Personal Data Protection and Processing Policy
Personal Data Protection and Processing Policy
At Giovane Gentile Albania, we value the trust that our customers place in us. Protecting personal data is an important part of that trust and an essential responsibility in the way we operate our business, manage orders, provide customer support and communicate with customers.
This Personal Data Protection and Processing Policy explains how Giovane Gentile Albania may collect, use, store, protect, disclose and process personal data when customers visit our website, place an order, contact our team, subscribe to communication, request support or interact with our services.
Our aim is to handle personal data with transparency, responsibility, accuracy and respect. We process personal data only when necessary for legitimate business purposes, legal obligations, customer service, order fulfilment or where consent has been given.
By using the Giovane Gentile Albania website or services, customers acknowledge that their personal data may be processed according to this policy.
1. Data Controller
For the purposes of this policy, Giovane Gentile Albania may act as the data controller for the personal data collected and processed through its website, customer service channels and business operations.
The data controller is responsible for determining why and how personal data is processed. Under Albanian data protection terminology, a controller is the person or entity that determines the purposes and means of personal data processing.
Business Name: Giovane Gentile Albania
Website: [Insert website URL]
Email: [Insert email address]
Phone: [Insert phone number]
Address: [Insert business address]
Customers may contact us through the details above for questions related to personal data, privacy, order information or the exercise of data protection rights.
2. What Personal Data Means
Personal data means any information relating to an identified or identifiable individual. This may include information that identifies a customer directly, such as name, phone number or email address, as well as information connected to an order, delivery, payment status or customer communication.
For an online fashion and retail business, personal data may be collected when a customer browses the website, creates an account, places an order, contacts support, subscribes to marketing, requests a return or exchange, participates in promotions or communicates with our team.
We aim to collect only the information that is necessary for the specific purpose of the service requested by the customer.
3. Personal Data We May Collect
Giovane Gentile Albania may collect and process different categories of personal data depending on how customers interact with us.
This may include:
Identification information
Such as full name, surname, customer account name or order identity information.
Contact information
Such as email address, phone number, delivery address, billing address and communication details.
Order information
Such as products purchased, sizes selected, quantities, order date, order number, delivery method, payment status, return or exchange history and customer preferences related to the order.
Payment-related information
Such as selected payment method, payment confirmation, transaction status or payment reference. Full card details are generally processed by secure third-party payment providers and are not intentionally stored by Giovane Gentile Albania.
Delivery information
Such as delivery address, courier details, shipment tracking information, delivery status, delivery attempts and communication required for successful delivery.
Customer support information
Such as messages, requests, complaints, return reasons, exchange requests, photos sent for damaged or defective items, and communication history.
Marketing information
Such as newsletter subscription status, promotional communication preferences, campaign interaction and consent where required.
Technical information
Such as IP address, browser type, device information, website activity, cookies, analytics data and information related to website functionality.
Legal and compliance information
Such as records required for accounting, tax, dispute handling, fraud prevention, consumer protection, legal claims or regulatory obligations.
4. How We Collect Personal Data
Giovane Gentile Albania may collect personal data directly from the customer or automatically through digital systems.
Personal data may be collected when a customer:
Places an order through our website.
Creates or uses a customer account.
Contacts our customer support team.
Subscribes to newsletters or promotional communication.
Requests a return, exchange or refund.
Provides delivery or payment information.
Participates in campaigns, promotions or corporate sales requests.
Browses or interacts with our website.
Communicates with us through email, phone, social media or messaging channels.
Some technical data may be collected automatically through cookies, analytics tools or website technologies that help us improve functionality, security and customer experience.
5. Purposes Of Personal Data Processing
Giovane Gentile Albania processes personal data for clear and legitimate business purposes connected to the services we provide.
We may process personal data for the following purposes:
Order processing
To receive, confirm, prepare and manage customer orders.
Delivery and cargo coordination
To ship products, provide delivery details to courier partners and manage delivery-related communication.
Payment handling
To confirm payment status, manage Cash on Delivery orders, verify bank transfers and support refund processes.
Customer support
To respond to questions, complaints, requests, product concerns, sizing inquiries, delivery issues and after-sales support.
Returns and exchanges
To review return requests, process exchanges, issue refunds or store credit and inspect returned products.
Account management
To create, maintain and support customer accounts where available.
Marketing communication
To send newsletters, promotional offers, new collection updates or campaign information where the customer has subscribed or where allowed by applicable rules.
Website functionality and improvement
To maintain website performance, improve user experience, analyze website traffic and detect technical issues.
Security and fraud prevention
To protect customers, orders, payment processes and our business from misuse, fraud, unauthorized activity or suspicious transactions.
