Privacy policy

(pursuant to articles 13 and 14 of EU Regulation 2016/679 – GDPR)

Last update: 03/10/2025

With this document, Calzature Maxstyle S.a.s. di Marzocchi Valeria & C., with registered office at Via O. Malagodi 19/A-B, 44042 Cento (FE) – Italy, VAT and Tax Code 00397090382, REA FE-100477 (hereinafter, the "Owner"), owner of the website www.maxstyle.it (hereinafter, the "Site"), informs the user (hereinafter, the "User") that personal data collected during browsing and use of the offered services will be processed in compliance with the EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.

This privacy policy prevails, in case of conflict, over any automatically generated texts by the platform.

1. Data controller and contacts

Owner: Calzature Maxstyle S.a.s. di Marzocchi Valeria & C.
Headquarters: Via O. Malagodi 19/A-B, 44042 Cento (FE) – Italy
Email: info@maxstyle.it

The Owner has not appointed a Data Protection Officer (DPO), as there is no obligation under art. 37 GDPR.

2. Categories of data processed

Browsing data: IP address, device identifiers, browser and network data, system logs, visited pages, date and time of access.
Data provided by the User: first name, last name, email, phone number, shipping and billing addresses, messages sent to customer service.
Order and payment data: purchased or viewed products, payment method, order status and confirmations.
Account data: login credentials, preferences, order history.
Third-party data: contact details of recipients in case of gift purchases.
Newsletter and marketing data: email address and communication preferences.

The Site is not intended for minors under 18 years of age and the Owner does not knowingly collect personal data from minors.

3. Data sources

directly from the User (registration, orders, support);
automatically through cookies and similar technologies;
from service providers (e.g., e-commerce platform, payment gateway, couriers);
from partners or third parties, within the limits permitted by current legislation.

4. Purpose of processing and legal bases

Contract execution (art. 6.1.b GDPR): management of orders, payments, shipments, returns, user account, and customer service.
Compliance with legal obligations (art. 6.1.c GDPR): tax, accounting, and security obligations.
Legitimate interest of the Controller (art. 6.1.f GDPR): Site security, fraud prevention, protection of rights in legal proceedings, anonymous aggregated statistics, service communications.
User Consent (art. 6.1.a GDPR): sending newsletters and promotional communications, possible non-automated profiling.

Payment service providers (e.g., Klarna) operate as independent data controllers for data necessary to manage installment payments, according to their respective privacy policies.

5. Processing methods and security measures

Processing is carried out using paper, IT, and telematic tools, respecting the principles of lawfulness, fairness, and transparency, adopting appropriate technical and organizational security measures pursuant to art. 32 GDPR. No security measure can guarantee absolute protection.

6. Data provision

Providing data is optional; however:

It is necessary for browsing the Site and completing orders;
It is required for account creation;
It is subject to consent for marketing purposes.

Failure to provide data may result in the inability to use certain services.

7. Retention period

purchase and billing data: up to 10 years (legal obligations);
payment data: for the time necessary to manage disputes;
account data: until deletion is requested;
customer service data: until the request is fulfilled;
marketing data: until consent is revoked;
data for defense or legal obligations: for the periods provided by law.

8. Disclosure of data to third parties

Data may be disclosed to:

authorized personnel of the Data Controller;
Shopify Inc. / Shopify International Ltd. (e-commerce platform);
Sugo S.n.c. (technical management of the Site);
payment service providers and banking institutions;
couriers and shippers;
IT providers and consultants;
judicial or administrative authorities, where required by law.

Third parties operate as data processors or independent controllers, as applicable.

9. Shopify and international transfers

Shopify may also process some data as an independent controller for its own purposes. Data may be transferred to non-EU countries (e.g., Canada or the United States) based on adequacy decisions or Standard Contractual Clauses (SCC) approved by the European Commission.

10. Cookies

The Site uses technical cookies and, with the User’s consent, statistical and marketing/profiling cookies. For more information, please consult the dedicated Cookie Policy.

11. User rights

The User may exercise the rights provided for in arts. 15-22 GDPR at any time:

access, rectification, deletion;
restriction and objection to processing;
data portability;
withdrawal of consent (without prejudice to the lawfulness of prior processing).

Requests can be sent to info@maxstyle.it. For processing carried out independently by Shopify, please refer to the relevant privacy notice.

The User also has the right to file a complaint with the Data Protection Authority.

12. Marketing and withdrawal of consent

Marketing consent can be revoked at any time via the unsubscribe link in communications or by writing to the Data Controller.

13. Profiling

No automated decision-making processes or profiling with legal effects or similarly significant effects pursuant to art. 22 GDPR are carried out.

14. Credential security

The User is responsible for safeguarding their access credentials and must take all appropriate measures to prevent unauthorized use.

15. Changes to the privacy notice

The Data Controller reserves the right to update this privacy notice. Changes will be published on the Site with the update date indicated.

16. Contacts

Calzature Maxstyle S.a.s. di Marzocchi Valeria & C.
Via O. Malagodi 19/A-B, 44042 Cento (FE) – Italy
Email: info@maxstyle.it