Privacy & Cookie Policy

Summary

This page describes how the website www.hmble.it and the shop shop.hmble.it handle personal data of users who visit and browse them. This notice applies only to Hmble S.r.l. services, not to external sites linked from our pages.

Browsing these pages may involve processing data relating to identified or identifiable individuals.

How we collect and use Personal Data

We collect Personal Data ("Data") as part of the site's normal operation — transmission of this data is inherent to Internet communication protocols. Depending on your interaction with us, Data may include: profile information, contact details, browsing preferences and interests, approximate location.

Data collected automatically while browsing

IP addresses, domain names of computers used, URIs of requested resources, time of request, HTTP method, response size, HTTP status code, and other parameters related to the user's operating system and IT environment.

This Data is used to derive anonymous statistics on site usage, monitor proper operation, and — only in the event of computer crimes or requests from authorities — to establish liability.

Data voluntarily provided

We may collect Personal Data when you contact us via the email address published on the site (name, surname, email and the content of your message).

Data related to purchases (shop.hmble.it)

For orders placed on the shop, we collect data needed to fulfill the order: name, surname, shipping and billing address, email, phone number. Payment details (card, IBAN, etc.) do not transit through our servers and are handled directly by PCI-DSS certified third-party providers (Shopify Payments, PayPal, Klarna, Scalapay, Satispay).

Purposes of processing

Personal Data is processed for the following purposes:

• To respond to user requests (email, post-sale support). Legal basis: our legitimate interest in handling requests.
• To ensure the technical operation of the site (security, fraud prevention). Legal basis: legitimate interest in proper operation.
• To perform the sales contract (order management, shipping, returns). Legal basis: contract performance.
• To comply with legal obligations (invoicing, tax record retention). Legal basis: legal obligation.
• To send promotional communications (newsletter, offers). Legal basis: explicit consent. For existing customers, we may send communications about products similar to those already purchased, subject to opt-out.
• To analyze site usage (Google Analytics, Shopify analytics) in aggregated, anonymized form. Legal basis: consent (analytics cookies).
• To prevent fraud and abuse. Legal basis: legitimate interest in protecting our organization.

We do not perform automated profiling resulting in decisions producing legal effects on the user.

With whom we share Personal Data

Data may be communicated to:

• IT and hosting service providers: Shopify Inc. (e-commerce platform, servers located in the EU/USA with standard contractual clauses), Sanity (CMS), Vercel (main site hosting).
• Payment providers (Shopify Payments, PayPal, Klarna, Scalapay, Satispay) for payment processing.
• Couriers (GLS, DHL) for order shipping.
• Analytics tools (Google Analytics) — only with consent to statistics cookies.
• Newsletter provider (in the future: Klaviyo) — only with consent.
• Judicial or public authorities, based on legal obligations or to suppress unlawful conduct.
• Authorized internal staff, according to authorization profiles.

Some providers (e.g., Shopify) may have headquarters or servers outside the EU. In these cases, transfers comply with the GDPR via standard contractual clauses approved by the European Commission or other appropriate safeguards.

Your rights

As a data subject you have the right, under articles 15-22 GDPR, to:

• Access your Personal Data (art. 15)
• Request rectification (art. 16)
• Request erasure (art. 17) in applicable cases
• Request restriction of processing (art. 18)
• Receive your Data in a structured format (portability, art. 20)
• Object to processing for legitimate reasons (art. 21)
• Withdraw consent at any time, without affecting the lawfulness of prior processing
• Lodge a complaint with the Italian Data Protection Authority (art. 77 GDPR — garanteprivacy.it)

To exercise your rights write to info@hmble.it.

Retention period

We retain Personal Data for the time needed for the purposes it is collected:

• Contact data and requests: until the request is completed + 12 months
• Purchase data and orders: 10 years (tax obligations under art. 2220 Italian Civil Code)
• Marketing/newsletter data: until consent is withdrawn
• Technical and security logs: maximum 12 months
• Aggregated and anonymized analytics data: indefinitely

Security

We adopt reasonable technical and organizational measures to protect Personal Data (TLS encryption, access controls, backups). No system is 100% impenetrable: in the event of a breach that may pose a risk to user rights, we will notify the Italian Data Protection Authority within 72 hours and affected individuals without undue delay, as required by articles 33 and 34 GDPR.

Cookie Policy

Cookies are small text files that websites save on the user's device to remember browsing information. On hmble.it and shop.hmble.it we use the following categories:

Essential cookies (always active)

Required for the site to operate: cart management, user session, security (CSRF token), language preferences. Do not require consent under article 122 of the Italian Privacy Code and Italian DPA guidelines.

Analytics cookies

Help us understand how users use the site to improve it. Data collected in aggregated, anonymized form (truncated IP). Provider: Google Analytics 4, Shopify analytics. Require consent.

Marketing cookies

Used to personalize advertisements on other sites and social networks. Possible providers: Meta Pixel, Google Ads, TikTok Pixel. Require explicit consent.

Managing preferences

You can accept, reject or customize cookies from the banner shown at first access. You can change your mind at any time by clearing your browser storage for our domain. You can also disable cookies directly from your browser settings:

• Chrome
• Firefox
• Safari
• Edge

Minors

The site is not intended for children under 14. We do not knowingly collect Personal Data from minors. If a parent or guardian believes we have Data about a minor, please contact us immediately at info@hmble.it: we will remove the Data promptly.

Changes to this notice

We may update this notice at any time. The applicable version is the one published on this page at the time of processing. Substantial changes will be communicated via email or visible notice on the site.

Governing law and jurisdiction

This notice is governed by Italian law and EU Regulation 2016/679. For disputes, the competent court is the Court of Turin, subject to the consumer's mandatory right to the court of their place of residence.