Privacy Policy (EN)

Privacy Policy
Last updated: 18.05.2025

This Privacy Policy describes how Unda Srl (“we”, “us”, or “our”) collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian privacy laws.

 

1. Data Controller

Unda Srl
c/o Ceronistudio
Via Piave 260, 47521 Cesena (FC), Italy
Email: info@ondinah.com
Representative: Katharina Malley, CEO

2. Types of Data Collected

We collect and process the following categories of personal data:

  • Contact details (name, email, address, phone)

  • Order and payment details

  • Communication history (e.g., support emails)

  • Analytics data (IP address, device info, browsing behavior)

3. Purposes of Processing

We process your data to:

  • Process and deliver your orders

  • Provide customer support

  • Send order-related communication

  • Improve our website (via analytics)

  • Manage marketing campaigns (if consented)

4. Legal Basis

Processing is based on:

  • Contractual necessity (Art. 6(1)(b) GDPR)

  • Legal obligations (Art. 6(1)(c) GDPR)

  • Consent (Art. 6(1)(a) GDPR) for marketing/tracking

  • Legitimate interest (Art. 6(1)(f) GDPR) for analytics and fraud prevention

5. Data Sharing and Processors

We may share your data with trusted third parties:

  • Shopify (e-commerce platform)

  • Stripe, PayPal (payment processing)

  • Google Analytics, Meta Pixel (analytics & ads)

  • Mailchimp (email communication)

  • Logistics providers (shipping)

All third parties act under strict data processing agreements in line with GDPR.

6. International Transfers

Some services (e.g., Shopify, Mailchimp, Meta) may transfer data to countries outside the EU, including the US. In such cases, we ensure adequate safeguards such as Standard Contractual Clauses (SCCs) or Data Privacy Framework participation.

7. Data Retention

We retain your data only as long as necessary to fulfill the purposes stated, or as required by law (e.g., tax or accounting rules).

8. Your Rights

Under GDPR, you have the right to:

  • Access your data

  • Correct inaccurate data

  • Delete your data

  • Restrict or object to processing

  • Data portability

  • Withdraw consent (for marketing, cookies, etc.)

To exercise your rights, contact us at jakub@obciety.com.

9. Cookies

We use essential and marketing-related cookies. For more information, please refer to our [Cookie Policy].

10. Supervisory Authority

You can lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) if you believe your rights have been violated.

Contact
If you have questions regarding this policy, email us at: info@ondinah.com