Privacy Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)

Last updated: August 7, 2026

1. Data Controller

The data controller is:

PREMIATA TESSITURA ARTIGIANA CASENTINESE TACS SRL
VAT No. 01273270510
Registered office: Via Sanarelli 49, 52015 PRATOVECCHIO STIA (AR), Italy
Tel. +39 0575 583659
Email: info@tacs.it

This privacy policy describes how TACS collects and processes the personal data of users who visit the website www.tacs.it, use the services available online, make purchases, request information, assistance, exchanges, or returns, or interact with TACS through the channels provided on the website.

 

2. What is meant by “personal data”?

“Personal data” means any information relating to an identified or identifiable natural person.

Depending on how the user interacts with the website and its services, TACS may process the categories of data described below.

Identification and Contact Information

These may include, for example:

• first and last name;
• email address;
• phone number;
• residential, billing, or shipping address;
• any additional information voluntarily provided by the user.

Order and Purchase Data

When making a purchase, the following information may be processed:

• products ordered;
• size, quantity, and other order details;
• order number and date;
• delivery address;
• shipping information;
• order status;
• information regarding exchanges, returns, and refunds;
• information required for billing and for administrative, accounting, and tax compliance.

Payment Information

Payments made through the website may involve the processing of data by the payment service providers used by TACS.

TACS processes the information necessary to verify the outcome of the transaction and to manage the administrative and accounting aspects of the purchase, within the limits of the information made available by the payment system used.

The full payment method details may be processed directly by the relevant service provider in accordance with its own terms and conditions and privacy policy.

Customer Account Information

If the website allows users to create a personal account, the data necessary for registration, authentication, profile management, and viewing the history of orders and activities carried out through the account may be processed.

Data provided through contact, support, and return requests

When a user contacts TACS or uses the forms available on the website—including the “Return Request” procedure—the following information may be processed:

• identification and contact information;
• order number;
• affected products;
• reason for the request;
• any photographs or documents submitted by the user;
• the content of communications exchanged with TACS;
• any additional information needed to process the request.

Browsing Data and Technical Data

During normal browsing, the computer systems and software procedures used to operate the site may collect certain technical information, the transmission of which is implicit in the use of Internet communication protocols.

Such information may include, for example:

• IP address;
• date and time of the request;
• pages viewed;
• device type;
• operating system;
• browser used;
• technical information regarding the connection and browsing;
• Technical and security logs.

This data is used, to the extent necessary, to ensure the proper functioning and security of the website, prevent fraudulent or unlawful use, diagnose technical problems, and protect TACS’s IT systems.

Cookies and Other Tracking Tools

This website may use cookies and similar technologies.

Technical cookies and strictly necessary tools are used to ensure the proper functioning of the website and the provision of the requested services.

The use of any unnecessary cookies or tracking tools—including those used for statistical purposes that are not equivalent to technical, advertising, or profiling cookies—is subject to the user’s consent, where required by law.

For more information on the technologies used and how to manage your preferences, please see the Cookie Policy on the website.

 

3. Purposes and Legal Bases for Data Processing

TACS processes personal data only when there is a legal basis provided for by applicable law.

Purchasing and Order Management

The data is processed for the following purposes:

• receive and verify orders;
• manually check the availability of the ordered items;
• provide information on product availability or the relevant packaging timelines;
• process the payment;
• prepare and ship the order;
• communicate with the customer regarding the purchase;
• handle exchanges, returns, refunds, and the right of withdrawal;
• provide after-sales service.

Legal basis: performance of the contract or precontractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR.

Providing the data necessary for these purposes is essential to enable TACS to process the order and provide the requested services. Without this data, it may not be possible to complete or fulfill the purchase.

Administrative, accounting, tax, and regulatory compliance

The data may be processed for the purpose of issuing and retaining tax and accounting documentation and for any other obligations required by applicable law.

Legal basis: compliance with a legal obligation to which the Data Controller is subject, pursuant to Article 6(1)(c) of the GDPR.

Providing the data required for these purposes is mandatory.

Handling Requests for Information and Assistance

Data provided via email, phone, contact forms, or other channels made available by TACS are used to respond to user inquiries and provide the requested assistance.

When the request concerns a purchase or activities leading up to such a purchase, the legal basis is the performance of the contract or precontractual measures.

