Last updated: 31 October 2026

This notice describes how we process the personal data of visitors to the website rivaceramiche.com and of people who contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

Data controller

Annalisa Riva – Riva Ceramiche
Via Filippino degli Organi, 7 – 20135 Milano (MI)
VAT no. IT04061860161
Email: tistan.lisa@gmail.com

What data we collect

Browsing data: the systems that run the website automatically record some technical information (IP address, browser type, pages visited, date and time). It is used only to keep the website working and secure.
Data you send us: when you use the “Write to me” form or contact us by email or phone, we process your name, email address, phone number (if you provide it) and the content of your message.
Order data: if you decide to buy a piece, we process the data needed to complete the sale and ship it (name, delivery address, contact details, billing details).

Why we process them and on what legal basis

Answering your requests and giving you information about the pieces – steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Managing sales, shipping and any returns – performance of a contract (Art. 6(1)(b) GDPR).
Meeting tax and accounting obligations – legal obligation (Art. 6(1)(c) GDPR).
Keeping the website secure and preventing abuse – legitimate interest of the controller (Art. 6(1)(f) GDPR).
Collecting aggregate visit statistics with Google Analytics – only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from “Cookie preferences”.

We do not use your data for profiling or to send you advertising without your consent.

How long we keep them

Messages and information requests: for as long as needed to reply, and in any case no longer than 24 months [to be completed].
Sales and invoice data: 10 years, as required by tax law.
Google Analytics statistical data: 14 months.
Browsing data: for the technical period set by the hosting provider [to be completed].

Who they may be shared with

The data are processed by Annalisa Riva and may be shared only with the providers who help us run the website and manage orders, appointed as data processors where required:

Hostinger International Ltd – website hosting and email services [server location to be verified].
Couriers and shipping services – only in case of purchase.
Accountant or tax advisers – to meet legal obligations.
Google Ireland Ltd – for Google Analytics, only with your consent, and for the map, only with your consent or if you choose to display it (see Cookie Policy).

The data are not made public or sold to third parties.

Transfers outside the European Union

Some providers, such as Google, may process data in the United States. In these cases the transfer is based on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.

Your rights

You can ask at any time to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format (Arts. 15-22 GDPR). Just write to tistan.lisa@gmail.com.

If you believe the processing does not comply with the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).