Privacy policy

Last updated: 29/07/2026

This Privacy Policy describes how Panificio Perrone S.n.c. di Perrone Giuseppe e c., owner of the website panificioperronematera.com, collects, uses, stores, and protects the personal data of users who visit the site, purchase products, use the online store's services, or contact us.

The website is operated by Panificio Perrone S.n.c. di Perrone Giuseppe e c., VAT number IT00567160775, registered office in Via Dante Alighieri 96, 75100 Matera, MT, Italy.

For any question regarding this Policy or the processing of personal data, you can contact us at panificioperronematera@gmail.com, via certified email (PEC) at panificioperrone@pec.it, or by phone at +39 0835 384451.

Data controller

Panificio Perrone S.n.c. di Perrone Giuseppe e c.
Address: Via Dante Alighieri, 96 - Matera (75100), Italy
Email: panificioperronematera@gmail.com
Phone: +39 0835 384451
VAT number: IT00567160775
Certified email (PEC): panificioperrone@pec.it

Types of personal data processed

While browsing the website, creating an account, submitting requests, using chat, or placing an order, we may process various categories of personal data.

Identification and contact data

We may process first name, last name, email address, phone number, billing address, shipping address, and other data necessary to manage orders, deliveries, support requests, and communications with the customer.

Order and purchase data

We may process information relating to purchased products, viewed products, items added to the cart, order amounts, order date, chosen payment method, order status, shipping, in-store pickup, any customer requests, and purchase history.

Payment data

Payments are managed through third-party payment providers and through Shopify Payments. Available payment methods on the site may include payment cards, Shop Pay, Apple Pay, Google Pay, Klarna, and PayPal.

Panificio Perrone does not directly store complete payment card data. Such data is processed by the respective payment providers in accordance with their own terms and privacy policies.

Shipping and delivery data

To fulfil orders, we may process first name, last name, shipping address, phone number, email, order details, and other information necessary to prepare and deliver products, both for Italy and for the other EU countries served (Germany, Belgium, Austria, Spain, France, and the Netherlands).

Shipments are managed through GLS. The data necessary for delivery may therefore be shared with GLS and with partners of its European logistics network to enable shipping, package tracking, management of any storage, complaints or damages, and communication with the customer regarding delivery, including when this takes place towards other EU Member States.

If the customer chooses in-store pickup, order data is used to prepare the pickup at the physical store.

Customer account data

If you create or use a customer account, we may process account-related data such as email address, login credentials managed by the platform, saved addresses, order history, and preferences linked to the account.

Communication data

When you contact us by email, phone, chat, form, or other channels, we may process the information you provide, including identification data, contact details, message content, support requests, and information related to orders or products.

Newsletter and marketing consent data

When you subscribe to the newsletter through the website or give your consent to marketing during checkout or in the customer account area, we process your email address and your subscription status.

To document consent and manage the subscription correctly, we may also retain, within the limits made available by the systems used, the date and time of subscription, the source or form through which it was made, the version of the notice and consent statement shown at that time, any subscription confirmation, and subsequent changes to preferences, including withdrawal of consent.

In connection with the sending of communications, technical and delivery data may also be processed, such as delivery, non-delivery, spam reports, and unsubscribes.

If you have consented to the tracking of interactions with communications, we may also process information attributable to the individual recipient relating to email opens and selected links, such as the date and time of the interaction, the campaign and message concerned, the selected link, technical identifiers, IP address, and information about the device or email client, to the extent such data is made available by the tools used. This information is processed as described in the section “Measurement of email communications”.

Technical and browsing data

While using the website, technical data may be collected, including IP address, device type, browser, operating system, pages visited, interactions with the site, cart data, session data, cookies, and similar technologies.

The IP address or approximate geographic information may also be used to automatically detect the market from which the user is browsing, in order to show prices, availability, and conditions applicable to the country of origin; the final price and conditions are in any case determined by the delivery address entered at checkout.

For more information on cookies and similar technologies, please refer to our Cookie Policy.

