Privacy Policy
What data we collect when you order, why we process it, how long we keep it and how you can have it deleted. Information notice under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Who processes your data
The data controller is M&G FAMILY ANGEL SOCIETA' COOPERATIVA, which operates the website refeler.com.
M&G FAMILY ANGEL SOCIETA' COOPERATIVA
Via Roma 538
80017 Melito di Napoli (NA), Italy
VAT number: IT09581531218
Email: info@refeler.com
2. What data we collect
| Category | Data | Where it comes from |
|---|---|---|
| Contact and delivery data | First name, last name, phone number, delivery address, email if given | You provide it in the order form |
| Order data | Products requested, amount, date, delivery outcome, any return | Generated by handling the order |
| Correspondence | Content of emails to customer care and of confirmation calls | You write or say it |
| Technical data | IP address, browser type, pages visited | Recorded by the web server |
We do not ask for card details, because you pay on delivery. We do not process special categories of data (art. 9 GDPR): if you send us any spontaneously in an email, that message is treated as an ordinary customer-care communication and deleted with the correspondence.
Photos or videos you send to report a fault are used only to handle the guarantee and are deleted when the case is closed.
3. Why we process it and on what legal basis
| Purpose | Legal basis (Regulation (EU) 2016/679) | Retention |
|---|---|---|
| Confirming, preparing and delivering the order | Art. 6(1)(b) – performance of a contract | For the duration of the order |
| Handling returns, refunds and complaints | Art. 6(1)(b) and 6(1)(c) – contract and legal obligations | Until the case is closed |
| Accounting and tax obligations | Art. 6(1)(c) – legal obligation | For the period required by tax law (in Italy 10 years) |
| Establishing or defending legal claims | Art. 6(1)(f) – legitimate interest | Until the end of the dispute |
| Website security and abuse prevention | Art. 6(1)(f) – legitimate interest | Technical logs, up to 12 months |
If one day we start sending marketing communications, we will do so only with your consent (art. 6(1)(a)), which you can withdraw at any time without giving reasons.
4. Who we share it with
- Couriers and logistics operators, to deliver the parcel and collect payment on delivery.
- The service that makes the confirmation call, acting as processor on our instructions.
- IT service providers (hosting, email), appointed as processors under art. 28 GDPR.
- Accounting and tax advisers, within the limits of legal obligations.
- Public authorities, when the law requires it.
Your data is not sold and is not passed on to third parties for their own advertising purposes.
5. Transfers outside the European Union
Data is processed within the European Economic Area. If a technical provider were to process it elsewhere, it would do so on the basis of a European Commission adequacy decision or standard contractual clauses, a copy of which you can request at info@refeler.com.
6. Your rights
You can ask us at any time to access your data, rectify it, erase it, restrict its processing, receive it in a machine-readable format (portability) and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it without affecting the lawfulness of what was done before.
Send your request to info@refeler.com. We reply without undue delay and in any case within one month. If we believe we cannot grant the request, we will tell you why.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work (in Italy, the Garante per la protezione dei dati personali).
7. Automated decisions
We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you.
8. If you do not give us your data
Name, phone and address are needed to deliver a parcel: without them the order cannot be fulfilled. Everything else is optional.
9. Security
The website is served over HTTPS. Access to order data is limited to the people who need to fulfil orders. If a breach likely to result in a high risk to your rights occurs, we will inform you as required by art. 34 GDPR.
10. Changes
If this notice changes, the date at the top of the page is updated. The version published here is always the one in force.