Privacy policy

Last updated: 29 October 2026

This notice explains how AUTORAMA processes personal data of people who visit www.autoramaweb.it, make purchases, contact us or use the services described below, under Regulation (EU) 2016/679 (“GDPR”) and applicable Italian law.

1. Controller and contact details

AUTORAMA Martino Guagneli S.n.c.
Via Roma, 2 — 47833 Morciano di Romagna (RN), Italy
Email: autorama@autoramaweb.it

Use these contact details for information about processing and to exercise your rights.

2. Personal data processed

Depending on your interaction with us, we process:

  • identification and contact details, such as first and last name, email, telephone number, delivery and billing addresses and, where relevant, business details;
  • order details, products, quantities, amounts, payment status, deliveries, returns and refunds;
  • account details, login identifiers, preferences and settings;
  • messages to customer support and any attachments;
  • technical data, such as IP address, browser, device and the date and time of requests;
  • browsing and interaction data, depending on the tools used and applicable consent choices.

Data comes from you, your use of the services or providers involved in handling purchases. For orders placed on eBay, we receive the information needed for the transaction from that platform. Full payment instrument details are processed by the relevant providers; AUTORAMA uses the information made available to verify and handle payment.

Purpose Legal basis
Managing purchases, payments, shipping, returns, requested accounts and contractual support. Performance of a contract or pre-contractual measures: Article 6(1)(b) GDPR.
Meeting tax, accounting and administrative obligations. Legal obligation: Article 6(1)(c) GDPR.
Protecting systems, preventing fraud, handling non-contractual correspondence and protecting rights. Legitimate interests: Article 6(1)(f) GDPR, following an assessment of the interests and rights involved.
Sending promotional communications and using optional analytics and advertising tools. Consent where required: Article 6(1)(a) GDPR and Articles 122 and 130 of the Italian Privacy Code. The existing-customer email exception described below remains applicable.

Required order data is essential to handle purchases and delivery. Without it we may be unable to provide the service. Consent to marketing and optional tracking is voluntary and is not a condition of purchase. Accepting the terms of sale does not constitute marketing consent.

4. Shopify and Network Intelligence

We use Shopify to host the store and provide e-commerce functionality. For activities carried out on our behalf, Shopify acts as a processor under its Data Processing Addendum.

We have enabled Shopify Network Intelligence. Shopify uses data from interactions with our store together with data from interactions with other merchants and Shopify to provide enhanced features, including personalisation, service improvements and advertising targeting. For these activities Shopify acts as an independent controller under the applicable terms. Enabling this feature does not replace legally required consent choices.

See Shopify’s Consumer Privacy Policy and the Shopify Privacy Portal for further information and requests concerning processing for which Shopify is the controller.

5. Google Analytics, Google Ads and Meta/Facebook

We use Google Analytics to analyse store usage and Google Ads for advertising. We also use Meta/Facebook to communicate and promote our business.

Analytics tools may process technical and browsing data to measure visits and interactions. Advertising features may measure campaign results and, when enabled under the required conditions, personalise ads. Optional tools requiring consent are subject to your expressed preferences. Pseudonymised data is not necessarily anonymous.

Interactions with our Meta/Facebook pages also involve processing by the platform under its own privacy policy. Processing when browsing Meta platforms is also governed by the information provided by Meta.

Further information: Google Privacy Policy, data use on services using Google and Meta Privacy Policy.

6. Commercial communications

If you choose to receive our promotional communications, we use your contact details for the purposes specified when you make that choice. You may withdraw consent using the unsubscribe link in emails or by writing to autorama@autoramaweb.it. Withdrawal does not affect prior processing.

Within Article 130(4) of the Italian Privacy Code, we may use the email address provided during a sale to offer our own similar products or services, after informing you and offering an opportunity to object both initially and in every subsequent communication. Emails necessary to manage an order are separate from promotional emails.

7. Purchases through eBay

We also sell on eBay. To manage purchases, we receive data made available by the platform, such as buyer identifiers, available contact details, addresses and transaction information.

eBay orders are imported into Shopify through our marketplace connection app. Data is used for fulfilment, shipping, returns, support and administrative obligations, on the basis of the contract and legal obligations. AUTORAMA acts as an independent controller for this processing.

Importing orders does not automatically subscribe customers to newsletters or advertising audiences. For eBay’s activities, see its User Privacy Notice.