Purposes and legal bases of processing

Order management and provision of services

We use personal data to receive, confirm, prepare, ship, and manage orders, to enable payment, to provide support, and to communicate with the customer regarding the purchase. The legal basis for this processing is the performance of the contract or the performance of pre-contractual measures requested by the data subject.

Payments and fraud prevention

Data necessary for payment is processed to complete transactions, verify payments, prevent fraud, and ensure the security of purchases. The legal basis is the performance of the contract, the legitimate interest in the security of the store, and, where applicable, compliance with legal obligations.

Shipping and pickup of orders

We use shipping data to deliver purchased products via GLS, including to the other EU countries served, or to arrange in-store pickup, when available and chosen by the customer. The legal basis is the performance of the sales contract.

Customer support and operational communications

We use personal data to respond to customer requests, handle complaints, provide after-sales support, send communications relating to orders, and maintain the relationship with the customer. The legal basis is the performance of the contract, compliance with legal obligations, or the legitimate interest in providing support and properly managing the relationship with the customer.

Tax, accounting, and legal obligations

We use personal data to comply with obligations required by law, including tax, accounting, and administrative obligations, requests from authorities, and retention of documentation relating to orders. The legal basis is compliance with legal obligations.

Direct marketing

Only if you give free, specific, informed and unambiguous consent may we use your email address to send you the Panificio Perrone newsletter, which may contain recipes, stories from the bakery, product news, benefits and discounts reserved for subscribers, offers, and other promotional communications.

The legal basis is the data subject's consent pursuant to Article 6(1)(a) of Regulation (EU) 2016/679 and Article 130 of Italian Legislative Decree 196/2003. Providing your email address for this purpose is optional, separate from purchasing products, and refusing consent does not prevent you from browsing the website or placing orders.

Where the subscription request expressly also includes individual measurement of interactions with emails, the consent given covers both receipt of commercial and promotional communications and tracking of opens and clicks, carried out to measure and improve campaign effectiveness. The use of tracking pixels and similar technologies is also subject to Article 122 of Italian Legislative Decree 196/2003. The methods and consequences of this tracking are described in the section “Measurement of email communications”.

The request for consent is presented neutrally, without pre-selected boxes, and subscription takes place only following a positive action by you. Before subscribing, you are provided with a short-form notice clearly stating both the sending of the newsletter and the measurement of opens and clicks, with a link to this Policy.

We may ask you to confirm your subscription through a message sent to the address provided (double opt-in), also to verify that the address actually belongs to the person who requested the subscription.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. You can unsubscribe from the newsletter using the link included in every email or by contacting us using the details in this Policy. You may also withdraw only your consent to tracking while continuing to receive the newsletter without individual measurement of opens and clicks, using the dedicated link or preference centre made available in the communications or by contacting us. We do not currently use SMS marketing.

Analytics and website improvement

We use analytics tools, including Google Analytics via Shopify's Google & YouTube channel and Microsoft Clarity, to understand how users interact with the site, improve the browsing experience, monitor the performance of the online store, and optimise content and features. Microsoft Clarity anonymously collects data relating to browsing behaviour, including mouse movements, clicks, and page scrolling, through session recordings and aggregated heatmaps.

When these tools involve the use of non-essential cookies or technologies, processing takes place on the basis of consent expressed through the cookie banner.

Marketing, advertising, and measurement

The website may use tools linked to Facebook & Instagram, Google & YouTube, and TikTok for marketing purposes, advertising measurement, custom or lookalike audiences, or similar purposes, where permitted by the user. When these tools involve the use of non-essential cookies or technologies, processing takes place on the basis of consent expressed through the cookie banner.

Website security

We use technical and browsing data to ensure website security and to prevent unauthorised access, misuse, fraud, or harmful activity. The legal basis is the data controller's legitimate interest in protecting the website, users, and the online store.

Shopify platform

Our online store is built and operated through Shopify, which provides the e-commerce platform, checkout, cart, payment tools, privacy tools, order-related services, and technical features necessary for the website to function, including automatic market localisation, management of country-specific sales conditions, collection of newsletter subscriptions, management of marketing preferences, and sending of communications through Shopify Email/Shopify Messaging.

