Privacy Policy

Last updated: 06/10/2026

This English translation is provided for convenience only. In case of discrepancy, the Italian version prevails.

This Privacy Policy describes how Le Cinque Icone — Società Cooperativa di Comunità processes the personal data of users who visit the website lecinqueicone.com, buy our products, register for our events or contact us.

1. Data controller

Le Cinque Icone — Società Cooperativa di Comunità
Registered office: Via Giardino 47, Pentone (CZ), 88050, Calabria, Italy
VAT no. / Tax code: IT03867470795
Email: info@lecinqueicone.com

2. Data collected and purposes

We collect the personal data listed below for the purposes indicated:

  • Browsing data (IP address, browser type, pages visited): technical operation and security of the website — legal basis: legitimate interest.
  • Account registration data (first name, last name, email, encrypted password): creation and management of the customer account — legal basis: performance of a contract.
  • Purchase data (name, shipping address, email, telephone, tax code/VAT number): order processing and tax obligations — legal basis: performance of a contract and legal obligation.
  • Event registration data (first name, last name, email, number of participants): management of registrations — legal basis: performance of a contract.
  • Contact data (name, email, message): replying to enquiries — legal basis: legitimate interest.
  • Marketing (email): sending promotional communications — legal basis: explicit consent, which may be withdrawn at any time.

3. Data retention

  • Purchase and invoicing data: 10 years (tax obligation).
  • Account data: for the whole duration of the relationship and up to 2 years after the account is deleted.
  • Event registrations: 12 months from the date of the event.
  • Contact messages: 24 months from receipt.
  • Marketing data: until consent is withdrawn.

4. Sharing with third parties

Your data is never sold. It may be disclosed to:

  • Couriers (e.g. GLS, SDA, Poste Italiane): name, address and telephone number for delivery.
  • PayPal: data required for online payment (see the PayPal privacy policy).
  • Hosting provider: access to server logs for technical reasons.
  • Accountant / tax advisor: invoicing data for accounting obligations.

All of these parties are appointed as data processors pursuant to Article 28 GDPR.

5. Transfers outside the EU

Data is mainly processed within the European Union. Any transfers to third countries take place in compliance with the safeguards provided for by the GDPR (adequacy decisions, standard contractual clauses).

6. Your rights

Under Articles 15–22 of Regulation (EU) 2016/679 (GDPR), you have the right to:

  • Access your personal data;
  • Rectification of inaccurate data;
  • Erasure ("right to be forgotten");
  • Restriction of processing;
  • Data portability;
  • Object to processing based on legitimate interest;
  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to: info@lecinqueicone.com

7. Complaints to the supervisory authority

You have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. Cookies

For detailed information on the use of cookies, please see our Cookie Policy.