Privacy Policy

Last updated: August 12 2026

This Privacy Policy explains how Fashion Broker di Baldini Chanel Eva (“FAB,” “we,” “us,” or “our”) collects, uses, and protects personal data when you visit fashionbroker.it (the “Website”) and use its contact form. This policy is provided in accordance with the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and applicable Italian data protection law.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Fashion Broker di Baldini Chanel Eva Via Sant’Antonio, 25 — 59100 Prato (PO), Italy VAT / Tax ID: 02568930974 REA: PO-613799 PEC: baldinichaneleva@pec.it

For any question about this policy or about how your data is handled, you can contact us using the details above or via the contact form on the Website.

2. What Data We Collect

The Website is a simple, informational one-page site. We do not operate an online store, user accounts, or newsletter sign-up. The only personal data we collect is what you voluntarily provide through our contact form:

  • Name
  • Email address
  • Message content (and any other information you choose to include in your message)

In addition, like most websites, our hosting infrastructure automatically logs limited technical data for security and functioning purposes when you visit the Website, such as your IP address, browser type, device type, and pages visited. This data is collected automatically as part of standard server operation.

If the Website uses cookies or similar tracking technologies (e.g. for analytics), this is described separately in our Cookie Policy, which you can consult for details and to manage your preferences.

3. Purpose and Legal Basis

  • Responding to your inquiry sent via the contact form Data used: name, email, message Legal basis: Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract, or Art. 6(1)(f) GDPR — our legitimate interest in responding to business inquiries
  • Ensuring website security and preventing abuse Data used: IP address, technical/log data Legal basis: Art. 6(1)(f) GDPR — legitimate interest in protecting the Website’s security and integrity
  • Complying with legal obligations Data used: business records as required by law Legal basis: Art. 6(1)(c) GDPR — legal obligation

We do not use your data for automated decision-making or profiling, and we do not sell or rent your personal data to third parties.

4. How Long We Keep Your Data

We retain data submitted through the contact form only for as long as necessary to handle your inquiry and any related follow-up correspondence, and in any case no longer than 24 months from your last contact with us, unless a longer retention period is required to comply with a legal obligation (e.g. accounting or tax law) or to establish, exercise, or defend legal claims.

Technical/server log data is typically retained for a limited period (generally no longer than 6–12 months) for security purposes, after which it is deleted or anonymized.

5. Who We Share Your Data With

We do not sell your personal data. We may share it, strictly to the extent necessary, with:

  • Service providers who support our operation of the Website, such as our website hosting provider and email service provider, acting as data processors under our instructions
  • Professional advisors (e.g. accountant, legal counsel), where necessary
  • Public authorities, where required by law

Any third-party service provider we use is required to process personal data only for the purposes we specify and in line with GDPR requirements.

6. International Data Transfers

We aim to use service providers based within the European Economic Area (EEA) wherever possible. If any provider is located outside the EEA, we ensure an adequate level of protection is in place — for example, through the European Commission’s Standard Contractual Clauses, an adequacy decision, or another legally recognised safeguard.

7. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”), where applicable
  • Restrict the processing of your data in certain circumstances
  • Object to processing based on our legitimate interest
  • Data portability, where technically applicable
  • Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal
  • Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it), or with the supervisory authority of your own EU member state

To exercise any of these rights, please contact us at the details listed in Section 1.

8. Data Security

We take reasonable technical and organisational measures to protect the personal data we process against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Website is intended for a general business audience and is not directed at children. We do not knowingly collect personal data from individuals under the age of 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The “Last updated” date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Fashion Broker di Baldini Chanel Eva Via Sant’Antonio, 25 — 59100 Prato (PO), Italy PEC: baldinichaneleva@pec.it

This document is a general-purpose Privacy Policy template drafted for a simple, contact-form-only business website. It is not a substitute for legal advice — before publishing, we recommend having it reviewed by a lawyer or data protection consultant to confirm full compliance with your specific data processing activities, hosting setup, and any analytics/cookie tools in use.