NOTICE UNDER ARTICLES 13–14 GDPR
Privacy, made clear.
This notice explains how we process personal data collected through the Magazzino della Lana website and its Early Access form.
Last updated: 13 August 2026
Data controller
Vencato1986 Casa di Rappresentanze e Commercio di Michele Vencato S.a.s.
Via Battaglione Vicenza n. 12
36078 Valdagno (VI), Italia
P. IVA e C.F. 04369560240
Privacy contact: hello@magazzinodellalana.it
Data we process
When you request Early Access, we process your email address, evidence of consent and technical information connected with subscription and confirmation, such as date, time and IP address. When you browse the site, technical data required for its operation and security may also be processed, including IP address, device and browser type, logs and information about errors or abuse.
We do not request special categories of personal data.
Purposes and legal bases
- Early Access and email communications: sending the confirmation request, recording your subscription and providing updates, previews and information about the first MDL drop. Legal basis: consent, Article 6(1)(a) GDPR.
- Security and abuse prevention: protecting the form and website against spam, fraud and automated misuse. Legal basis: legitimate interests, Article 6(1)(f) GDPR.
- Compliance and protection of rights: meeting legal obligations, handling requests and protecting legal rights. Legal basis: legal obligation and legitimate interests, Articles 6(1)(c) and 6(1)(f) GDPR.
Confirmation and withdrawal of consent
Subscription uses double opt-in: after submitting the form, you must confirm your address through the email you receive. You may withdraw consent at any time by using the unsubscribe link in our communications or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Providers and recipients
Data is processed by authorised personnel and by technical providers needed to deliver the service, within their respective roles: Brevo for the form, contact list, double opt-in and email communications; Google reCAPTCHA for spam and abuse protection; and website hosting, infrastructure and security providers. Providers act as processors or, where their terms so provide, as independent controllers.
Transfers outside the EEA
Some providers or their subprocessors may process data in countries outside the European Economic Area. In such cases, transfers rely on an adequacy decision or safeguards recognised by the GDPR, such as Standard Contractual Clauses, together with any applicable supplementary measures.
Retention
Early Access and communication data is retained until you withdraw consent or unsubscribe. We may then retain only the information needed to document the withdrawal, honour your objection and meet legal obligations for the strictly necessary period. Technical and security data is retained for periods proportionate to its purpose and the providers’ settings.
Providing your data
Providing your email address, consenting to communications and completing the anti-spam check is voluntary but required to join Early Access. Refusal has no other consequences and does not prevent you from browsing the site.
Your rights
You may request access, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interests and withdraw consent. You can exercise your rights by contacting us. You also have the right to lodge a complaint with the Italian Data Protection Authority or your competent supervisory authority.
Automated decisions and updates
We do not make solely automated decisions that produce legal or similarly significant effects, and we do not carry out profiling through this form. We may update this notice if our services or applicable law change, publishing the new version on this page.