Shopify may process users' personal data as a service provider or, in some cases, in its own independent capacity, depending on the services and features used.

Some data may also be processed by Shopify to provide, protect, improve, and develop its own services, as described in the applicable Shopify policies.

Providers and third parties

To manage the website and provide our services, we may share personal data with providers and third parties, to the extent necessary for the purposes described in this Policy. These parties may include:

Shopify, for the management of the e-commerce platform, checkout, cart, orders, payments, privacy tools, and related services, including the technical management of foreign markets and related shipping and checkout rules
Shopify Email/Shopify Messaging, for managing subscribers, marketing preferences, newsletter sending, and technical data relating to delivery and interactions with communications
Shopify Payments and payment providers, for payment processing
PayPal, for payments made via PayPal
Klarna, for payments and messages related to the Klarna services available on the site
Apple Pay, Google Pay, Shop Pay, and card networks, for their respective payment services
GLS, for shipping and delivery of orders in Italy and the other EU countries served
Google, for Google Analytics, Google & YouTube, and Google Merchant Center
Microsoft, for Microsoft Clarity, a behavioural analytics and session-recording tool
Meta, for Facebook & Instagram and related advertising tools
TikTok, for advertising and measurement features
Google Reviews Rocket, for displaying Google reviews
Messaging and Inbox, for chat, messaging, and customer support features
technical providers, consultants, tax, legal, or administrative professionals, when necessary
public authorities or authorised parties, when required by law

Providers process data in accordance with their respective policies and, where applicable, as data processors or independent data controllers.

Cookies and similar technologies

The website uses cookies and similar technologies for the technical operation of the store, to remember preferences, for statistical analysis, and, subject to consent, for marketing and advertising purposes.

Cookie consent is managed through Shopify's native cookie banner, which allows you to accept, reject, or customise preferences by category.

For detailed information, please refer to our Cookie Policy.

Newsletter and promotional communications

If you subscribe to the newsletter or consent to email marketing, we may send you recipes, stories from the bakery, product news, benefits and discounts reserved for subscribers, offers, and other promotional communications.

Before subscribing, you are provided with a short-form notice containing a link to this Policy. The short-form notice states that, by giving consent, you agree both to receive commercial and promotional communications and to the individual measurement of your interactions with emails, including opens and clicks. Subscription is voluntary and is not required to purchase our products. Your email address is added to the subscriber list only following a positive and unambiguous action by you; where enabled, the double opt-in procedure also requires confirmation via a link sent to the address provided.

The first email after confirmation may contain a welcome message and a brief introduction to the content you will receive. Each marketing communication identifies Panificio Perrone as the sender and contains a link allowing you to unsubscribe easily.

You may withdraw your consent in full at any time by clicking the unsubscribe link in the communications received or by contacting us using the details provided in this Policy. Unsubscribing stops future promotional communications and the related tracking.

You may also withdraw only your consent to the tracking of opens and clicks while continuing to receive the newsletter. To do so, you may use the dedicated link or preference centre made available in the communications or contact us using the details provided in this Policy. Your choice is recorded and subsequent communications are sent without individual measurement of interactions.

Even if you unsubscribe from promotional communications, we may continue to send you non-promotional communications relating to orders, accounts, payments, shipping, or support.

We do not disclose your email address to third parties for their own marketing purposes without specific and separate consent or another appropriate legal basis.

Measurement of email communications

Shopify Email/Shopify Messaging may process data relating to the sending and delivery of communications, failed deliveries, unsubscribes, spam reports, opens, selected links, and any sessions or orders attributed to a campaign. We use this information to manage the list, verify that messages are sent correctly, measure the effectiveness of communications, and improve campaign content, subject lines, structure, relevance, and frequency.

To detect the opening of an email, a tracking pixel or similar technology, normally invisible, may be embedded in the message. When the email program downloads images, this technology may communicate that the message associated with a specific recipient has been opened. The result may be affected by email program settings, image blocking, and systems that preload or protect content; therefore, open data may not always be accurate.

