Privacy Policy — Effective: 24/09/2025

Controller Lanterne Volanti, Brusselseweg 483, 6218 HW Maastricht (The Netherlands) VAT: NL001824230B29 • KVK (Chamber of Commerce): 14110853 Email: info@lanternevolanti.com

Historical note: In the past, Lanterne Volanti cooperated with Mille Belle Cose SRL; this company ceased operations in 2020 and is no longer involved in our business or in any processing of personal data.

1) Scope

This policy explains how we process personal data of users who visit www.lanternevolanti.com and use our services (account creation, purchases, support, newsletter). It applies only to our website, not to third‑party sites or services we may link to.

2) Data we process

• Account & order data: name, shipping/billing address, email, phone, purchased items, payment status (from payment provider), order notes.
• Communications: messages sent to customer support (email or forms).
• Newsletter (optional): email address and preferences, based on consent.
• Technical/usage data: IP address, device/language, pages viewed, system logs, cookies (see Cookie Policy).

We do not request or process special categories of personal data (e.g., health, political opinions, religion, biometrics).

3) Purposes and legal bases

• Contract / pre‑contractual steps (Art. 6(1)(b) GDPR): account management, processing orders/payments/shipping, customer support.
• Legal obligations (Art. 6(1)(c)): tax/accounting retention.
• Consent (Art. 6(1)(a)): newsletter and non‑essential/marketing cookies.
• Legitimate interests (Art. 6(1)(f)): site security, fraud prevention, basic aggregated analytics to improve services (balanced against users’ rights).

4) Recipients and processors

We share personal data only when necessary with providers acting as processors or, in limited cases, as independent controllers, including:

• Hosting/IT and platform maintenance.
• Payment providers (e.g., PayPal) — we receive payment status; we do not store card data.
• Banks (e.g., ING) and collection services.
• Carriers/postal services for delivery.
• Email/newsletter services (e.g., Mailchimp, if used).

We have appropriate data processing agreements in place and share only the minimum necessary data.

5) Transfers outside the EEA

Data are primarily processed within the EU/EEA. If a transfer outside the EEA is required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) and, where necessary, additional measures.

6) Retention periods

• Order/invoice data: up to 7 years (legal retention).
• Account: while the account remains active; deletion upon request.
• Customer support: typically up to 24 months after the last interaction.
• Newsletter: until you unsubscribe or withdraw consent.

Thereafter, data are retained only if necessary for legal obligations, dispute resolution, or fraud prevention.

7) Your rights

Subject to the GDPR, you may exercise the rights of access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent at any time (without affecting prior processing). Contact: info@lanternevolanti.com. You may also lodge a complaint with your local Data Protection Authority (e.g., the Dutch Supervisory Authority — Autoriteit Persoonsgegevens).

8) Cookies and similar technologies

We use essential cookies (session, language, cart). With your consent, we also use analytics/marketing cookies. Details on types, purposes, and duration are provided in our Cookie Policy. Non‑essential cookies load only after consent via the banner/manager.

9) Data security

We implement appropriate technical and organizational measures (e.g., HTTPS/SSL, access controls, data minimization). No system is fully secure; please use strong passwords and keep them confidential.

10) Minors

Our services are intended for users aged 18+. We do not knowingly collect data from minors; if discovered, such data will be deleted.

11) External links and social features

Interactions with external links and social widgets are subject to the privacy notices of those providers. We are not responsible for their practices.

12) Operational and marketing communications

We may send operational messages (order confirmations, shipping, invoicing) that are necessary and not promotional. Marketing (e.g., newsletters) is sent only with consent and can be opted out at any time via the link in the email or by contacting us.

13) Changes to this policy

We may update this policy to reflect changes in processing or legal requirements. Material changes will be announced on the site and take effect upon publication unless stated otherwise.

14) Contact

Questions or requests: info@lanternevolanti.com Postal address: Lanterne Volanti, Brusselseweg 483, 6218 HW Maastricht, The Netherlands

Language precedence The legally binding version is the Dutch text. Translations are for convenience. In case of discrepancies, the Dutch text prevails.