PRIVACY POLICY

Privacy Policy
of shop.fluidsystem.com

This notice describes how the personal data of users who make purchases through the e-commerce platform are processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).

1. Information on data processing

Data Controller
FLUID SYSTEM S.r.l.
Via Roma, 155/bis – 31020 Villorba (TV) – Italy
Email: info@fluidsystem.com

Types of data processed
The e-commerce platform may process the following categories of personal data:
identification data (first name, surname, company name);
contact details (email, telephone);
billing and shipping data (address, postcode, city, country);
order-related data (products purchased, amounts, purchase history);
payment data (managed through external providers, without access to full card details);
browsing data (IP address, user agent, system logs);
data collected through cookies and similar technologies.

Purposes of processing and legal bases
Personal data are processed for the following purposes:

Management of orders and online sales
order management;
payment management;
product shipment;
administrative, accounting and tax management;
management of returns, after-sales support and warranty.
Legal basis:
performance of a contract (Art. 6.1.b GDPR)
legal obligations (Art. 6.1.c GDPR)

Management of contact requests
via form or email
Legal basis: performance of pre-contractual measures (Art. 6.1.b GDPR) or legitimate interest of the Data Controller (Art. 6.1.f GDPR)

Marketing activities (where consent has been given)
sending commercial communications
Legal basis: consent

Statistical traffic analysis
through tools such as Google Analytics
Legal basis: consent (CookieYes)

Website security and abuse prevention
(e.g. reCAPTCHA)
Legal basis: legitimate interest

Management of commercial activities and CRM
(e.g. HubSpot)

Legal basis:
contractual/pre-contractual performance
legitimate interest
consent (where required)

Processing methods
Processing is carried out using IT and telematic tools, with appropriate security measures.

Data recipients
Data may be processed by:
authorised internal personnel;
technical service providers (hosting, IT);
third-party platforms and services, including:
Stripe Inc. (payments)
Google LLC (Analytics, YouTube, reCAPTCHA)
HubSpot Inc.
Google LLC and HubSpot Inc. act, where necessary, as Data Processors pursuant to Art. 28 GDPR. Stripe Inc. acts as an independent data controller for payment data; please refer to Stripe’s privacy notice available at stripe.com/privacy.

Transfers of data outside the EU
Some services may involve transfers to non-EU countries (e.g. the USA).
Such transfers are carried out in compliance with the GDPR through:
Standard Contractual Clauses (SCCs)
EU-US Data Privacy Framework (where applicable)

Retention period
order-related data: up to 10 years, for tax and accounting obligations;
marketing data: until consent is withdrawn or for the different period indicated in the privacy notice or consent management settings;
data relating to contact requests and pre-contractual activities: up to 24 months from the request or from the conclusion of the negotiation;
CRM data (HubSpot): for the duration of the business relationship and up to 5 years after its termination, unless specific consent is given for marketing activities;
technical browsing data and system logs: up to 12 months from collection, unless further retention is necessary for the investigation of unlawful activities.

2. Services and tools used

E-commerce platform
The e-commerce platform uses dedicated software for the management of orders and online sales.
The data entered are used exclusively for the management of the sale and related obligations.

Payment services
Payments may be made by:
credit card (via Stripe);
bank transfer.
In the case of electronic payment:
card data are processed directly by Stripe;
the Data Controller does not have access to full payment details;
the Data Controller receives only information on the outcome of the transaction.

Google Analytics
The website uses Google Analytics to collect aggregated statistical data on website use.
The service may collect data such as:
IP address (possibly anonymised);
browsing behaviour;
pages visited and time spent on the website.
Activation takes place only with prior consent through the cookie banner.

YouTube
The website may embed videos through YouTube.
Viewing videos may involve the installation of cookies and the collection of data by Google.
Content is loaded only with the user’s prior consent.

Google reCAPTCHA
The website uses Google reCAPTCHA to protect forms against automated access.
The service analyses user behaviour to verify that the user is not a bot.

HubSpot
The website uses HubSpot for the management of contacts and commercial activities.
Data entered in forms may be processed through this platform for commercial and organisational management purposes.

3. Cookies, rights and preference management

Cookies and tracking technologies
The website uses cookies and similar technologies.
Full details are available in the Cookie Policy, which forms an integral part of this notice.
Consent is managed through the CookieYes platform, which enables users to:
accept or reject the categories of cookies;
change their preferences at any time.

Data subject rights
Users may exercise the following rights:
access to personal data;
rectification or updating;
erasure;
restriction of processing;
data portability;
objection to processing;
withdrawal of consent;
lodging a complaint with the Italian Data Protection Authority.

How to exercise rights
Requests may be sent to:
info@fluidsystem.com
The Data Controller will respond within 30 days.

Changes to this notice
This Privacy Policy may be updated at any time.
Users are invited to consult it periodically.

Last updated
May 2026