Your data remains yours
We only collect them to manage orders, shipments and assistance. Nothing else.
— Chapter 08 — Privacy Policy
Let's keep
to your data.
Also because we treat ours as we would treat yours. Here, in Italian, how it really works from us.
Last update
21 maggio 2025No sale to third parties
We don't sell, we don't rent, we don't lend your data to anyone. Never.
No intrusive profiling
We don't follow you on the rest of the web. Analytics and Pixel are used in an aggregate and anonymous way.
Cookies only if necessary
Technical cookies (carrello, login) do not require consent. Everyone else chooses them.
↳ In detail
The part boring,
But what's the point?
01 Data Controller
Len Service S.R.L., with registered office in Via Aurelia Sud S.N.C., 19021 Arcola (SP), Italy — VAT IT 01483520118 — is the Data Controller pursuant to EU Regulation 2016/679 (GDPR). DPO: dpo@len-srl.com. For any request relating to your data you can write to dpo@len-srl.com or via PEC a lenservicesrl@pec.it.
02 What data we collect
Purchase and account details: first name, last name, email address, phone number, shipping address and billing, VAT (only business customers). Navigation data: IP address, browser, operating system, pages visited — collected anonymously by Google Analytics 4. Marketing data: only if you provide explicit consent via banner, through Meta Pixel (Facebook/Instagram) and Google Ads.
03 Purpose and legal basis of processing
Your data is processed for: (a) execute the sales contract and manage orders, shipments and returns — legal basis: execution of the contract (art. 6.1.b GDPR); (b) fulfil tax and accounting obligations — legal basis: legal obligation (art. 6.1.c GDPR); (c) sending commercial communications and newsletters — legal basis: explicit consent (art. 6.1.a GDPR), revoked at any time; (d) prevent fraud and ensure the safety of the site — legal basis: legitimate interest (art. 6.1.f GDPR).
04 Data retention
Orders and invoices are kept for 10 years from the date of the transaction, as provided by Italian tax law. Account data is kept for the duration of the business relationship and deleted within 12 months of the account being closed on request. The data collected for marketing and newsletters are deleted immediately upon revocation of consent. Navigation logs are kept for a maximum of 14 months.
05 With whom we share your data
Your data is communicated exclusively to: couriers and forwarders (to deliver orders); accountant and accounting firm (for tax purposes); hosting providers and infrastructure (safe servers in EU); Cloudflare Inc. (DDoS and CDN protection, with transfer to the USA protected by Standard Contractual Clauses); Google LLC (Analytics 4, in anonymized mode, US transfer with SCCs); Meta Platforms Ireland Ltd (Pixel, only if you agree, US transfer with SCCs). No third party may use your data for its own purposes.
06 Cookies and tracking technologies
Essential technical cookies (session, cart, login, security CAPTCHA): do not require consent and cannot be disabled. Analytics cookies (Google Analytics 4 with anonymous IP): active only after consent. Marketing cookies (Meta Pixel, Google Ads): active only after explicit consent. You can change or revoke your consent at any time by clicking on "Manage cookie preferences" in the footer of the site.
07 Your rights
Under art. 15–22 GDPR you have the right to: access your personal data (art. 15); require its correction (art. 16) or cancellation ("right to oblivion", art. 17); limit its treatment (art. 18); receive them in portable format (art. 20); object to processing (art. 21); revoke consent at any time without prejudice to the lawfulness of the previous processing. To exercise these rights, write to dpo@len-srl.com: we will reply within 30 days. You also have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).
08 Data security
We adopt appropriate technical and organizational measures to protect your data: SSL/TLS encrypted connections, access to data limited to authorized personnel, regular backups, anti-bot protection (Cloudflare Turnstile). In case of data breach that involves a risk to your rights, we will notify the Guarantor within 72 hours and inform you directly if the risk is high.
09 Changes to this Statement
Len Service S.R.L. reserves the right to update this information at any time, in particular due to regulatory changes or the introduction of new services. The updated version will always be available on this page with the latest update date. For substantial changes we will notify you by email if you are a registered customer.
Do you have any doubts about your data?
Write to our DPO. We really answer you, even if the question is uncomfortable.