Last updated: 9 May 2026
This notice describes how the personal data of users visiting demo.kartio.ai (the “Site”) is processed, under EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
Data controller
CommercePilot Demo Store – via Roma 1, 00100 Rome (RM), Italy – email: [email protected]
Types of data collected
- Contact and billing data: first name, surname, shipping and billing address, telephone, email, and where applicable tax code or VAT number.
- Payment data: handled exclusively by the payment service providers (PayPal, Stripe, the bank for transfers). The Site does not store credit card details.
- Browsing data: IP address, browser type, pages visited, duration of the visit, collected through server logs and technical cookies.
- Data provided voluntarily: messages sent through the contact form or the assisted chat.
Purposes and legal basis
- Performance of the sales contract (art. 6.1.b GDPR): handling orders, shipping, invoicing and returns.
- Legal obligations (art. 6.1.c GDPR): retention of tax documents for 10 years as required by law.
- Legitimate interest (art. 6.1.f GDPR): Site security, fraud prevention, aggregate statistics.
- Consent (art. 6.1.a GDPR): sending newsletters or promotional messages, activated only after explicit acceptance.
Retention period
Order data is retained for 10 years from the issue of the tax document. Profiling and marketing data for 24 months unless consent is withdrawn. Browsing logs for 12 months.
Recipients of the data
Data may be disclosed to: couriers for delivering orders, payment providers, cloud and hosting suppliers (servers in the EU), and our accountant for tax obligations. All suppliers are appointed as Data Processors under art. 28 GDPR.
Rights of the data subject
The data subject has the right to: access their data (art. 15), rectify it (art. 16), erase it (art. 17), restrict its processing (art. 18), object to processing (art. 21), receive the data in a portable format (art. 20), withdraw consent, and lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
To exercise these rights write to [email protected]. We reply within 30 days.
Cookies
The Site uses technical cookies necessary for it to work and aggregate analytics cookies. No third-party profiling cookies are installed without explicit consent through the banner.