Privacy Policy

1. Who processes your dataThe data controller

The controller of your personal data, under Article 13 of Regulation (EU) 2016/679 ("GDPR"), is:

KEY di Ennio Baglioni
Via Giuseppe di Vittorio, snc, 65123 Pescara (PE), Italy
VAT number: IT01932120684
Email: info@keygadgets.it, phone: +39 338 874 3541

On this page KEY di Ennio Baglioni is referred to as the "Controller". The websites www.keygadgets.it and www.keygadgets.eu are referred to as the "Site".

2. What data we collectWhat you give us and what the Site records

• Registration and contact data: first name, last name, email, phone, shipping and billing addresses, company name, VAT number and tax code if you provide them.
• Order data: products purchased, amounts, chosen payment method, shipping status, returns and withdrawal requests.
• Payment data: you enter your card or PayPal account details directly on the PayPal website. We only receive the payment result and the data needed to link it to the order. If you choose PayPal Pay in 3, PayPal may check your creditworthiness as an independent controller, under its own privacy policy. For bank transfers we receive the data contained in the bank transfer.
• Messages and support requests: what you write to us by email, phone, WhatsApp or through the forms on the Site.
• Browsing data: IP address, browser and device type, pages visited, products added to the cart. Some of this data is collected through cookies (see section 12).

We do not process health data or other special categories of data under Article 9 GDPR.

3. Why we use it and on what legal basisPurposes and legal bases

a) Managing accounts, orders and support

Creating and managing your account, receiving and processing orders, collecting payments, shipping products, handling returns, withdrawals, warranties and technical support, and replying when you contact us.

Legal basis: performance of the contract or of pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).

b) Complying with legal obligations

Issuing and keeping invoices and accounting records, meeting tax obligations and requests from the authorities.

Legal basis: legal obligation (Art. 6(1)(c) GDPR).

c) Protecting the Site and our rights

Preventing fraud and abuse, protecting the Site from unauthorised access and spam, and defending our rights in case of disputes.

On the forms of the Site (for example registration, contact and return requests) we use the Google reCAPTCHA service, which tells people apart from automated programs. To do this, reCAPTCHA sends Google some device and browsing data, such as the IP address. Google processes this data under its own privacy policy (policies.google.com/privacy).

Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).

d) Artificial intelligence tools

To translate messages from customers who write to us in other languages and to prepare our replies, we may use artificial intelligence tools from external providers, such as Claude by Anthropic. We only enter the data needed to answer your request. Every reply is checked by a person on our team before it is sent, and we do not use these tools to make automated decisions about you.

Legal basis: legitimate interest of the Controller in handling customer requests quickly in several languages (Art. 6(1)(f) GDPR).

e) Sending you offers and news

Sending you newsletters, offers, discounts and reminders about products left in your cart by email. Details are in section 4.

Legal basis: your consent (Art. 6(1)(a) GDPR) or, if you are already our customer, Article 130(4) of the Italian Privacy Code (Legislative Decree 196/2003).

f) Statistics and advertising

Understanding how the Site is used, measuring the results of our advertising campaigns and showing you relevant ads, with Google Analytics, Google Ads, the Meta Pixel (Facebook and Instagram) and Microsoft Clarity. Clarity records clicks, scrolling and movements on the pages in anonymous form, to help us understand what to improve on the Site.

Legal basis: your consent to the related cookies (Art. 6(1)(a) GDPR), which you can refuse or withdraw at any time.

4. Promotional emailsYou decide whether to receive them

4.1. We send you newsletters and offers if you have subscribed or given your consent, for example when registering.

4.2. If you have already bought from us, we may write to the email address you gave us when buying to offer you products similar to those you purchased, even without specific consent, as allowed by Article 130(4) of the Italian Privacy Code.

4.3. If you ask not to receive promotional emails any more, we keep only your email address in a suppression list, to make sure we do not write to you again. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).

5. Mandatory and optional dataWhat happens if you do not give us some data

5.1. The data requested to register, order, pay and receive the goods is necessary: without it we cannot handle the order or provide support.