8. Trusted Shops, Trustcard and Trustbadge AI+

We use services from Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne, Germany. For joint processing relating to Trustbadge integration, we are joint controllers under Article 26 GDPR. You may exercise your rights with AUTORAMA or Trusted Shops; requests are forwarded to the other controller when necessary. Contact details are available in the Trusted Shops privacy notice.

On the order confirmation page, the Trustcard asks whether you would like an invitation to review your purchase. You can consent using the “Sì, desidero lasciare una recensione” button (Yes, I would like to leave a review) and withdraw consent later.

The widgets display reviews and Trusted Shops services. Loading them involves processing technical data, such as IP address, request date and time and device information, to provide the service and keep it running. Presenting our services and buyer reviews is pursued on the basis of legitimate interests under Article 6(1)(f) GDPR, without prejudice to consent for device access that requires it. Recognition of already registered users, where provided for in the configuration, may involve the order amount and number, products where relevant, and a hashed email address. This recognition is separate from choosing to receive an invitation; hashing does not necessarily anonymise data.

Trusted Shops uses providers for content delivery, hosting and technical management; this may involve processing in the United States and Israel. The safeguards described in the international transfers section apply. Information about processing in individual services is available in the Trusted Shops notice linked above.

When interacting with Trustbadge AI+ and #trstd login, session cookies and a recognition cookie stored for up to 400 days after login may be used. Trusted Shops is responsible for these interactions. Push notifications require user activation.

The AI visibility feature is also enabled: it adds public structured data about the store, ratings and trust signals that search engines and AI systems can read.

9. Google Customer Reviews

The order confirmation page includes a module to choose whether to participate in Google Customer Reviews. Survey participation is optional and separate from Trusted Shops invitations.

When the service is operational, the module involves processing the necessary information, such as order reference, email, country and estimated delivery date; the survey is sent to those who opt in. Google describes processing and the data used in its Google Customer Reviews information and privacy policy.

10. Cookies and preference management

We use Shopify’s integrated cookie banner, configured for Italy as well. You can select “Accetta” (Accept), “Declina” (Decline) or “Gestisci le preferenze” (Manage preferences). Tools strictly necessary for the requested service do not require consent; for other tools, consent is requested where required by law.

General information about platform cookies is available in Shopify’s Cookie Policy. Refusing optional tracking does not prevent purchases. You can change your choices through the cookie settings available in the store. For help, contact us by email. Blocking technical cookies through your browser may affect functionality.

11. Recipients and international transfers

Data may be processed by authorised staff, Shopify, payment providers, carriers, IT support, communication and marketing services used, professional advisers and authorities where provided for by law. Those processing data on our behalf are appointed as processors where required; others act as independent or joint controllers according to their actual role.

Using international services may involve processing outside the European Economic Area. Chapter V GDPR safeguards apply, such as adequacy decisions or standard contractual clauses, depending on the transfer. For US recipients, any reliance on the Data Privacy Framework depends on the relevant certification. You may ask the controller for information about safeguards and how to obtain a copy.

12. Retention

We retain data according to the purposes and necessity of processing:

  • Orders and administrative documents: to manage the relationship and for mandatory retention periods applicable to tax and accounting documents.
  • Support: to resolve requests and document their outcome, taking warranties and possible disputes into account.
  • Accounts: for the duration of the requested service, distinguishing account data from data that must be retained for legal obligations.
  • Marketing: until withdrawal or objection, within the period justified by the purpose; data no longer necessary must be deleted.
  • Consents and objections: limited to evidence of choices and information needed to respect them.
  • Technical data and cookies: for the periods associated with their functions and service settings.

Retention may continue where necessary for legal obligations or disputes. Afterwards, data is deleted or effectively anonymised.

13. Rights and complaints

In the cases and within the limits of the GDPR, you may request access, rectification, erasure, restriction and portability. You may withdraw consent and object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing and related profiling at any time.

Write to autorama@autoramaweb.it. We normally reply within one month; where provided for by law, the period may be extended, with reasons communicated to you. Erasure does not remove statutory retention obligations.

You may lodge a complaint with the Italian Garante per la protezione dei dati personali or the competent supervisory authority.

14. Updates

We may update this notice to reflect changes to services or legislation. We will publish the updated version with its date and provide additional communications when necessary. Continued browsing does not constitute consent to new processing requiring consent.