To detect clicks, links in communications may contain identifiers or pass through technical systems that record which link was selected, when the interaction occurred, and the campaign or recipient to which it relates. If you access the website after clicking, we may also attribute sessions, additions to cart, or orders to the campaign, subject to the privacy preferences applicable on the website.

Individual measurement of opens and clicks is carried out only for recipients who have received clear information about the tracking and have given the required consent. The legal basis is consent pursuant to Article 6(1)(a) of Regulation (EU) 2016/679 and, for the use of tracking pixels or similar technologies, Article 122 of Italian Legislative Decree 196/2003.

Interaction information may be used to produce statistics, understand interest in content, assess campaign performance, improve subsequent communications, and create segments based on the level of interaction. We do not make decisions based solely on this data through exclusively automated processing that produces legal effects or similarly significantly affects the data subject.

You may withdraw only your consent to tracking at any time without unsubscribing from the newsletter, using the dedicated link or preference centre in the communications or by contacting us. After withdrawal, future communications will be sent without individual measurement of opens and clicks; data strictly necessary for delivery, security, management of unsubscribes and spam reports, as well as genuinely anonymous or aggregated data that does not identify you, may continue to be processed. You may also withdraw consent in full through the unsubscribe link, stopping both promotional messages and related tracking.

When, after selecting a link in an email, you access the website, any analytics or marketing tools on the website operate in accordance with the preferences expressed through the cookie banner, where required.

Data retention

We retain personal data for as long as necessary for the purposes for which it was collected and to comply with legal, tax, accounting, or administrative obligations. In particular:

data relating to orders, payments, and invoicing is retained for the period required by applicable tax and accounting regulations
customer account data is retained until the account is deleted or for as long as necessary to provide the service, subject to legal retention obligations
data relating to support requests is retained for as long as necessary to handle the request and protect any related rights
data processed for marketing purposes is retained until consent is withdrawn or deletion is requested, subject to any legal obligations
data collected through cookies and similar technologies is retained as described in the Cookie Policy and in the settings of the respective tools

International transfers

Some providers used by the website, including Shopify, Google, Meta, TikTok, Klarna, PayPal, Microsoft, or other technical providers, may process personal data outside the European Economic Area.

In such cases, data transfer is based on tools and safeguards provided for by applicable law, such as adequacy decisions, standard contractual clauses, or other mechanisms recognised by law.

Data subject rights

Within the limits and conditions provided for by applicable law, you may exercise the following rights:

right of access to personal data
right to rectification of inaccurate or incomplete data
right to erasure of data
right to restriction of processing
right to object to processing
right to data portability
right to withdraw consent, where processing is based on consent
right to lodge a complaint with the competent supervisory authority

You can exercise your rights by contacting us at panificioperronematera@gmail.com or via certified email (PEC) at panificioperrone@pec.it. Before acting on a request, we may need to verify the identity of the requester.

Complaints

If you believe that the processing of your personal data infringes applicable law, you can contact us using the details provided in this Policy. You also have the right to lodge a complaint with the competent supervisory authority for the protection of personal data.

Data security

We adopt reasonable technical and organisational measures to protect the personal data processed through the website. However, no data transmission or storage system can be considered completely secure. We encourage you to use secure channels and not to share unnecessary confidential information.

Minors

The website is not specifically directed at minors. We do not knowingly collect personal data from minors without the consent of those exercising parental responsibility, where required by law. If you believe that a minor has provided us with personal data without authorisation, please contact us using the details provided in this Policy.

Links to third-party websites

The website may contain links to third-party sites, platforms, or services. We are not responsible for the privacy practices, content, or security of sites or services not directly operated by us. We encourage you to review the privacy policies of third parties before using their services.

Updates to this Policy

This Privacy Policy may be updated over time, for example in the event of changes to the services used, the website's features, or applicable law. Any updates will be published on this page, indicating the date of last update.

Contact