Privacy and cookie notice
Published: March 13, 2026
I. Privacy Notice
Light Soles SRL, with registered office at S.S. 16 km 333 +500, Porto Potenza Picena, Macerata 62018, Italy (hereinafter “the Company”), in compliance with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter “GDPR”) and Italian data protection legislation, respects and protects the confidentiality of users of the website at the domain www.lightsoles.it, making every possible and proportionate effort not to infringe upon their rights.
The purpose of this privacy notice is to help users understand the procedures the Company uses regarding privacy, including what personal data is collected, why it is collected, how it is used, how such data is protected, and what individual rights users have.
This privacy notice does not apply to, and excludes our liability for, the privacy, information, or other practices of third parties, including third parties that operate websites or services to which the website www.lightsoles.it links.
This privacy notice applies to all personal data that the Company acquires or processes when users interact with the website www.lightsoles.it, for example by purchasing and using services and responding to marketing communications. Such interactions may involve visitors, customers, suppliers, and/or partners.
The Company also processes personal data in contexts other than the website www.lightsoles.it, which will require a different privacy notice.
II. General Information on Data Processing
In this privacy notice, the term “personal data” means information that relates to users and allows us to identify them, either directly or in combination with other information we hold.
General Website Users
The Company processes user data on the basis of consent. By using or browsing the website, users explicitly approve this privacy notice and consent to the processing of their personal data in relation to the purposes and methods described below, including any disclosure to third parties if necessary for the provision of a service. Providing data and thus consenting to the collection and processing of data is optional. The user may withhold consent and may revoke previously given consent at any time. However, withholding consent may make it impossible to provide certain services and may impair the browsing experience on the site.
Customers
The Company will do its utmost, consistent with the electronic form of its services, to maintain the strictest confidentiality in the performance of its services. All texts, the nature of the work performed, personal data relating to the customer communicated for translation purposes, and any information transmitted by the customer to the Company will be treated with the utmost confidentiality, and the personal data collected will be processed in accordance with Article 6 of the GDPR.
In particular, the Company will use the information provided for the purpose of performing the contract (and for any implementation of pre-contractual measures) and may not, without the customer’s prior written consent, publicly disclose or disclose to third parties such information, except to its authorised collaborators or authorised subcontractors whose operational or advisory involvement necessitates knowledge of such information. The above guarantees do not apply if the Company is required by law to disclose such information, or if such information is or becomes publicly available other than through disclosure by the Company, or if the vital interests of the data subject or another natural person make the processing of personal data necessary, or if the processing is necessary for the protection of a legitimate interest of the Company or a third party that overrides the rights of the data subject.
III. Automatically Collected Information. Browsing Data
Like all websites, this site uses log files that store information collected automatically during user visits. The information collected may include the following:
The above information is processed automatically and collected solely in aggregated form to verify the proper functioning of the site and for security reasons. For security purposes (anti-spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as the IP address (which uniquely identifies, at least at that given moment, the host of origin), which could be used, in accordance with applicable laws, to block attempts to damage the site or harm other users, or otherwise for illegal or criminal activities. Such data is used to protect the site and its users.
The data indicated is used only to obtain anonymous statistical information on website usage and to check its correct functioning and is therefore deleted immediately after processing. Data used for security purposes (blocking attempts to damage the site) is retained for seven days.
IV. Use of Cookies
Definition of Cookie
A cookie is a small text file sent to the browser by the website visited and subsequently stored on the user’s computer hard drive. When reconnecting to the website, cookies are read and recognised by the website that sent them. While visiting a website, you may receive cookies from a third-party website (so-called “third-party cookies”), for example, links to web pages on other domain names.
Cookies can be used for different purposes: to allow a website to recognise the user’s device, monitor sessions, and store specific information about users accessing the server.
Types of Cookies
There are three types of cookies:
By using the site, the visitor expressly consents to the use of cookies.
Disabling Cookies
Cookies are linked to the browser used and can be disabled at any time directly from the browser, thereby refusing/revoking consent to the use of cookies. Please note that disabling cookies may prevent the proper use of some features of the site. Each browser has a different procedure for managing settings.
V. Email and Newsletter
The user may receive emails from the Company for various reasons, such as order confirmation or to receive information about the Company’s services.
VI. Place of Data Processing
Data collected by the site is processed at the Data Controller’s registered office and at the web hosting provider’s data centre. The web hosting provider, Aruba, which acts as a data processor processing data on behalf of the Data Controller, is located within the European Economic Area and acts in compliance with European regulations.
VII. Transfer of Data to Non-EU Countries
This site may share some of the data collected with services located outside the European Union area. Specifically, with Google, Facebook, and Microsoft (LinkedIn) via social plugins and the Google Analytics service. The transfer is authorised based on specific decisions of the European Union and the Data Protection Authority, in particular Decision 1250/2016 (Privacy Shield), for which no further consent is required. The aforementioned companies guarantee their adherence to the Privacy Shield.
VIII. Security Measures
This site processes user data lawfully and fairly, adopting appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of data. Processing is carried out using computer and/or telematic tools, employing adequate organisational, technical, and administrative measures to protect personal data within our company, and following logic strictly related to the purposes indicated. However, no data transmission or storage system can be guaranteed to be 100% secure. Users who have reason to believe that their interaction with us is no longer secure are asked to report the problem to us immediately.
In addition to the Data Controller, in some cases, persons involved in the organisation of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, and may also be appointed as Data Processors by the Data Controller if necessary.
Users’ personal data will be retained for as long as necessary or permitted in light of the purposes for which it is collected. The criteria adopted to determine retention periods are as follows: (i) the period of time during which users regularly use the website lightsoles.it; (ii) the need to fulfil a contract or a legal obligation to which we are subject; (iii) the appropriateness of retaining data in light of our legal position (e.g., with reference to limitation periods, disputes, or regulatory compliance checks).
IX. User Rights
Under the GDPR and national legislation, the user may, in accordance with the methods and within the limits provided by current regulations, exercise the following rights in relation to their personal data:
More generally, the user may exercise all rights recognised by current legal provisions.
Requests should be addressed to the Data Controller. In particular, users may exercise their rights regarding the processing of their personal data by accessing www.lightsoles.it. The Company will respond to the request in accordance with applicable laws. Users are invited to indicate in their request which personal data they wish to be changed, to state whether they prefer such data to be deleted from the database, or to specify what limitations they wish to place on the Company’s use of their personal data. Please note that the Company may need to retain certain information for record-keeping purposes and/or to complete transactions initiated by users before a change or deletion request.
X. Special Information for Parents
The website www.lightsoles.it is not intended for children, as defined by applicable laws, and we do not knowingly collect personal data from minors. The Company nevertheless undertakes to comply with legal provisions where they require a parent’s or guardian’s authorisation to collect, use, or disclose minors’ personal data. We are committed to protecting minors’ privacy and encourage parents and guardians to play an active role in their children’s online activities and interests.
If a parent or guardian becomes aware that a minor child has provided us with their personal data without their consent, we invite them to contact the Data Controller at the address below. If we become aware that a minor has provided us with their personal data, we will delete it from our records.
XI. Data Controller
The Data Controller under the GDPR and other Italian data protection laws, as well as other data protection provisions, is Light Soles SRL, with registered office at S.S. 16 km 333 +500, Porto Potenza Picena, Macerata 62018, Italy, contactable at the following email address: info@lightsoles.it. The Data Processor is the web hosting provider Aruba.it.
XII. Updates
This privacy policy is updated as of March 13, 2026.
