Your data at Belthran
Eleven sections, in plain English.
1The data controller
Your personal data on belthran.com are processed by DIENNE S.R.L., Via Antonio Gramsci, 7 – 67051 Avezzano (AQ), Italia, PARTITA IVA: IT01755060660, the company that owns the Belthran online shop and sells its products. In this policy "we" and "us" mean DIENNE S.R.L.
Questions about your data, and requests to exercise your rights, go to contacts@belthran.com.
2Where this policy applies
It applies to every page of belthran.com: the home page, the product pages of the products we sell, the pages you see after sending an order, and these policy pages. It also covers the phone call in which we confirm your order and the emails you send us.
What belthran.com and the services it loads keep in your browser is listed in our Cookie Policy.
3What we collect, and when
Order form on a product page
You type in your name and surname, your phone number and your delivery address. The form adds which product you are ordering and the country of the page.
At the moment you press the order button, our website also records the date and time, the address of the page (including any information it carries about the advertisement that brought you there), your IP address and data about your browser and device.
Box on the page shown after the order (optional)
Once the order is sent you can add your postal code and city, which help the courier deliver faster and more precisely, and your email address, to which the order confirmation and the tracking number are sent. These details travel together with the phone number and a reference of your order, so that they can be joined to it. If you leave the box empty, nothing is sent.
Confirmation phone call
Within 24 hours of your order one of our consultants telephones you, goes through the product, the price, the delivery time, the payment on delivery and every other condition that applies to your order, and waits for your yes or no. Your answer, and any address detail you correct on the phone, is saved with the order.
Emails to us
An email you send us brings us your address, the text and anything written in it or attached to it, for instance your IBAN for a refund.
Browsing
Each time a page is requested, the server that hosts the site records your IP address, the page, the date and time and your browser's user agent (server logs). Some pages load services of other companies, which in doing so receive your IP address and browser data; they are listed in section 7.
Some of our products work with a smartphone app. What such a product and its app record does not reach us.
4Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Confirming, shipping and delivering your order, collecting payment on delivery, sending the confirmation and tracking number, handling returns, refunds and warranty requests | Name, phone, delivery address, product and country, optional postal code, city and email, record of the call, your emails | Contract with you, and steps you ask for before it (Art. 6(1)(b) GDPR) |
| Keeping accounting and tax records and fulfilling consumer-law duties such as a withdrawal | Order, payment and refund data, your withdrawal message | Legal obligation (Art. 6(1)(c) GDPR) |
| Making sure an order was really placed by a person and is not a duplicate, and keeping the site secure | IP address, browser and device data, server logs | Art. 6(1)(f) GDPR: our interest in not sending parcels nobody ordered and in protecting the site |
| Replying to questions and complaints that do not concern an order | Email address, message | Art. 6(1)(f) GDPR: our interest in replying to the messages we receive |
Where we rely on Art. 6(1)(f) GDPR, you can object at any time (section 10).
5Advertising
We use the advertising services of Google (Google Ireland Limited and Google LLC) to show our ads and to measure their results. In connection with those services Google may use cookies or similar technologies in your browser, and may receive your IP address and information about your browser. Google processes these data for its own purposes, under its own privacy policy: policies.google.com/privacy.
This website shows no cookie banner, so nothing is asked of you before this happens. You can refuse or delete these cookies and similar technologies at any time: in your browser settings, as explained in our Cookie Policy, and in your Google ad settings at myadcenter.google.com. Your order is received and handled in exactly the same way.
6What you must give us
Without your name, phone number and delivery address we cannot accept or deliver an order. The box after the order (postal code, city, email) may be left empty: the order is processed all the same.
Every order is decided by a person, not by an automated system: our consultant confirms it with you on the phone.
7Who receives your data
Your data reach only the companies we need in order to run the shop. Most of them act on our instructions as processors; a few decide for themselves how to use what reaches them, and for those parts they answer for the processing on their own.
- Hostinger, the hosting provider of belthran.com. Its servers hold the site, the database in which a copy of every order form is saved, and the server logs.
- Make.com, an automation platform: the order form reaches it through a webhook in its European Union data zone, and it forwards the order to our order-processing partner.
- Our order-processing partner, and the call centre that works with it. Your order lands there; its consultants ring you on our behalf to confirm it, then the parcel is prepared and handed to the courier. What you type into the optional box after the order also ends up with this partner and is joined to your order.
- For the optional box after the order, a technical service of ours, whose servers may be outside the European Union: it collects what you type there and hands it to our order-processing partner.
- The courier, which receives your name, address, phone number and the amount to collect, delivers the parcel and takes the payment.
- The order-form script of our order-processing partner. It starts as soon as a product page is opened; through it, a server of the partner learns your IP address and details of your browser and device, even before you press the order button. It stores no cookies.
- Google, for the advertising services described in section 5.
- Hostinger Reach: a script from our hosting company, loaded on every page, which gets your IP address and browser data. Hostinger delivers it through Cloudflare, whose __cf_bm cookie lets that server separate real visitors from automated traffic. The site has no newsletter sign-up form.
- WordPress.org, which delivers an emoji image from its server s.w.org when a page contains an emoji that your browser cannot display.
- Public authorities, when a law obliges us to disclose data.
The site does not download any web font: text is shown with the fonts already installed on your device, so no font is requested from any external server.
8Processing outside the European Economic Area
Some recipients listed in section 7 may process data outside the European Economic Area. Two of them are Cloudflare, Inc. (United States), the network through which our hosting provider serves the Hostinger Reach script, and, for the optional box after the order, a technical service of ours, whose servers may be outside the European Union. Other recipients in that list may do the same.
On request at contacts@belthran.com we tell you which safeguard applies to each of these transfers.
9How long we keep your data
- Order data (order form, record of the call, optional postal code, city and email): as long as we need them to deliver the order and to handle returns, refunds and requests under the 4-year warranty, that is up to 4 years from delivery. The part of them that belongs to our accounting records (invoices, for example) is kept for 10 years, as Art. 2220 of the Italian Civil Code requires.
- Emails: as long as we need them to deal with your request and with any claim connected to it.
- Server logs: deleted after 30 days.
- Cookies and browser storage: the __cf_bm cookie lasts 30 minutes; what belthran.com keeps in your browser lasts until you close the tab. You can delete all of it whenever you like, as our Cookie Policy explains.
10Your rights
Under the GDPR you can ask us to:
- confirm whether we process data about you and let you have a copy of them;
- correct data that are wrong or incomplete;
- erase your data when we no longer have a reason to keep them;
- restrict their use in the cases the law provides;
- give you the data you provided in a structured, machine-readable format;
- stop processing based on Art. 6(1)(f) GDPR, if you object.
Send your request to contacts@belthran.com. We reply within one month; for complex requests this can become three months in total, and we tell you if so.
You can also complain to a data protection authority. In Italy: Garante per la protezione dei dati personali, at garanteprivacy.it. Or you may choose the authority of the EU member state in which you reside, in which you work, or in which the alleged infringement occurred.
11Updates
When we start processing data in a new way, for example for a new product, we revise this page and its "Last updated" date. Whatever is published here is the text in force.