Privacy policy

Last updated: 26 October 2026

1. Data controller

Ennevi di Nardo e Valentino Snc
Via XXIV Maggio 12/b, 37126 Verona (VR), Italy
VAT number: IT00276290236
Email: info@ennevifoto.com – Phone: +39 340 890 8941

2. What data we collect

  • Order and billing data: first and last name, email, phone number, address and, if you request an invoice, tax code, VAT number and SDI recipient code.
  • Account data, if you choose to register: email, password (stored encrypted), order and download history.
  • Payment data: handled directly by Stripe and PayPal. We never see or store your card details.
  • Browsing data and cookies: IP address and technical data needed for the website to work. See our Cookie Policy for details.
  • Messages you send us by email, phone or through customer support.

3. Why we use it and on what legal basis

  • Processing orders, payments and downloads of the files you purchase, and answering your requests: performance of a contract (Art. 6.1.b GDPR).
  • Tax and accounting obligations (invoices, records): legal obligation (Art. 6.1.c GDPR).
  • Website security and fraud prevention: legitimate interest (Art. 6.1.f GDPR).
  • Non-essential cookies (statistics, preferences): only with your consent, which you can withdraw at any time from the cookie banner.

We do not use your data to send you advertising without your consent, and we never sell it.

4. Who we share it with

Only with the providers we need to run the shop, appointed as data processors or acting as independent controllers:

  • Hostinger (website hosting);
  • Stripe and PayPal (payments);
  • the website’s email delivery service (order confirmations and notifications);
  • Zendesk (customer support);
  • our accountant and, where required, the competent authorities.

Some of these providers may process data outside the European Union (for example in the United States). In these cases, transfers are covered by the safeguards required by the GDPR (EU-US Data Privacy Framework or Standard Contractual Clauses).

5. How long we keep it

  • Orders and invoices: 10 years, as required by Italian tax law.
  • Account: until you ask us to delete it.
  • Support requests: for as long as needed to handle them.
  • Cookies: for the duration stated in the Cookie Policy.

6. Your rights

At any time you can ask us to access, correct or delete your data, restrict its use, receive it in a portable format, or object to its processing (Arts. 15–22 GDPR). If you have given consent, you can withdraw it whenever you like.

Write to info@ennevifoto.com: we will reply within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

7. Changes

We may update this policy; the valid version is always the one published on this page, with its last updated date.