Privacy e-Commerce

Privacy Policy – e-Commerce

Preamble

Pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”), this page describes the methods of processing personal data of users who visit the website of Ridewill S.r.l., the data controller (hereinafter also referred to as “Ridewill” or “Controller”). Ridewill informs data subjects about the use of their personal data in connection with the e-commerce services through which users can purchase products offered on the Ridewill website and on the Amazon and eBay platforms.

1. Data Controller and Data Protection Officer (DPO)

Pursuant to Article 4(7) of the GDPR, the data controller is Ridewill, headquartered at Via Socrate, 6 – 22070 Casnate con Bernate (CO), Italy.
Tel.: +39.031.5476941
E-mail: info@ridewill.it
PEC (certified email): ridewill@pec.it

The Data Protection Officer (DPO) of Ridewill can be contacted at the following e-mail address: dpo@trustds.it
PEC: dpotrustds@legalmail.it

2. Purpose and Legal Basis of Processing, Categories of Personal Data Processed, Data Retention Period, and Nature of Data Provision

According to Article 4(1) of the GDPR, “personal data” means “any information relating to an identified or identifiable natural person (data subject).”

Purpose: Management of purchase orders made through the Ridewill website or the eBay and Amazon platforms on which Ridewill sells its products

• Personal data processed: The personal data required to access the e-commerce service include:
  - Account login or new customer registration data: first name, last name, e-mail address, and password;
  - Billing data: in addition to account information, mobile phone number and home address;
  - Shipping data: the customer may specify a different address for product delivery;
  - Payment method: credit card data, Google Pay, or Apple Pay.
• Legal basis of processing: The processing of personal data is carried out based on the performance of pre-contractual or contractual measures requested by the data subject (Art. 6(1)(b) GDPR);
• Retention period: The Controller retains billing data for up to ten years from the conclusion of the purchase contract, in accordance with Article 2220 of the Italian Civil Code. Additional data are retained for the duration necessary to conclude and execute the contract, without prejudice to any further retention period linked to the existence of the data subject’s account on the Ridewill website;
• Nature of data provision: Providing data is mandatory in order to access and use the e-commerce service provided by Ridewill through its website.

3. Processing Methods

The processing is carried out in compliance with fundamental rights and freedoms and in accordance with the principles set out in Article 5 of the GDPR, in particular the principles of fairness, lawfulness, and transparency. The Controller ensures the relevance and proportionality of the information processed in relation to the purposes pursued.

The personal data collected are processed for the performance of the e-commerce contract concluded following an order placed by the customer, in compliance with the principles set out in Article 5 of the GDPR.

The processing is carried out by individuals authorized by the Controller for the purposes indicated. Personal data may also be processed with the assistance of other entities appointed as data processors, who process the data in compliance with the purposes and means determined by the Controller pursuant to Article 28 of the GDPR. The list of data processors is available upon request by the data subject.

Regarding orders completed on the eBay and Amazon platforms, in these cases the Controller receives from the data subject, through the platforms, only the data necessary for order management. As for data processing carried out by the eBay and Amazon platforms as independent data controllers (e.g., profiling and/or marketing activities), please refer to their respective privacy notices and terms and conditions.

4. Data Transfer Outside the European Economic Area (EEA)

The personal data processed for the above purposes are generally not transferred to third countries outside the European Union or the European Economic Area (EEA), nor to international organizations. Should data be transferred outside the EEA, the Controller undertakes to comply with the provisions of Chapter V of the Regulation to ensure adequate data protection. Further information may be requested from the Controller and/or the DPO.

5. Rights of Data Subjects

Data subjects – meaning natural persons to whom the processed data refer – may exercise the rights provided for in Articles 15 et seq. of the GDPR, in particular: the right to access their personal data, request rectification, restriction, or erasure where applicable, as well as the right to object to processing and the right to data portability. Where processing is based on consent, data subjects also have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise their rights, data subjects may contact the Controller or the Data Protection Officer using the contact details provided in this notice.

If data subjects believe that the processing of their personal data by the Controller violates the GDPR, they have the right to lodge a complaint with a supervisory authority in the Member State where they habitually reside or work, or where the alleged infringement occurred (Art. 77 GDPR). The Italian supervisory authority is the “Garante per la protezione dei dati personali,” whose contact details are available on the authority’s website (www.garanteprivacy.it).

Pursuant to Article 79 of the GDPR, data subjects also have the right to bring a judicial remedy if they consider that their rights have been infringed as a result of processing.

6. Additional Information Pursuant to the Consumer Code

Pursuant to Legislative Decree 206/2005 (Consumer Code), please note that all information necessary for purchasing, legal warranty, and withdrawal is provided completely and transparently on the Ridewill website in the “Terms and Conditions” section.

7. Changes to this Privacy Policy

Ridewill may modify, add, or remove any part of this privacy policy. To facilitate verification of any changes, this notice includes the indication of the date of the last update.

Last update: October 10, 2025