5.2. Consent for the newsletter and for statistics and advertising cookies is optional. If you do not give it, you can still browse and buy on the Site.

6. Who we may share it withOnly those we need to work with

6.1. Your data is processed by us and by the people who work with us, who are authorised and instructed to do so.

6.2. For some activities we rely on external providers, who process the data only on our behalf and under our instructions as processors, or as independent controllers for the services they offer directly to you:

• Site and email hosting provider (Hostinger);
• technicians who maintain the Site;
• payment services (PayPal) and our bank;
• couriers and carriers who deliver the products;
• tax advisor and accountant;
• Google, for the Analytics, Ads, Tag Manager and reCAPTCHA services;
• Microsoft, for the Clarity service, only if you have consented to the related cookies;
• Meta Platforms, for the Facebook and Instagram Pixel, only if you have consented to advertising cookies;
• Anthropic, for the Claude artificial intelligence tool (see section 3.d);
• WhatsApp (Meta Platforms), only if you choose to write to us using the WhatsApp button or link on the Site. In that case your number and messages go through WhatsApp, under WhatsApp's terms and privacy policy. We do not contact you on WhatsApp unless you write to us first.

6.3. Data may be disclosed to the authorities when required by law or to defend our rights.

6.4. We do not sell your data and we do not publish it.

7. Data transferred outside the EUWith the safeguards required by the GDPR

Some providers, such as Google, Meta, Microsoft, Anthropic and PayPal, may also process data outside the European Union, for example in the United States. In these cases the transfer takes place with the safeguards required by the GDPR, such as adequacy decisions of the European Commission (including the EU-US Data Privacy Framework) or the standard contractual clauses approved by the Commission.

8. How long we keep itNo longer than necessary

• Account: as long as it is active. You can ask for it to be deleted at any time.
• Orders, invoices and accounting records: 10 years, as required by law (Art. 2220 of the Italian Civil Code).
• Support and warranty requests: for the time needed to handle them and, after that, for the period in which disputes may arise.
• Promotional emails: until you withdraw your consent or object and, in any case, no longer than 24 months from your last purchase or your last contact with us.
• Google Analytics: 2 months for event data and 14 months for user data, after which they are deleted automatically.
• Cookies: for the duration shown in the cookie banner.

When these periods end, the data is deleted or made anonymous.

9. How we protect your dataTechnical and organisational measures

We process data with IT tools and, when needed, on paper, using appropriate measures to prevent loss, theft, unauthorised use or access. The Site uses an encrypted connection (HTTPS) and access to the data is limited to authorised people.

10. Your rightsArticles 15 to 22 GDPR

At any time and free of charge you can:

• find out whether we process your data and get a copy (access);
• correct or complete wrong or incomplete data (rectification);
• ask for your data to be deleted, except data we must keep by law;
• ask us to restrict processing;
• receive the data you gave us in a commonly used format and ask for it to be sent to another controller (portability);
• object to processing based on legitimate interest and, in any case, to promotional emails;
• withdraw your consent, without affecting processing carried out before the withdrawal.

You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

11. How to exercise your rightsA few clicks or an email

For access and deletion you can use these forms directly:

• Request your data (right of access)
• Ask for your data to be deleted

For all other rights, write to us at info@keygadgets.it. We reply within one month of your request, as required by the GDPR. If necessary, we may ask you for information to verify your identity.

12. CookiesWhat they are and how to manage them

12.1. Cookies are small files that the Site saves on your device.

12.2. Technical cookies: they are needed for the Site to work, for example to keep products in the cart, remember the chosen language and currency and keep you logged in to your account. They do not require consent.

12.3. Statistics and advertising cookies: they help us understand how the Site is used and measure advertising campaigns (Google Analytics, Google Ads, Meta Pixel, Microsoft Clarity). They stay switched off until you give your consent in the cookie banner. You can give, refuse or change your consent at any time.

12.4. You can also delete or block cookies in your browser settings, in the privacy section. If you block technical cookies, some functions of the Site, such as the cart, may not work.

13. Changes to this privacy policy

We may update this privacy policy to reflect new rules or changes in our services. The updated version is always published on this page, with the date of the last update at the top.