Privacy Policy
This Privacy Policy explains how AGAS WEB S.R.L. collects, uses and protects your personal data when you visit ledmansion.art, place an order, subscribe to our newsletter or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Italian Privacy Code.
The short version
We collect only the data we need to sell and ship your artwork, provide support and, with your consent, keep you updated with our news. We never sell your personal data. Payment details are handled directly by secure payment providers and never stored on our servers. You can access, correct or delete your data at any time by writing to info@ledmansion.art.
1.Who we are
The Data Controller of your personal data is:
Company
AGAS WEB S.R.L.
Registered office
Via Vecchia Stazione 28D, 56031 Bientina (PI), Italy
Operational office
Via Sandro Pertini 2, 56012 Calcinaia (PI), Italy
VAT number
IT02492920505
REA
PI 258229
Certified email (PEC)
agas.web.srl@legalmail.it
2.What personal data we collect
Data you provide to us
- Order data: name, surname, billing and shipping address, email address, phone number, purchased items and order history.
- Account data: email address and profile information if you create a customer account or log in through Shopify customer accounts.
- Newsletter and VIP Club: email address and marketing preferences when you subscribe to our newsletter or join the VIP Club.
- Requests and forms: the information you send us through the contact form, the Custom Project quote form, the business partner and reseller forms, or the EU withdrawal form.
- Support conversations: the content of your messages when you contact us by email or WhatsApp.
Data collected automatically
- Browsing data: IP address, device and browser type, language, pages visited, referring website and interactions with the site.
- Cookies and similar technologies: as described in our Cookie Policy. Non essential cookies are used only with your consent.
Payment data
Payments are processed directly by our payment providers (Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay and other methods available at checkout). We never receive or store your full card number. We only receive confirmation of payment and the transaction data needed for accounting.
3.Why we process your data and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Selling and shipping your order, including payment, delivery, invoicing and order updates | Order data, payment confirmation | Performance of a contract (art. 6.1.b GDPR); legal obligation for invoicing (art. 6.1.c GDPR) |
| Customer support and handling of returns, withdrawals and warranty requests | Order data, support conversations, withdrawal form data | Performance of a contract and legal obligation |
| Newsletter and VIP Club communications about new releases, limited editions and promotions | Email address, marketing preferences | Consent (art. 6.1.a GDPR), which you can withdraw at any time via the unsubscribe link |
| Custom Project quotes and B2B requests | Form data, contact details | Pre contractual measures taken at your request (art. 6.1.b GDPR) |
| Advertising and retargeting through advertising platforms such as Meta | Browsing data, marketing cookies | Consent, given through the cookie banner |
| Site analytics to understand how the store is used and improve it | Browsing data, analytics cookies | Consent for non essential cookies; legitimate interest for aggregated statistics (art. 6.1.f GDPR) |
| Security and fraud prevention | Browsing data, order data | Legitimate interest in protecting the store and our customers |
4.Who we share your data with
We share personal data only with parties that help us operate the store, and only to the extent necessary. We never sell your personal data. Our main categories of recipients are:
- E-commerce platform: Shopify, which hosts our store, processes orders and provides customer accounts, checkout and email services on our behalf.
- Payment providers: Shopify Payments, PayPal, Klarna and the other payment methods available at checkout, which process your payment as independent controllers.
- Shipping couriers: FedEx, DPD, UPS and BRT, which receive the data needed to deliver your order.
- Marketing and advertising partners: Meta (Facebook and Instagram), used for advertising measurement and retargeting when you have given consent to marketing cookies.
- Review platforms: Trustpilot, if you choose to leave a review of your experience.
- Technical service providers: providers that operate specific site features, such as the EU withdrawal form service and form protection tools.
- Professional advisors and authorities: accountants, lawyers and public authorities where required by law.
5.International data transfers
Your data is primarily processed within the European Economic Area. Some of our providers, such as Shopify and Meta, may transfer data outside the EEA, including to Canada and the United States. Where this happens, transfers are protected by an adequacy decision of the European Commission, by the EU-US Data Privacy Framework or by Standard Contractual Clauses, together with additional safeguards where needed.
6.How long we keep your data
- Orders, invoices and accounting records: 10 years, as required by Italian tax and civil law.
- Newsletter and VIP Club data: until you unsubscribe or withdraw your consent.
- Quote requests and contact messages: up to 24 months after our last interaction, unless a contract follows.
- Browsing data and cookies: for the durations indicated in our Cookie Policy.
When data is no longer needed, it is deleted or anonymised.
7.Your rights
Under the GDPR you have the right to:
- access your personal data and obtain a copy of it;
- rectify inaccurate or incomplete data;
- erase your data, where the conditions of art. 17 GDPR apply;
- restrict the processing of your data;
- receive your data in a portable format;
- object to processing based on legitimate interest, including direct marketing;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, write to info@ledmansion.art. We will reply within one month. If you believe your data has been processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) or with the supervisory authority of your country of residence.
8.Cookies
We use cookies and similar technologies to run the store, measure performance and, with your consent, deliver personalised advertising. Full details, including the list of cookies and how to change your preferences, are available in our Cookie Policy.
9.Data security
Our store runs on Shopify infrastructure with encrypted connections (HTTPS) and industry standard security measures. Access to personal data is limited to authorised personnel and providers bound by confidentiality and data processing agreements. Payment transactions are handled by PCI DSS compliant providers.
10.Children
Our store is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has provided us with personal data, contact us and we will delete it.
11.Automated decision making
We do not take decisions based solely on automated processing that produce legal effects on you. Advertising personalisation through marketing cookies takes place only with your consent.
12.Changes to this policy
We may update this Privacy Policy to reflect changes in our services or in the law. The date at the top of this page indicates the latest revision. Significant changes will be highlighted on the site.
13.Contact us
Privacy requests
AGAS WEB S.R.L., Via Vecchia Stazione 28D, 56031 Bientina (PI), Italy
Email: info@ledmansion.art | PEC: agas.web.srl@legalmail.it