Legal and accounting obligations
To maintain records required for tax, accounting, consumer protection, dispute resolution, regulatory compliance or legal claims.
We do not aim to process personal data for purposes that are unnecessary, excessive or unrelated to the service provided.
6. Legal Basis For Processing
Depending on the situation, Giovane Gentile Albania may process personal data based on one or more lawful grounds.
These may include:
Performance of a contract
When personal data is necessary to process an order, deliver products, manage payment, handle returns or provide customer service connected to a purchase.
Consent
When the customer has given clear consent, such as subscribing to promotional communication or accepting certain optional cookies.
Legal obligation
When processing is necessary to comply with accounting, tax, consumer protection, regulatory or other legal requirements.
Legitimate interest
When processing is necessary for normal business operations, fraud prevention, service improvement, customer communication, website security or protection of legal rights, provided that such interests do not override the customer’s rights and freedoms.
Where processing is based on consent, the customer may withdraw consent at any time. Withdrawal of consent does not affect processing that was lawful before the withdrawal.
7. Marketing Communication
Giovane Gentile Albania may use customer contact details to send marketing communication only where appropriate and permitted. This may include updates about new collections, offers, promotions, events, seasonal campaigns or brand news.
Customers have the right to object to direct marketing. Albanian Law No. 124/2024 provides that when personal data is processed for direct marketing, the data subject may object at any time and the controller must stop processing the data for that purpose.
Customers may unsubscribe from promotional communication by using the unsubscribe option where available or by contacting our customer support team.
Even if a customer unsubscribes from marketing communication, we may still send necessary service messages related to active orders, payment, delivery, returns, exchanges or customer support.
8. Cookies And Similar Technologies
Our website may use cookies and similar technologies to provide essential functionality, improve website performance, understand visitor behavior and support marketing or analytics activities.
Cookies may help the website remember cart contents, improve navigation, measure traffic, detect technical issues and provide a better customer experience.
Cookies may include:
Essential cookies
Required for the website to function correctly, such as cart, checkout, login and security functions.
Analytics cookies
Used to understand how visitors use the website and improve performance.
Marketing cookies
Used to support promotional campaigns, advertising relevance or audience measurement, where applicable.
Customers may manage cookie preferences through browser settings or cookie consent tools where available. Some cookies are necessary for website functionality and disabling them may affect the shopping experience.
9. Sharing Personal Data With Third Parties
Giovane Gentile Albania may share personal data with trusted third parties only when necessary to provide services, complete orders or comply with obligations.
This may include:
Courier and cargo companies
To deliver orders and manage shipment communication.
Payment providers and banks
To process payments, refunds, confirmations or payment security checks.
Website and technology service providers
To host, maintain, secure and operate our website.
Marketing and communication providers
To send newsletters, SMS notifications or promotional communication where applicable.
Accounting and legal advisors
To comply with tax, accounting, legal, audit or business obligations.
Public authorities or regulators
Where required by law, court order, regulatory obligation or lawful request.
We do not sell customer personal data to third parties. Personal data is shared only when there is a legitimate reason connected to our business services, legal duties or customer requests.
10. International Data Transfers
Some service providers used by Giovane Gentile Albania may operate outside Albania or may store data on systems located in other countries. This may happen with website hosting, payment processing, email marketing, analytics tools, cloud services or e-commerce platforms.
Where personal data is transferred internationally, we aim to ensure that appropriate safeguards are used and that data is handled responsibly.
The Albanian data protection framework includes rules for international transfers, including the use of standard data protection clauses approved by the Commissioner for transfers from Albania to foreign countries or international organizations.
Where required, Giovane Gentile Albania will rely on appropriate transfer mechanisms, service provider commitments or legal safeguards to protect personal data.
11. Data Retention
Giovane Gentile Albania retains personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods may depend on the type of data and the reason for processing.
For example:
Order and invoice records may be kept for accounting, tax and legal purposes.
Customer support records may be kept to resolve complaints, disputes or service issues.
Marketing data may be kept until the customer unsubscribes or withdraws consent.
Technical and analytics data may be kept for a limited period depending on the tool used.
Return and exchange records may be kept to manage customer service and business records.
When personal data is no longer necessary, we aim to delete, anonymize or securely restrict it, unless continued storage is required for legal, accounting or dispute-related reasons.
12. Data Security
Giovane Gentile Albania aims to protect personal data through appropriate organizational and technical measures. These measures are intended to reduce the risk of unauthorized access, accidental loss, misuse, alteration, disclosure or destruction of personal data.
Security measures may include restricted access to customer information, secure payment systems, password protection, trusted service providers, website security tools and internal procedures for responsible data handling.