In other cases, the processing is carried out to handle the request voluntarily submitted by the data subject and, where applicable, based on TACS’s legitimate interest in managing communications related to its business.

Handling of Exchanges, Returns, Complaints, and Warranty Claims

The data is processed for the following purposes:

• receive and verify requests;
• identify the order;
• Check the condition of the product;
• arrange for any return;
• handle exchanges, refunds, disputes, or warranty claims;
• comply with the obligations set forth in consumer protection laws.

Legal basis: performance of the contract and compliance with applicable legal obligations.

Creating and Managing a Customer Account

If available, account data is processed to allow the user to register, log in to their personal account, and use its features.

Legal basis: performance of the service requested by the user, pursuant to Article 6(1)(b) of the GDPR.

Website Security and Abuse Prevention

Technical and browsing data may be processed for the following purposes:

• ensure the security of the website, accounts, and IT systems;
• prevent unauthorized access, fraud, and unlawful use;
• identify anomalies and malfunctions;
• to protect TACS’s rights, assets, and operations.

Legal basis: TACS’s legitimate interest in ensuring the security of its systems, preventing fraud, and protecting its business, pursuant to Article 6(1)(f) of the GDPR.

Establishment, exercise, or defense of a right

Data may be retained and used when necessary to prevent or resolve disputes and to establish, exercise, or defend a right of TACS or third parties, including in court proceedings.

Legal basis: the Data Controller’s legitimate interest in protecting its rights.

Newsletters and promotional communications

If the user voluntarily chooses to subscribe to the newsletter or to receive promotional communications, TACS may use the contact information provided to send commercial information and communications regarding TACS’s products, collections, initiatives, and activities.

Legal basis: consent of the data subject, pursuant to Article 6(1)(a) of the GDPR, when required.

Consent is optional, and failure to provide it does not prevent you from browsing the site or making purchases.

You may withdraw your consent at any time by using the link provided in the communications you receive or by writing to info@tacs.it.

The withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

 

4. Methods of Processing

Personal data is processed using electronic and computer-based tools and, where necessary, in paper form, in accordance with the principles of lawfulness, fairness, transparency, data minimization, accuracy, integrity, and confidentiality.

TACS implements technical and organizational measures appropriate to the risk in order to protect personal data from loss, destruction, alteration, unauthorized disclosure, accidental or unlawful access, and other forms of unauthorized processing.

Access to the data is granted only to those individuals who need it in connection with their duties and for the purposes described in this privacy policy.

 

5. Nature of the Data Provision

Providing the data marked as required on the website forms is essential to use the corresponding service.

Specifically, the data necessary for placing and processing an order, shipping, payment, billing, or handling a return must be provided so that TACS can properly perform the contract and comply with its legal obligations.

The provision of data for promotional purposes, on the other hand, is optional and subject, where required, to the consent of the data subject.

 

6. Recipients of the Data

Personal data may be processed by duly authorized and trained TACS employees and contractors.

To the extent necessary to achieve the purposes set forth in this privacy policy, the data may also be disclosed to external parties, including:

• e-commerce platform providers, hosting providers, and IT infrastructure providers;
• providers of technical, maintenance, security, and IT support services;
• providers of systems for order management and customer relationship management;
• payment service providers, banks, and financial intermediaries;
• couriers, freight forwarders, and logistics providers;
• administrative, accounting, tax, and legal consultants;
• communication and newsletter service providers, if used;
• entities that provide services strictly necessary for the operation of the e-commerce business;
• public administrations, judicial authorities, supervisory authorities, and other entities to which disclosure is required by law.

Vendors that process personal data on behalf of TACS are designated, where necessary, as data processors pursuant to Article 28 of the GDPR.

Personal data is not disclosed indiscriminately.

 

7. Transfer of Data Outside the European Economic Area

When using IT, cloud, communication, or other technology providers’ services, some personal data may be processed in countries located outside the European Economic Area.

If this occurs, TACS verifies that the transfer is carried out in accordance with Chapter V of the GDPR and based on one of the mechanisms provided for by applicable law, such as, as the case may be:

• an adequacy decision adopted by the European Commission;
• standard contractual clauses approved by the European Commission;
• additional safeguards or data transfer mechanisms provided for under the GDPR.

