Privacy Policy

This Privacy Policy describes in detail how Mare SRL Unipersonale (“the Company”, “we”, “our”, or “us”) collects, manages, uses, and safeguards personal data relating to users who visit, browse, or make purchases on nextstorum.com (“the Website”).

Protecting personal data is a priority for us. All data processing activities are carried out in compliance with Regulation (EU) 2016/679 (GDPR), applicable Italian legislation, and guidance issued by competent supervisory authorities.

This policy applies to all interactions with the Website, including but not limited to browsing, account creation, order placement, customer support communications, newsletter subscriptions, and any other services offered through nextstorum.com.

Data Controller

The Data Controller responsible for the processing of personal data is:

Mare SRL Unipersonale
Via Filippo Saporito, 54
81031 Aversa (CE), Italy
Email: info@nextstorum.com
VAT Number (Partita IVA): 04826710610

1. Types of Personal Data Collected

Depending on how users interact with the Website, we may collect different categories of personal data.

1.1 Information Provided Voluntarily by Users

Users may provide personal data directly when filling out forms, placing orders, or contacting us. This may include:

  • First name and last name
  • Billing and shipping addresses
  • Email address and phone number
  • Company name and VAT number, where applicable
  • Login credentials for registered accounts (stored in encrypted form)
  • Order-related information such as purchased items, payment method, transaction references, and order history
  • Messages, requests, or information submitted through customer service channels, contact forms, or emails

Providing certain data may be necessary to complete purchases or access specific services.

1.2 Data Collected Automatically During Website Use

When users browse nextstorum.com, certain information is automatically collected through technical systems and cookies, including:

  • IP address and approximate geographic location
  • Browser type, device model, and operating system
  • Date and time of access
  • Pages visited and interactions performed
  • Navigation behavior and session duration

This data helps us ensure proper website functionality, security, and performance optimization.

1.3 Data Obtained from Third Parties

In some cases, personal data may be received from external partners, such as:

  • Payment service providers processing transactions
  • Shipping and logistics partners handling deliveries
  • Analytics and performance measurement platforms
  • Advertising and marketing partners
  • Social media platforms when users interact with our official pages or campaigns

These parties process data in accordance with contractual obligations and applicable data protection laws.

2. Purposes of Data Processing

Personal data is processed only for specific, legitimate purposes, including:

  • Creating and managing user accounts
  • Processing and fulfilling orders
  • Managing payments, invoicing, and deliveries
  • Providing customer assistance and responding to inquiries
  • Complying with legal, tax, and accounting obligations
  • Ensuring website security and preventing fraud
  • Analyzing website usage to improve services and user experience
  • Sending marketing communications, newsletters, and promotional offers (only with consent)
  • Personalizing offers and content when users explicitly agree

3. Legal Basis for Processing

Data processing is carried out based on one or more of the following legal grounds:

  • Performance of a contract or pre-contractual measures
  • Compliance with legal obligations
  • Legitimate interests pursued by the Company
  • User consent, where required

Users may withdraw their consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data Security Measures

We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or disclosure. These measures include:

  • Secure servers and HTTPS connections
  • Encrypted storage of sensitive data
  • Restricted access to personal data by authorized personnel only
  • Continuous monitoring of systems
  • Periodic backups and security assessments

Despite these precautions, no system can guarantee absolute security. However, we continuously work to minimize risks.

5. Data Retention

Personal data is retained only for as long as necessary to achieve the purposes for which it was collected, including:

  • Account data: for the duration of the active account
  • Order and transaction data: as required by tax and accounting laws (generally up to 10 years)
  • Customer support communications: until resolution and for a limited subsequent period
  • Marketing data: until consent is withdrawn
  • Technical and usage data: as defined in our Cookie Policy

6. Data Sharing and Disclosure

Personal data may be shared only when necessary and strictly for operational purposes with selected third parties, including:

  • Payment processors
  • Courier and shipping companies
  • IT and hosting service providers
  • Customer relationship management and email platforms
  • Legal, accounting, and tax consultants
  • Marketing and analytics partners

All third parties act as Data Processors and are contractually bound to protect personal data and maintain confidentiality.

7. International Data Transfers

If personal data is transferred outside the European Union (EU) or European Economic Area (EEA), we ensure that adequate safeguards are in place, including:

  • EU adequacy decisions
  • Standard Contractual Clauses approved by the European Commission

8. Rights of Data Subjects

Under the GDPR, users have the right to:

  • Access their personal data
  • Request correction or updating of inaccurate information
  • Request deletion of personal data
  • Restrict processing under certain conditions
  • Object to processing based on legitimate interests
  • Withdraw consent for marketing or profiling
  • Receive their data in a portable format

Requests can be submitted to: info@nextstorum.com

We will respond within the time limits established by law.

Users may also lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

9. Profiling and Automated Processing

We may use automated tools to analyze user preferences and purchasing behavior to improve product suggestions and marketing relevance.

Such activities never produce legal or similarly significant effects without explicit user consent.

10. External Links

The Website may contain links to external websites operated by third parties.

We are not responsible for the content or privacy practices of those websites and recommend reviewing their policies separately.

11. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in legislation, business practices, or technical improvements.

The most current version will always be available on this page.

12. Contact Details

For any questions regarding this Privacy Policy or the processing of personal data, please contact:

Mare SRL Unipersonale
Via Filippo Saporito, 54
81031 Aversa (CE), Italy
Email: info@nextstorum.com
VAT Number (Partita IVA): 04826710610