Last updated: 2 November 2026

This policy explains how the personal data of users who visit artappeti.com is processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data controller

ART. TAPPETI DI ESKANDARZADEH ALI
Registered office: Via Primaticcio Francesco, 209 – 20147 Milan (MI), Italy
VAT 09392250966 – Tax code SKNLAI78M24Z224B – PEC: art.tappeti@pec.it
Email: info@artappeti.com – Phone: +39 02 3943 0925

2. What data we collect and why

a) Contact requests and quotes

When you fill in a contact form (for example on the Contact or Fringe Reweaving pages) we collect your first and last name, email, phone number, the service of interest, your message and any photos of the rug you choose to attach.
Purpose: to reply to your request and prepare a quote.
Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
Retention: for as long as needed to handle the request, and in any case no longer than 24 months, unless a contractual relationship arises.

b) Online purchases and customer account

To manage orders placed on the site we collect personal details, billing and shipping address, email, phone, order details and, if you create an account, your login credentials.
Purpose: to conclude and perform the sales contract, ship products, manage returns, withdrawal and warranty, and comply with tax and accounting obligations.
Legal basis: performance of the contract (Art. 6.1.b) and legal obligation (Art. 6.1.c).
Retention: billing data is kept for 10 years as required by tax law (Art. 2220 of the Italian Civil Code); account data until the account is deleted.

c) Payments

Card payments are processed by Stripe (Stripe Payments Europe Ltd., Ireland), acting as an independent data controller. We do not store your full card details. Stripe’s policy: stripe.com/privacy. For bank transfer or cash on delivery we only process the data needed to record the payment.

d) WhatsApp chat

If you contact us via the WhatsApp button, the conversation takes place on the platform of WhatsApp Ireland Ltd. (Meta group), subject to its own privacy policy. We use your number and messages only to respond to your request.

e) Browsing data and cookies

The systems that run the site acquire, during normal use, certain technical data (IP address, browser type, pages visited, date and time) necessary for the operation and security of the site (legitimate interest, Art. 6.1.f). For cookies and third-party tools (e.g. the Google reviews widget) see our Cookie Policy: non-technical cookies are used only with your consent, which you may change at any time.

3. Nature of the provision

Providing the data marked as mandatory in the forms is necessary to respond to your request or fulfil the order; without it we cannot proceed.

4. Recipients of the data

Data is processed by the controller and its authorised collaborators and may be shared, only as necessary, with providers acting as data processors or independent controllers: the site’s hosting and maintenance provider, email delivery service, couriers and shippers, payment institutions (Stripe, banks) and the tax advisor/accountant. Data is neither disclosed publicly nor sold to third parties.

5. Transfers outside the EU

Some providers (e.g. Stripe, Meta/WhatsApp, Google) may transfer data to non-EU countries, in particular the United States, on the basis of the EU–US adequacy decision (EU-US Data Privacy Framework) or the Standard Contractual Clauses approved by the European Commission.

6. Your rights

At any time you may request access to your data, its rectification or erasure, restriction of processing, data portability, and object to processing based on legitimate interest (Articles 15–22 GDPR). Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise your rights, write to info@artappeti.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

7. Changes

This policy may be updated. The version in force is always published on this page with the date of the last update.