Skip to content

Information on the processing of personal data for purchase orders



The Data Controller is Hijab Paradise Srl with registered office in Via Cervese n. 381, Cesena (FC); Tax code and VAT number 04627940408; REA No. FO-427741, PEC reachable for any communication or request regarding your data also at the email address for the provisions of Regulation 2016/679 and Legislative Decree. Legislative Decree 101/18

Types of data processed

To proceed with the purchase and receive the product, you will be asked to provide the following data: name, surname, e-mail, telephone number, Fiscal Code and VAT number (OPTIONAL), shipping address, payment method, username and password if you access from the reserved area. If quick payment methods are selected, the personal data linked to the type of payment selected will be processed.

Purpose of the processing

Your personal data will be processed only for the following purposes:

  • to proceed with the purchase, in fact, as provided by art.6, lett. b), of Regulation 2016/679, the processing of data is lawful when this is "necessary for the execution of a contract of which the interested party is a party" ;
  • to access the reserved area (optional), as required by art.6, letter. a), of Regulation 2016/679, the processing of data is lawful when "the interested party has expressed consent to the processing of their personal data for one or more specific purposes";
  • for related services such as customer care and access to the reserved area, pursuant to art. 6, letter. a), of Regulation 2016/679;
  • for browsing the site and processing anonymous statistics in relation to the data acquired from the user's browsing experience, pursuant to Regulation 2016/679 art. 6, letter. f);
  • fulfillment of administrative and legal obligations connected with our activity as stated by the regulatory provisions of the GDPR Regulation, art. 6, letter. c), processing of data is lawful when "it is necessary to fulfill a legal obligation to which the data controller is subject" ;
  • technical information relating to navigation (where collected through acquisition, for example, of the IP resource or cookies), as required by art. 6, letter. f) of EU Regulation 2016/679;

The site uses technical/session cookies and also third-party cookies better described in the specific information found here ( Extended Cookie Information ).

Mandatory or optional nature of providing data, consequences of any refusal and legal basis of processing

Except as specified for VAT number and tax code and reserved area, for the purposes of n. 1 to 6, the provision of your personal data is mandatory, because otherwise we will not be able to proceed with the conclusion of the order or send the purchased product.

Treatment methods

The processing will be carried out both on paper and with the aid of electronic and automated tools; in particular, among others, IT, telephone, telematic, audiovisual, cable or satellite, magnetic, paper and manual processing tools may be used and stored on servers located within the European Union. Your data will be processed under the authority of the Data Controller, only by persons specifically appointed, authorized and trained in processing pursuant to art. 29 of EU Reg. 2016/679. Suitable safety measures will be observed pursuant to articles. 5 and 32 of EU Regulation 2016/679 to prevent the loss of your data, illicit or incorrect use, unauthorized access, involuntary deletion. Each person in charge of processing is bound to the principles of lawfulness and confidentiality in processing. Your personal data is processed in compliance with applicable law and using adequate security measures, in compliance with the legislation in force also pursuant to articles. 5 and 32 of EU Regulation 2016/679

To whom can we transmit your personal data?

Your personal data may be communicated within the EU, in full compliance with the provisions of EU Regulation 2016/679, to the following subjects: to public authorities, where this is required by law or at their request; to the external structures and/or companies that the Data Controller uses to carry out related or instrumental activities; to external consultants. The Data Controller will appoint data controllers pursuant to art. 28 third parties who process data in your name and on your behalf.

Duration of Treatment

Without prejudice to legal obligations, the personal data we process will be kept for a specific period, based on the needs of jurisdictional protection of rights and contractual needs and obligations, also established by law and in any case for the entire time necessary to manage reporting and purchasing.

Your rights

At any time you can exercise the rights referred to in the articles. 15, 16, 17, 18, 20 and 21 of EU Regulation 2016/679, by sending us a written communication to the email address: . You can request: confirmation of the existence or otherwise of your personal data in our databases, verify its accuracy or request its updating, rectification, integration; access, rectification, deletion of your personal data or restriction of processing; the cancellation, transformation into anonymous form or blocking of your personal data if you believe they are being processed in violation of the law.

Privacy Guarantor complaint

We remind you that if you think that one of your rights has been violated, you have the possibility to lodge a complaint with the Privacy Authority, which can be contacted on the website .