Privacy policy
Last updated: 22 July 2026
This notice explains how MICASA SHOP S.R.L. processes personal data when visitors use https://micasaonline.it, view store pages, use the contact form, chat or newsletter, or open external services linked from the website.
The website presents 7 operating physical stores in Italy and does not offer online purchasing, payments, orders, shipping or checkout.
1. Data controller
MICASA SHOP S.R.L.
Registered office: Via Mauro Miliotti 3/3, 59100 Prato (PO), Italy
VAT number: 02586310977
Pistoia-Prato Companies Register
REA: PO-616516
Share capital: €100,000.00, fully paid
Certified email (PEC): micasashopsrl@pec.it
Privacy email: privacy@micasaonline.it
Telephone: +39 333 198 7869
2. Data processed
Technical and browsing data
When the website is used, the following may be processed: IP address, browser type and version, operating system, device, date and time of requests, pages visited, selected language, data needed for security, abuse prevention and platform operation, and preferences for cookies or similar technologies.
Contact form and communications
When a visitor sends an enquiry, the website may process the visitor's name, email address, telephone number if provided, store or city mentioned, message content and other information provided voluntarily. Visitors should not submit special-category or unnecessary information.
Chat and newsletter
If a visitor uses Shopify Inbox, the conversation content and technical or contact data needed to reply are processed. If a visitor subscribes to the newsletter, the email address and the data needed to document the subscription, send communications and manage withdrawal of consent are processed.
Analytics and external services
The website does not use Google Analytics or Google Ads as active analytics or advertising tools. Any non-essential analytics tools, including Microsoft Clarity, are used only when actually enabled and according to the status and conditions described in the Cookie Policy.
The website may link to or embed external services such as Google Maps, WhatsApp, Instagram and TikTok. When a visitor opens external content or a link, the provider may receive technical data and data associated with the visitor's account with that provider.
3. Purposes and legal bases
- provide, protect and maintain the website, based on the controller's legitimate interest;
- prevent abuse, resolve errors and maintain security, based on legitimate interest;
- reply to unsolicited enquiries, to take steps requested by the visitor or based on the legitimate interest in managing communications;
- handle enquiries about purchases made in physical stores, to perform the relationship and comply with legal obligations;
- send newsletters or promotional communications only with consent;
- use non-essential cookies or analytics tools only when required and on the basis of consent;
- comply with legal obligations and authority requests and establish, exercise or defend legal claims.
Where processing is based on consent, consent may be withdrawn at any time without affecting processing carried out before withdrawal.
4. Required and optional data
Data needed to send an enquiry must be provided so that a reply can be given. Optional fields may be left blank. Newsletter and non-essential tools are optional; refusal does not prevent normal browsing or use of essential contact channels.
5. Recipients and providers
Within their respective responsibilities, data may be processed by authorized MICASA SHOP S.R.L. personnel; companies operating the relevant store when forwarding is necessary; Shopify and its subprocessors for hosting, security, forms, chat, newsletter and privacy preferences; Microsoft only if Microsoft Clarity is actually active; external services opened by the visitor; advisers bound by confidentiality; and public authorities where required by law.
6. Transfers outside the European Economic Area
Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the Data Privacy Framework, European Commission standard contractual clauses or another safeguard permitted by applicable law.
7. Retention
Data is retained only as long as needed for the purpose for which it was collected. Contact enquiries are retained for the time needed to reply and manage resulting activities; newsletter data until consent is withdrawn or the service ends, subject to what must be retained to document consent or respect an objection; technical and security logs for the period needed to protect the service; and data subject to legal obligations or needed to protect rights for statutory periods. Any analytics data follows the settings and retention periods of the service actually active.
8. Security
The controller applies technical and organizational measures proportionate to risk, including HTTPS connections, access management, service updates and data minimization. No Internet-connected system can guarantee absolute security; visitors should not submit confidential or unnecessary information through general forms or chat.
9. Data subject rights
Where provided by the GDPR, a data subject may request access, correction, erasure, restriction, portability, objection to processing based on legitimate interests, withdrawal of consent and information about safeguards for international transfers.
Requests may be sent to privacy@micasaonline.it or micasashopsrl@pec.it. The controller may request information needed to verify identity and responds within the time limits required by law.
A complaint may also be submitted to the Italian Data Protection Authority: https://www.garanteprivacy.it.
10. Children and automated decisions
The website is not designed to intentionally collect personal data from children. MICASA SHOP S.R.L. does not use website data for solely automated decisions producing legal or similarly significant effects.
11. Cookies and preference changes
Information about cookies and similar technologies is available in the Cookie Policy. Where a preference-management feature is available, non-essential consent choices may be refused or withdrawn at any time.
12. Changes
This notice may be updated to reflect legal, technical or organizational changes. The latest version is published on the website with its update date.