Skip to content




The Data Controller is Hijab Paradise Srl , Via Cervese 381, 47521, Cesena (FC), PEC who can be reached for any communication or request regarding your data also at the e-mail address for provisions of Regulation 2016/679 and Legislative Decree 101/18 

Following consultation of this site, data relating to identified or identifiable natural and/or legal persons may be processed. 




The processing connected to the web services of this site takes place at the aforementioned headquarters and on a third-party server of the Shopify hosting platform (located in Canada) and is handled only by personnel in charge of processing, or by any persons in charge of occasional maintenance operations and secretariat. The data released may be communicated to third parties in relation to services carried out for the data controller; these subjects will be appointed based on the art. 28 of EU Reg. 2016/679 data controllers.  


Navigation data : The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site. 

Data provided voluntarily by the user : the optional, explicit and voluntary sending of personal data for contacts / requests (name, surname, requests, e-mail address) to the addresses indicated on this site as well as the forms involves the subsequent acquisition of the data of the sender, necessary to respond to requests, as well as any other personal data included in the message or forms. Specific information will be included under each service offered. 

Cookies: This section of the sites sends visitors some files commonly known as cookies. Cookies will be used by the computer browser exclusively to store the website user's session information. The use of cookies is an industry standard and browsers store them in a special folder. If you prefer not to receive cookies or wish to be informed in advance, you can set your web browser accordingly for internet browsing. For further information on cookies ( cookie policy link ) 


Apart from what is specified for navigation data, the user is free to provide personal data contained in the request forms, reserved area registration, subscription to the newsletter or otherwise indicated in contacts. Their failure or partial provision may make it impossible to obtain what is requested. 


Personal data are processed with IT tools for the time strictly necessary to achieve the purposes for which they were collected and are compared with those that may already be in possession of the data controller for the performance of activities or services. In the event of a discrepancy, the person in charge may contact the sender to verify the integrity of the data or arrange for its possible correction. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. 


Defense in court 

The User's personal data may be used for the defense by the Owner in court or in the preparatory stages of its possible establishment, against abuses in the use of the same or related services by the User.
The User declares to be aware that the Owner may be required to reveal data upon request by public authorities. 

Specific information 

Upon request of the User, in addition to the information contained in this privacy policy, this Site may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data. 

System logs and maintenance 

For needs related to operation and maintenance, this Site and any third-party services used by it may collect system logs, i.e. files that record interactions and which may also contain personal data, such as the User's IP address. 

Retention period 

Personal data will be stored in compliance with legal obligations and as strictly connected to the purposes of the processing and in compliance with the relevant regulations. 

Recipients of the data 

Personal data will not be disclosed. The personal data provided for purchasing and ordering products may instead be communicated to 

 1. subjects to whom such communication must be made in order to fulfill or to require the fulfillment of specific obligations established by laws, regulations and/or community legislation; 

2. external natural and/or legal persons who provide services instrumental to the Data Controller's activities (e.g. call centers, suppliers, couriers, consultants, companies, bodies, professional firms). These subjects will act as data controllers. 

Transfer of data outside the EU 

It may happen that the Data transits or is hosted on servers owned or owned by our partners, located outside the European Union. These servers may be located throughout the world, in countries whose laws may provide a different level of protection than ours. However, we are committed to taking the necessary measures to maintain an adequate level of privacy and security. For example, we may require our subcontractors and partners to implement measures to ensure the level of protection required by applicable laws on Personal Data. We will inform you where the server is located outside the European Union. 

To implement the functionality of the site we use cookies managed by companies based in the United States of America. To date, given the decision of the Court of Justice to declare the incompatibility of the Privacy Shield, an agreement signed by the EU-USA legitimizing the transfer of data to the USA based on the suitability of the security measures adopted aimed at complying with the legislation protecting data data during the transfer, we are no longer able to guarantee that the adoption of suitable security measures prepared by us, in addition to the guarantees of compliance with the law declared by US companies, are able to fully comply with the provisions of the legislation provided for by the Regulation EU 679/2016 (GDPR), to find out more read the cookie information. 

Information not contained in this policy 

Further information in relation to the processing of personal data may be requested at any time from the Data Controller using the contact information. 


The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same from the Data Controller, to know its content and origin, to verify its accuracy or request its integration , the cancellation, updating, rectification, transformation into anonymous form or blocking of personal data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller who can be contacted at . It is also possible to lodge a complaint with the Guarantor authority for the protection of personal data ( ) 

Last updated 03 October 2023