Privacy Policy
This policy explains what personal data Nana lab s.r.l. collects through viamercader.com, why it is collected, how long it is kept and how you can have it corrected or deleted.
1. Who is responsible for your data
The data controller for the personal data collected through this website is:
Nana lab s.r.l.
Corso Vittorio Emanuele II 44
10123 Torino, Italy
Email: info@viamercader.com
Nana lab s.r.l. decides why and how your personal data is processed. If you have any question about this policy, or you want to exercise one of the rights described in section 8, write to info@viamercader.com.
2. What this policy covers
This policy describes the personal data we collect when you visit viamercader.com, when you send an order request through one of our product pages, and when you write to our support address. It does not cover websites operated by other companies that you may reach from links published here; those sites have their own privacy policies.
3. The data we collect
3.1 Data you give us
- Order data: first name and surname, telephone number, delivery address, and any note you add to the order form. In some countries we also ask for an email address.
- Support data: your email address and the content of the messages you send us, including photographs you attach to a complaint.
- Return data: the information needed to process a return, including a bank account number when a refund cannot be paid back through the original payment method.
3.2 Data collected automatically
- Technical data: IP address, browser type and version, operating system, screen size, language, the pages you open on this site, the date and time of each request.
- Origin of the visit: the website or the advertisement you arrived from, including the click identifier that advertising platforms add to the address of the page.
- Cookie identifiers: described in detail in our Cookie Policy.
We do not ask for and we do not want special categories of data, such as health data, political opinions or religious beliefs. Please do not send us that kind of information.
4. Why we use your data, and on what legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Confirming the order by telephone, preparing and delivering the parcel, handing your address to the courier | Order data | Performance of a contract, or steps taken at your request before entering into a contract – Art. 6(1)(b) |
| Answering your questions and handling complaints, returns and refunds | Support data, order data, return data | Performance of a contract – Art. 6(1)(b); our legitimate interest in keeping a record of what was agreed – Art. 6(1)(f) |
| Accounting, invoicing and tax records | Order data, return data | Compliance with a legal obligation – Art. 6(1)(c) |
| Keeping the website available and secure, preventing fraudulent or abusive orders | Technical data | Our legitimate interest in protecting the service – Art. 6(1)(f) |
| Measuring which advertisement produced an order, and measuring the use of our campaign pages | Technical data, origin of the visit, cookie identifiers | Your consent – Art. 6(1)(a) |
| Establishing, exercising or defending a legal claim | All of the above | Our legitimate interest, and legal obligations – Art. 6(1)(f) and (c) |
Providing order data is not a legal obligation, but without it we cannot confirm or deliver an order.
5. Who else sees your data
We do not sell your personal data and we do not disclose it for other companies’ marketing. We share it only with the parties who need it to complete the service:
- Courier and postal companies, which need your name, address and telephone number to deliver the parcel and, where cash on delivery applies, to collect the payment.
- The order desk that calls you to confirm the order, which acts on our instructions.
- Suppliers and fulfilment partners, where a product is dispatched directly from their warehouse.
- Our hosting provider and technical suppliers, who keep the website and our email running.
- Our accountants, and, where the law requires it, the tax authorities and the courts.
- Advertising and measurement providers, for the campaign pages only, as described in the Cookie Policy.
Suppliers that process data on our behalf are bound by a data processing agreement under Article 28 GDPR. Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses or by an adequacy decision.
6. How long we keep it
| Data | Retention period |
|---|---|
| Order and delivery records | 10 years from the end of the financial year, as required by Italian accounting and tax law |
| Support messages | 24 months from the last message, unless they concern an open dispute |
| Order requests that were never confirmed | 12 months |
| Technical logs of the website | Up to 12 months |
| Cookies and measurement identifiers | As stated in the Cookie Policy |
When a retention period ends, the data is deleted or irreversibly anonymised.
7. How your data is protected
This website is served over an encrypted connection (HTTPS). Access to order data is limited to the people who need it to do their work, and it is protected by individual accounts and passwords. Our suppliers are selected on the basis of the guarantees they offer under Article 28 GDPR. No system is completely immune to attack; if a breach occurs that is likely to result in a high risk to you, we will inform you and the supervisory authority as required by Articles 33 and 34 GDPR.
8. Your rights
Under Articles 15 to 22 GDPR you have the right to:
- obtain confirmation of whether we hold data about you, and receive a copy of it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased, where one of the grounds in Article 17 applies;
- ask us to restrict the processing while a request of yours is being examined;
- receive the data you gave us in a structured, machine-readable format, and have it sent to another controller;
- object to processing based on our legitimate interest;
- withdraw a consent you have given, at any time, without affecting what was done before the withdrawal.
Write to info@viamercader.com. We answer within one month; if the request is complex we may extend that period by two further months and we will tell you why. There is no charge, unless a request is manifestly unfounded or excessive.
You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma (garanteprivacy.it). You may also complain to the authority of the country where you live or work.
9. Automated decisions and profiling
We do not take decisions about you by automated means alone, and we do not build behavioural profiles of our customers. Advertising platforms may use their own cookies to decide which advertisement to show you; that processing is described in the Cookie Policy and is subject to your consent.
10. Children
This website is not directed at children, and our products are sold to adults. We do not knowingly collect data from anyone under 16 years of age. If you believe a child has sent us personal data, write to info@viamercader.com and we will delete it.
11. Changes to this policy
If we change this policy we publish the new version on this page and update the date at the top. Material changes are announced on the home page for at least thirty days.
12. Contact
Nana lab s.r.l.
Corso Vittorio Emanuele II 44
10123 Torino, Italy
Email: info@viamercader.com
See also our Contact page.