PRIVACY POLICY
Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679
Last updated: 21 June 2026
This Privacy Policy describes how JMAR S.r.l. collects, uses, stores and protects the personal data of users who visit the JMARSHOP website, make purchases, create an account, submit enquiries, publish reviews or use any of the other services available on the website.
This Privacy Policy applies to the website jmarshop.com and does not apply to external websites, platforms or services that may be accessed through links available on the website.
1. Data Controller
The Data Controller responsible for the processing of personal data is:
JMAR S.r.l.
Registered, administrative and production office:
Via Battisti 7/B
30030 Olmo di Martellago (VE)
Italy
Tax Code and VAT Number: 04336290277
Venice Companies Register: VE – 402881
Share capital: €100,000.00, fully paid up
Email address for privacy-related requests: [email protected]
Telephone: +39 041 2688833
2. Categories of personal data processed
JMAR S.r.l. may process the following categories of personal data.
Identification and contact details
First name, surname, company name, email address, telephone number, residential address, contact address, shipping address and billing address.
Tax and administrative information
Tax code, VAT number, recipient code, certified email address and any other information required to issue invoices and tax documents.
Order information
Products purchased, quantities, amounts, discounts, delivery methods, order status, returns, refunds, complaints and communications relating to purchases.
Payment information
JMAR S.r.l. may receive information regarding the outcome of a payment, the amount, the date and the transaction reference.
Full payment card details are normally processed directly by payment service providers and are not made available to JMAR S.r.l.
Customer account information
Protected login credentials, preferences, saved products, wish lists, order history and other information associated with the customer account.
Information provided to Customer Service
Information contained in messages sent through the contact form, by email, by telephone or through other communication channels made available by JMARSHOP.
Reviews, photographs and videos
The name or nickname used for the review, rating, review text and any photographs or videos voluntarily uploaded by the user.
Users are requested not to publish images, videos or information relating to other individuals unless they have the appropriate right or authorisation to do so.
Browsing and technical data
IP address, date and time of the request, pages visited, device used, browser type, operating system, technical logs, online identifiers and information required for the security and proper functioning of the website.
Cookie preferences
The choices made by users through the cookie banner and the preference management panel.
Further information about the use of cookies and tracking technologies is available in the Cookie Policy.
3. Purposes and legal bases of processing
Managing orders and purchases
Personal data is processed in order to:
- receive and manage orders;
- check product availability;
- manage payments and refunds;
- prepare and ship goods;
- provide information about order status;
- manage returns, customer support and warranties.
Legal basis: performance of a contract or steps taken at the request of the data subject prior to entering into a contract.
Providing the personal data required to process an order is mandatory. Without this information, it will not be possible to complete the purchase.
Creating and managing customer accounts
Personal data is processed to allow users to register, access their personal area, view their orders and use the services associated with their account.
Legal basis: performance of the service requested by the user.
Creating an account is optional unless it is required to use a specific service or function.
Invoicing and legal obligations
Personal data is processed to comply with tax, accounting, administrative and civil law obligations, as well as requests from the competent authorities.
Legal basis: compliance with a legal obligation.
Customer Service and information requests
Personal data is processed to respond to enquiries concerning products, prices, orders, payments, shipping, returns and customer support.
Legal basis: steps taken prior to entering into a contract, performance of a contract or the legitimate interest of the Data Controller in providing assistance to its customers.
Product reviews
Personal data is processed to receive, verify, moderate and publish reviews, ratings, photographs and videos submitted by users.
Reviews may be checked before publication in order to prevent unlawful, offensive, fraudulent, irrelevant content or content that does not comply with the website rules.
Legal basis: the user’s request to publish the review and the legitimate interest of the Data Controller in ensuring the authenticity, security and quality of published content.
Published reviews become visible to other website visitors. Users are advised to use a name or nickname that does not reveal unnecessary personal information.
Newsletters and marketing communications
With the user’s consent, their email address may be used to send information about JMARSHOP products, news, promotions and offers.
Legal basis: the consent of the data subject.
Subscription is optional and consent may be withdrawn at any time by using the unsubscribe link included in each communication or by contacting JMAR S.r.l.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Security and fraud prevention
Technical and transaction-related data may be processed in order to:
- protect the website and user accounts;
- detect unusual or unauthorised access;
- prevent fraud and misuse;
- verify the proper functioning of the systems;
- protect the rights of JMAR S.r.l. and its users.
Legal basis: the legitimate interest of the Data Controller in protecting its systems, preventing fraud and defending its rights.
Statistics, analytics and advertising
Analytics or advertising tools that are not strictly necessary are used in accordance with the preferences expressed by the user through the cookie banner.
Legal basis: the consent of the data subject, where required.
Without consent, non-essential cookies and tracking technologies must remain disabled, as described in the Cookie Policy.
4. Processing methods and security
Personal data is processed using electronic systems and, where necessary, by manual means.
JMAR S.r.l. adopts technical and organisational measures appropriate to the level of risk in order to protect personal data against loss, destruction, alteration, disclosure, unauthorised access or unlawful use.