However, no digital system can be guaranteed to be completely secure. Customers should also take care when using the internet, entering payment details, sharing personal information or responding to messages that claim to represent our brand.
Customers should contact us immediately if they suspect unauthorized access, suspicious communication or misuse of their personal data connected to Giovane Gentile Albania.
13. Personal Data Breach
A personal data breach may include accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data. Law No. 124/2024 defines personal data breach in this way.
If Giovane Gentile Albania becomes aware of a personal data breach that may affect customers, we will review the situation and take appropriate steps according to applicable requirements. This may include investigating the incident, limiting the impact, informing affected individuals where required and cooperating with the competent authority where necessary.
Our goal is to respond responsibly and reduce potential harm to customers.
14. Customer Rights
Customers have rights regarding their personal data. These rights may include, depending on applicable law and the circumstances:
Right to information
The right to be informed about how personal data is collected and processed.
Right of access
The right to request access to personal data held about them.
Right to correction
The right to request correction of inaccurate or incomplete personal data.
Right to deletion
The right to request deletion of personal data where legally applicable.
Right to restriction of processing
The right to request limitation of certain processing activities.
Right to object
The right to object to certain types of processing, including direct marketing.
Right to withdraw consent
The right to withdraw consent where processing is based on consent.
Right to data portability
The right to receive certain personal data in a structured format where applicable.
The new Albanian framework includes enhanced data subject rights such as the right to information, access, erasure, restriction and data portability.
Some rights may be limited where Giovane Gentile Albania must retain data for legal, accounting, fraud prevention, dispute resolution or contractual reasons.
15. How To Exercise Your Rights
Customers may exercise their personal data rights by contacting Giovane Gentile Albania through the official contact details listed in this policy.
When submitting a request, customers should provide enough information for us to verify their identity and understand the request. This may include full name, email address, phone number, order number or other information connected to the account or order.
We may refuse or limit requests that are unclear, excessive, impossible to verify or not supported by applicable law.
We aim to respond to privacy-related requests within a reasonable timeframe and in accordance with applicable legal requirements.
16. Children’s Data
Giovane Gentile Albania products and services are intended for general customers and are not directed specifically at children.
We do not knowingly collect personal data from children without appropriate authorization. If we become aware that personal data of a child has been collected improperly, we will review the case and take appropriate action, which may include deletion or restriction of the data.
Parents or legal guardians who believe that a child has provided personal data to us may contact us for assistance.
17. Accuracy Of Personal Data
Customers are responsible for providing accurate and complete information when placing an order, creating an account or communicating with Giovane Gentile Albania.
Incorrect personal data may cause order delays, failed delivery, payment issues, communication problems or return difficulties.
Customers should contact us as soon as possible if they need to update their name, phone number, email address, delivery address or order-related information.
Giovane Gentile Albania will make reasonable efforts to correct inaccurate data where requested and where verification is possible.
18. Automated Decision-Making And Profiling
Giovane Gentile Albania does not intend to use customer personal data for decisions that produce significant legal or similarly serious effects based solely on automated processing.
Some digital tools may use limited automated processes for website analytics, fraud prevention, marketing segmentation, advertising relevance or customer experience improvement.
Where such tools are used, they are intended to support normal business operations and improve the shopping experience, not to unfairly restrict customer rights.
19. Complaints
If customers believe that their personal data has been processed incorrectly, unfairly or unlawfully, they may contact Giovane Gentile Albania first so we can review and attempt to resolve the concern.
Customers may also have the right to submit a complaint to the Commissioner for the Right to Information and Personal Data Protection in Albania. The Commissioner is the independent supervisory authority responsible for monitoring and supervising implementation of the personal data protection law.
We encourage customers to contact us with privacy concerns so we can address them professionally and transparently.
20. Changes To This Policy
Giovane Gentile Albania may update this Personal Data Protection and Processing Policy from time to time. Updates may be made to reflect legal changes, business changes, website updates, service improvements, technology changes or operational requirements.
The updated policy will be published on our website and will apply from the date of publication, unless otherwise stated.
Customers are encouraged to review this page periodically to stay informed about how personal data is protected and processed.
Final Statement
At Giovane Gentile Albania, protecting personal data is part of our wider commitment to trust, professionalism and responsible business practice.
We understand that customers share personal information with us when they shop, communicate, request support or use our online services. We treat this information with care and use it only for legitimate, necessary and transparent purposes.
Our commitment is to maintain a secure and responsible approach to data protection, support customer rights and provide a shopping experience built on confidence, respect and accountability.
By using the Giovane Gentile Albania website and services, customers acknowledge that their personal data may be processed according to this Personal Data Protection and Processing Policy.