymized.
Your Rights Under GDPR
- Access (Art. 15): obtain a copy of your personal data
- Rectification (Art. 16): correct inaccurate or incomplete data
- Erasure (Art. 17): request deletion (“right to be forgotten”)
- Restriction (Art. 18): limit how we use your data
- Portability (Art. 20): receive your data in a structured, machine-readable format
- Objection (Art. 21): object to processing based on legitimate interests or direct marketing
- Withdraw consent: at any time, without affecting prior lawful processing
To exercise these rights, contact info@gibsonstudio.it. We respond within 30 days and may verify your identity first.
If you believe your rights have been violated, you may lodge a complaint with the Italian Data Protection Authority: Garante per la protezione dei dati personali.
Marketing Communications
We only send marketing emails if you’ve explicitly opted in via a separate checkbox at registration or checkout. Unsubscribe anytime via the link in any marketing email, or by contacting info@gibsonstudio.it. Unsubscribing doesn’t affect transactional emails about your orders.
Security
We use SSL/TLS encryption, access controls, and reputable third-party processors to protect your data. No transmission over the internet is completely secure, and while we work hard to protect your data, we cannot guarantee absolute security.
Third-Party Links
Our website may link to third-party sites. We are not responsible for their privacy practices and recommend reviewing their policies independently.
Changes to This Policy
We may update this Privacy Policy from time to time and the “Last Updated” date above will reflect this. For material changes affecting how we process your data, we will notify you by email (if you have an account) or via a prominent notice on our site, and seek renewed consent where legally required.
Contact Us
Gibson Studio
Verona, Italy
Email: info@gibsonstudio.it
Phone: +39 327 723 3430