The data subject may request further information from TACS regarding the applicable safeguards by writing to info@tacs.it.

 

8. Data Retention Period

Personal data is retained only for as long as necessary to achieve the purposes for which it was collected, subject to any longer retention periods required by law or necessary to protect TACS’s rights.

Specifically:

Data related to orders, sales, and contractual relationships: These are retained for as long as necessary to fulfill the contractual relationship and, thereafter, for the period required by civil, tax, and accounting laws. Relevant documentation is generally retained for at least 10 years, unless longer retention periods are required by law or necessitated by audits or disputes.

Data related to returns, exchanges, refunds, complaints, and customer service: This data is retained for as long as necessary to process the request and, thereafter, for the period necessary to comply with legal obligations or to protect the rights of the parties.

Customer account data: This data is retained for the duration of the account’s use and until the account is deleted, unless certain data must be retained longer to comply with legal obligations or for purposes related to orders placed.

Data collected through contact requests: This data is retained for as long as necessary to provide the requested response and to manage any subsequent activities related to the communication.

Data processed for promotional purposes based on consent: such data is retained until consent is withdrawn or the right to object is exercised, and, in any case, no longer than is proportionate to the purpose for which it was collected.

Technical and security data: These are retained for the period necessary to ensure system security, prevent misuse, and investigate any incidents or unlawful conduct, unless longer retention periods are required by law or necessary to protect a right.

At the end of their respective retention periods, the data will be deleted, anonymized, or otherwise rendered unusable for their original purposes, subject to any legal obligations.

 

9. Rights of the Data Subject

In the cases and within the limits provided for by applicable law, the data subject may exercise the rights set forth in Articles 15–22 of the GDPR.

Specifically, you may request:

• confirmation as to whether or not personal data concerning him or her is being processed;
• access to one’s personal data and information regarding its processing;
• the correction of inaccurate data and the completion of incomplete data;
• the erasure of personal data, when the conditions are met;
• restriction of processing;
• data portability, in the cases provided for by law;
• to object to processing based on legitimate interests, for reasons related to their particular situation;
• to object at any time to the processing of their personal data for direct marketing purposes;
• to withdraw the consent previously given at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal.

The exercise of these rights is free of charge in the cases provided for by law and is not subject to any specific formalities.

 

10. How to Exercise Your Rights

To exercise your rights or request information about the processing of your personal data, you can contact TACS using one of the following contact details:

Email: info@tacs.it

or by written notice addressed to:

PREMIATA TESSITURA ARTIGIANA CASENTINESE TACS SRL
Via Sanarelli 49
52015 Pratovecchio Stia (AR)
Italy

TACS will respond to requests within the timeframes specified by applicable law.

If necessary to protect the data subject’s information, TACS may request additional information needed to verify the data subject’s identity before processing the request.

 

11. Right to File a Complaint

If the data subject believes that the processing of their personal data violates applicable law, they have the right to file a complaint with the competent supervisory authority.

In Italy, the competent authority is:

Data Protection Officer

This is without prejudice to the data subject’s right to seek other administrative or judicial remedies provided for by law.

 

12. Automated Decision-Making Processes

In connection with the activities described in this privacy notice, TACS does not use decision-making processes based solely on automated processing that produce legal effects concerning the data subject or similarly significantly affect the data subject within the meaning of Article 22 of the GDPR.

Should such processing practices be introduced in the future, the individuals concerned will receive the information required by law in advance.

 

13. Links to Third-Party Websites and Services

This website may contain links to websites, platforms, or services operated by third parties.

TACS does not control how these third parties process your personal data. Before using external services, you are therefore encouraged to review their respective privacy policies.

 

14. Changes to This Privacy Policy

TACS may update this privacy policy to reflect changes in regulations, updates to the services offered, or changes in how personal data is processed.

The updated version will be posted on this page, along with the date of the last update.

In the event of significant changes, TACS may adopt additional communication methods appropriate to the circumstances.

 

15. Contact Information

If you have any questions regarding this Privacy Policy or how TACS processes personal data, please contact:

PREMIATA TESSITURA ARTIGIANA CASENTINESE TACS SRL
Via Sanarelli 49, 52015 Pratovecchio Stia (AR), Italy
VAT No. 01273270510
Tel. +39 0575 583659
E-mail: info@tacs.it