Access to personal data is restricted to authorised personnel and suppliers who genuinely require access in order to provide the services entrusted to them.
However, no information system can guarantee absolute security. Users are therefore advised to use strong passwords, keep their login credentials secure and not share them with third parties.
5. Recipients of personal data
Personal data may be disclosed, where necessary, to the following categories of recipients:
- authorised employees and collaborators of JMAR S.r.l.;
- hosting, maintenance, security and IT support providers;
- e-commerce platform providers and suppliers of related modules;
- banks and payment service providers;
- couriers, shipping companies and logistics operators;
- email and newsletter service providers;
- tax, accounting, legal and administrative advisers;
- customer support and review management service providers;
- analytics and advertising service providers, subject to the consent given by the user;
- public authorities, law enforcement agencies and other parties where required by law.
Suppliers that process personal data on behalf of JMAR S.r.l. are appointed as Data Processors pursuant to Article 28 of the GDPR, where required.
Personal data is not publicly disclosed, except for information that users voluntarily choose to make public, such as reviews, names or nicknames, photographs and videos associated with a review.
6. Transfers of personal data outside the European Economic Area
Some IT, analytics, advertising, payment or communication service providers may process personal data in countries located outside the European Economic Area.
Where this occurs, the transfer is carried out on the basis of an adequacy decision issued by the European Commission or by using the safeguards provided for under Articles 44 and following of the GDPR, such as Standard Contractual Clauses.
Users may request information about the applicable safeguards by contacting JMAR S.r.l.
7. Data retention periods
Personal data is retained only for as long as necessary for the purposes for which it was collected.
In particular:
Orders, invoices and accounting documents
Data relating to purchases, invoicing and accounting obligations is retained for the period required by applicable law, normally 10 years from the relevant accounting record, unless disputes or legal obligations require a longer retention period.
Customer accounts
Customer account information is retained for the duration of the account and until a deletion request is received, except for information that must be retained to comply with legal or administrative obligations or to manage disputes.
Inactive accounts may be periodically reviewed, deleted or anonymised.
Customer Service enquiries
Communications are retained for the time required to manage the request and normally for no longer than 24 months after the request has been closed, unless they relate to an order, complaint, warranty claim or dispute.
Newsletters
Personal data is retained until consent is withdrawn or a deletion request is received, with periodic checks to ensure that the data remains valid and relevant.
Reviews, photographs and videos
Content is retained for as long as the review remains published on the website.
After removal, certain data may be retained for an additional period where necessary to prevent misuse, document consent, manage complaints or establish, exercise or defend legal claims.
Technical and security data
Logs and technical data are retained for periods proportionate to security, maintenance and fraud prevention requirements, unless they need to be retained for longer in the event of an incident, investigation or request from a competent authority.
Cookies and tracking technologies
The relevant retention periods are indicated in the Cookie Policy and in the cookie preference management panel.
At the end of the applicable retention periods, personal data is deleted or anonymised, unless further retention is required by law.
8. Provision of personal data
Providing personal data marked as mandatory is necessary to complete and fulfil a purchase, issue tax documents, arrange a delivery or respond to a request.
Failure to provide this information may make it impossible to provide the requested service.
Providing personal data for newsletters, marketing activities, non-essential cookies and product reviews is optional and does not prevent users from purchasing products available on the website.
9. Automated decision-making and profiling
JMAR S.r.l. does not make decisions based solely on automated processing that produce legal effects or similarly significant effects for the user.
Subject to the user’s consent, certain advertising tools may analyse interactions with the website in order to measure advertising campaigns, create audiences or display more relevant advertisements.
Further information is available in the Cookie Policy and in the preference management panel.
10. Rights of the data subject
Where provided for under the GDPR, data subjects may exercise the following rights:
- obtain confirmation as to whether or not personal data concerning them is being processed;
- access their personal data;
- request the correction of inaccurate data or the completion of incomplete data;
- request the deletion of personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive their personal data in a structured, commonly used and machine-readable format and, where possible, transmit it to another Data Controller;
- withdraw consent at any time;
- object to direct marketing at any time;
- lodge a complaint with the Italian Data Protection Authority;
- bring proceedings before the competent courts.
The right to erasure does not apply to data that JMAR S.r.l. is legally required to retain or that is necessary for the establishment, exercise or defence of legal claims.
11. How to exercise your rights
Requests may be sent to:
JMAR S.r.l.
Via Battisti 7/B
30030 Olmo di Martellago (VE)
Italy
Email: [email protected]
Telephone: +39 041 2688833
In order to protect personal data, JMAR S.r.l. may request information reasonably necessary to verify the identity of the person making the request.
Requests will be handled within the time limits established by the applicable legislation.
12. Links to third-party websites and services
The website may contain links to websites, social networks, platforms or services operated by third parties.
JMAR S.r.l. does not control the way in which these third parties process personal data. Before using an external service, users are advised to read the relevant privacy policy.
13. Changes to this Privacy Policy
JMAR S.r.l. may update this Privacy Policy as a result of regulatory, organisational or technical changes or changes to the services offered.
The updated version will be published on this page together with the date of the latest update.