This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you visit and use the website
Weerker (the “Site”), an e-commerce platform for DIY products, operated by Shippedd Srl.
We process your personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection laws.
1. Data Controller
The data controller (the “Controller”) is:
Shippedd Srl
VAT No.: 02504530979
Registered office: Via della Repubblica 96, 59100 Prato (PO), Italy
Operational office: Via Trieste 1, 59013 Montemurlo (PO), Italy
Email (general): info@shippedd.it
Customer support: assistenza@shippedd.it
The Controller ensures that personal data is processed in accordance with the principles of lawfulness, fairness, transparency,
purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality as set out in Article 5 GDPR.
2. Categories of Personal Data
2.1 Data provided directly by you
When you use the Site, you may provide us with the following categories of personal data:
First name and last name
Shipping address and billing address
Email address (required to place an order)
Order details (products purchased, quantities, price, order notes)
Data necessary for invoicing (where applicable)
Information provided through contact forms or support requests
Data related to returns, complaints, or warranty requests
2.2 Payment data
We do not store full payment card details on our systems. Payment data is processed exclusively by
third-party payment service providers (e.g., banks, payment gateways, PayPal or similar), which act as independent controllers
or processors and are compliant with PCI-DSS and other applicable regulations.
2.3 Data collected automatically
When you browse the Site, we may automatically collect:
IP address
Date and time of access
Pages visited and actions taken on the Site
Browser type and version, operating system, device information
Referring URL (the page from which you reached the Site)
Technical cookies, analytics cookies, and marketing cookies (as described in our Cookie Policy)
2.4 Data processed for anti-fraud purposes
To prevent fraudulent or abusive use of our services (including for Cash on Delivery orders, where applicable),
we may process:
Order history
Consistency of the data provided (e.g., name, address, email)
Technical identifiers and logs related to orders and access attempts
Results of automated or semi-automated anti-fraud checks
Such processing is carried out on the basis of our legitimate interest in preventing fraud and protecting our business and other users.
3. Purposes and Legal Bases of Processing
We process your personal data for the purposes and on the legal bases indicated below, in accordance with Article 6 GDPR.
Purpose
Legal Basis
Order management, fulfilment of purchases, shipment of products, and related communications.
Performance of a contract or pre-contractual measures requested by you (Art. 6(1)(b) GDPR).
Billing, accounting, and tax obligations.
Compliance with a legal obligation (Art. 6(1)(c) GDPR).
Customer care, handling of requests, complaints, returns, and warranty claims.
Performance of a contract and/or legitimate interest in providing high-quality support (Art. 6(1)(b) and 6(1)(f) GDPR).
Technical operation of the Site, security, and protection against cyber attacks.
Legitimate interest in ensuring the security and proper functioning of the Site (Art. 6(1)(f) GDPR).
Anti-fraud checks on orders and transactions.
Legitimate interest in preventing fraud and misuse of services (Art. 6(1)(f) GDPR).
Statistical analysis and improvement of the Site and our services (in aggregated or anonymised form where possible).
Legitimate interest in improving our services (Art. 6(1)(f) GDPR) and/or your consent for non-essential cookies (Art. 6(1)(a) GDPR).
Marketing and remarketing activities using cookies, tracking technologies, or advertising platforms (e.g., Google Ads, Meta, TikTok).
Your explicit consent for profiling/marketing cookies and tracking (Art. 6(1)(a) GDPR).
4. Methods of Processing and Security
Personal data is processed using manual and electronic tools, with organisational and technical measures appropriate to the level
of risk, in order to ensure confidentiality, integrity, and availability of the data.
These measures include, for example:
Use of HTTPS (SSL/TLS) encryption for browsing and data transmission
Secure servers protected by firewalls and access control systems
Periodic backups of essential data
Access to data limited to authorised personnel and service providers
5. Data Retention Periods
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:
Order and billing data: up to 10 years, in accordance with accounting and tax obligations.
Shipping and delivery data: generally up to 24 months from the completion of the order, unless required longer by law.
Customer support data: for the time necessary to handle your request and any related issues.
Anti-fraud data: up to 36 months, depending on the nature of the checks and applicable limitation periods.
Technical logs and security logs: typically up to 12 months, unless needed longer for security or legal reasons.
Data collected via cookies: according to the durations specified in our Cookie Policy.
Marketing data based on consent: until you withdraw your consent or request erasure.
At the end of the retention periods, data will be deleted or irreversibly anonymised where technically possible.
6. Recipients of Personal Data
Your data may be shared, strictly within the limits of the purposes described above, with:
Shipping and logistics providers (couriers and transport companies) to deliver your orders.
Payment service providers (e.g., banking institutions, payment gateways) to process your payments.
IT and hosting service providers that manage the infrastructure, the Site, and related services.
Professional advisers (e.g., accountants, tax consultants) for administrative and tax obligations.
Anti-fraud and security providers, where necessary to prevent fraud and abuse.
Advertising and analytics platforms (e.g., Google, Meta, TikTok), only where you have granted consent for profiling or marketing cookies.
Public authorities and supervisory bodies, where required by law or upon official request.
Where required by Article 28 GDPR, such parties are appointed as data processors and bound by specific data processing agreements.
7. International Data Transfers
Some service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that:
The third country has been recognised by the European Commission as providing an adequate level of data protection; or
Standard Contractual Clauses approved by the European Commission are in place; or
Other appropriate safeguards under Articles 46–49 GDPR are implemented.
You may request further information on existing safeguards by contacting us at
info@shippedd.it.
8. Your Rights under GDPR (Articles 15–22)
As a data subject, you have the following rights, where applicable:
Right of access – to obtain confirmation as to whether or not we process your personal data and to receive a copy.
Right to rectification – to request the correction of inaccurate or incomplete data.
Right to erasure – to request the deletion of your data in certain circumstances (“right to be forgotten”).
Right to restriction of processing – to restrict processing in specific cases.
Right to data portability – to receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to object – to object, at any time, to processing based on our legitimate interests, including profiling related to such interests.
Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
We may need to verify your identity before fulfilling your request. We aim to respond within one month, as required by GDPR, which may be extended in complex cases.
You also have the right to lodge a complaint with the competent Data Protection Authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
9. Cookies and Tracking Technologies
The Site uses cookies and similar technologies for technical, statistical, and marketing purposes. These may include:
Strictly necessary cookies – essential for the operation of the Site and for providing the requested services (e.g., cart, checkout, basic security).
Analytics cookies – used to collect aggregated, anonymous statistics on how users interact with the Site (e.g., page views, session duration).
Marketing and profiling cookies – used to show you personalised ads or remarketing campaigns based on your browsing behaviour, via platforms such as Google Ads, Meta, or TikTok.
Non-essential cookies (analytics and marketing) are used only if you give your consent via the cookie banner or settings.
You can change your cookie preferences at any time by adjusting your browser settings or through our cookie management tool.
For more details, please refer to our dedicated Cookie Policy.
10. Minors
The Site is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
If you believe that a minor has provided us with personal data, please contact us so that we can promptly delete such data.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example to comply with new legal requirements or to reflect changes in our
processing activities. The updated version will be published on this page with the indication of the latest revision date.
12. Contact Information
For any questions regarding this Privacy Policy or our data protection practices, you can contact us at:
Shippedd Srl
Registered office: Via della Repubblica 96, 59100 Prato (PO), Italy
Operational office: Via Trieste 1, 59013 Montemurlo (PO), Italy
Email (general): info@shippedd.it
Customer support: assistenza@shippedd.it
VAT No.: 02504530979
