Privacy Policy
Last updated: March 2026
This Privacy Policy describes how AdHoram Srls collects, uses and protects the personal data of users who visit or make purchases on the website www.adhoram.com (“Website”), in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Italian legislation. This information is provided pursuant to Article 13 of the GDPR.
Data Controller
The Data Controller is:
AdHoram Srls
Viale Cortina d’Ampezzo 221
00135 Rome (Italy)
Email: info@adhoram.com
Types of Data Collected
During navigation and use of the Website, the following categories of personal data may be collected.
Data provided voluntarily by the user
Such as: name and surname, email address, billing and shipping address, telephone number, payment information necessary to complete a purchase, any information provided when contacting customer support or subscribing to the newsletter,
Browsing data
Certain information is collected automatically when visiting the Website, including: IP address, browser type and version, operating system, date and time of access, pages visited and navigation behaviour. These data are collected through technical systems and analytics tools.
Cookies and tracking technologies
The Website uses technical, analytical and marketing cookies to ensure proper functioning, improve performance and understand how visitors interact with the Website. More detailed information is available in the Cookie Policy.
Purposes of Processing
Personal data are processed for the following purposes:
• processing and managing orders and payments
• shipping purchased products
• providing customer assistance and responding to enquiries
• managing newsletter subscriptions and marketing communications (subject to consent)
• improving the functionality and performance of the Website through analytics
• preventing fraud and ensuring the security of transactions
• fulfilling legal, accounting and tax obligations
Legal Basis for Processing
The processing of personal data is based on the following legal grounds:
Performance of a contract
for order processing, payment management and shipment of products.
Consent of the data subject
for marketing communications, newsletters and non-essential cookies.
Legal obligations
for compliance with accounting, tax or regulatory requirements.
Legitimate interest of the Controller
for website security, fraud prevention and service improvement.
Processing Methods
Personal data are processed using electronic and digital tools in accordance with principles of lawfulness, fairness and transparency.
Appropriate technical and organisational security measures are adopted to protect data from unauthorized access, loss, disclosure or misuse.
Personal data are retained only for the time necessary to achieve the purposes for which they were collected.
Data Recipients
Personal data may be shared with trusted service providers necessary for operating the Website and delivering services, including: e-commerce platform providers (e.g. Shopify), payment processors, shipping and logistics providers, IT and hosting service providers, professional advisors (accountants or legal consultants), analytics or marketing platforms (such as Google or Meta), subject to user consent. These entities process personal data either as Data Processors pursuant to Article 28 GDPR or as independent data controllers, depending on their role.
Personal data will never be sold to third parties.
Data Transfer Outside the European Union
Some personal data may be processed outside the European Union through service providers used to operate the Website (for example Shopify, payment providers, analytics services or marketing platforms).
Where such transfers occur, they are carried out in accordance with Articles 44–49 of the GDPR and rely on appropriate safeguards, such as: Standard Contractual Clauses approved by the European Commission, or adequacy Decisions, including the EU–US Data Privacy Framework, where applicable. These mechanisms ensure that personal data receive an adequate level of protection even when transferred internationally.
Data Retention Period
Personal data are stored only for the time necessary to fulfil the purposes described above.
In particular:
• Order and billing data: retained for 10 years, as required by Italian tax and accounting legislation.
• Marketing data: retained until consent is withdrawn. Users may withdraw consent at any time via the unsubscribe link in communications or by contacting the Controller.
• Technical and browsing data: retained for up to 24 months.
After these periods, data will be deleted or anonymised.
Data Subject Rights
Users may exercise the rights provided by Articles 15–22 of the GDPR, including the right to:
• obtain confirmation as to whether personal data are being processed
• access their personal data
• request rectification or deletion of data
• request restriction of processing
• object to processing
• receive their data in a portable format
• withdraw consent at any time
Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
More information: www.garanteprivacy.it
Requests can be sent to: info@adhoram.com
Cookies
The Website uses cookies to ensure proper functioning and improve the browsing experience.
Users may manage their cookie preferences through the cookie consent banner shown during the first visit to the Website. More information is available in the Cookie Policy.
Updates to This Policy
AdHoram Srls reserves the right to update this Privacy Policy to reflect legal, operational or technological developments.
The most recent version will always be published on this page, with the update date indicated at the top of the document.
Contact
For any questions regarding this Privacy Policy or the processing of personal data, please contact:
AdHoram Srls
Viale Cortina d’Ampezzo 221
00135 Rome (Italy)
Email: info@adhoram.com
Website: www.adhoram.com
