Privacy policy
Last updated: 24 October 2026
This policy explains how personal data is handled on maison-eldar.com. The site presents Maison Eldar: it does not sell online and has no customer accounts.
Data controller
The data controller is Sottocolle S.r.l.s., Via Giacomo Puccini 1940, 55016 Porcari (LU), Italy, VAT no. 02578070464. For any question about your data, write to contact@maison-eldar.com.
What we process, and why
When you write to contact@maison-eldar.com (the “Private clients”, “Trade and importers” and “Press” links only pre-fill the subject line), we receive your email address, your name if you give it, and your message. We use them to answer you and, if you ask, to follow up on your request. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering correspondence (Art. 6(1)(f) GDPR).
Chat
The chat at the bottom right of the page is Shopify Inbox. To write, it asks for your name and email address; we then receive your messages and some technical details that the chat shows to whoever answers, such as the page you are writing from. No artificial intelligence is involved: replies are written by people at the Maison, and the only automatic texts are the welcome message and a few answers to common questions, written in advance by the Maison. Legal basis: the same as for email. Name and email address are needed to use the chat; otherwise you can write to us by email. Writing to us is always optional.
Keeping in touch (optional)
The chat shows an optional box, “Keep me informed about Maison Eldar”. Only if you tick it may we occasionally send you news of the Maison by email. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us or through the link in each email; withdrawal does not affect the lawfulness of processing carried out before it. There is no other newsletter.
Visiting the site
The site runs on Shopify. To deliver the pages and keep them secure, Shopify records technical data about each visit (such as IP address, browser, device and pages requested) and uses technical cookies, for example for the session and to remember your cookie choices. Legal basis: our legitimate interest in a working, secure site (Art. 6(1)(f) GDPR). Shopify also compiles visit statistics for us; the cookies used for statistics are set only if you accept them in the banner (consent, Art. 6(1)(a) GDPR). The cookies Shopify uses on shops, with their purpose and duration, are listed at shopify.com/legal/cookies.
Non-technical cookies are used only with your consent, which you give or refuse in Shopify’s cookie banner. To change or withdraw your choice, delete the site’s cookies in your browser: the banner will appear again. During a visit, the browser also keeps a technical marker, for that session only, so that the fade-in of the first photograph on each page is not repeated.
Age verification
If you answer yes to the age question, only the date of your answer is stored, in your browser (local storage, key “me-age”), and it is never sent to us. After 30 days the question is asked again; you can delete the answer at any time by clearing the site’s data in your browser. This is technical storage, needed for the site to work as you use it, and does not require consent.
Who receives the data
The data is seen by the people at the Maison who answer messages and by the providers that make this possible, acting on our behalf as processors: Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland), which hosts the site and the chat, and Google (Google Workspace), which manages our mailbox. For some services of its own, Shopify acts as an independent controller, as described in its privacy policy. Data may be disclosed to authorities where the law requires it. We do not sell or rent data, we do not carry out profiling and we make no automated decisions.
Transfers outside the European Union
Shopify may transfer data to Shopify Inc. in Canada, a country covered by a European Commission adequacy decision, and to other Shopify group companies and service providers, including in the United States, under Shopify’s Binding Corporate Rules and the European Commission’s standard contractual clauses. Google may process email data in the United States under the EU-U.S. Data Privacy Framework, for which Google LLC is certified, and the standard contractual clauses. You can ask us for a copy of these safeguards; Shopify’s Binding Corporate Rules are published at shopify.com/legal/binding-corporate-rules.
How long we keep data
- Emails and chat conversations: as long as needed to follow up on your request, and no longer than 24 months after the last exchange, unless they relate to a contract or the law requires us to keep them.
- Consent to receive news: until you withdraw it.
- Cookies: for the durations shown in Shopify’s list; technical logs: for the periods set by Shopify for the operation and security of the platform.
- Age answer: in your browser, valid for 30 days; it stays there until you clear the site’s data.
Your rights
You can ask to access your data, to correct or erase it, to restrict its use and to receive it in a portable format, and you can object to its use; you can withdraw your consent at any time. Write to contact@maison-eldar.com. You can also lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the country where you live or work, such as the CNIL in France (www.cnil.fr).
Right to object: where we rely on our legitimate interest (answering correspondence, site security), you may object at any time, on grounds relating to your particular situation, by writing to contact@maison-eldar.com.
Age
The site is reserved for people of legal drinking age in their country (18 in Italy and in France). We do not knowingly collect data from minors.
Changes
Any update will be published on this page, with its date.