Privacy Notice on the Processing of Personal Data

In accordance with national and European privacy legislation (GDPR | General Data Protection Regulation), we provide information on how our company processes personal data, according to the type of data concerned.

Data Controller

bindCommerce s. R. L. is the data controller for personal data relating to prospective customers, customers, partners, suppliers, employees, collaborators and any other party with whom bindCommerce establishes a direct relationship and whose personal data it collects. Such parties are provided with this privacy notice, through which bindCommerce requests consent to process their data.

The personal data of these parties may be collected electronically, for example through the completion of contact forms or the receipt of emails addressed to members of our company.

bindCommerce s. R. L. is not the data controller for personal data collected through the bindCommerce platform, as it has no direct relationship with the data subjects concerned, namely the customers of our users. In relation to such data, bindCommerce acts as a joint data controller.

Joint responsibility for data processing

One of the purposes of the bindCommerce service is to integrate different IT systems during post-sale operations, transferring order-related information from sales platforms, such as eCommerce CMSs and marketplaces, to other systems, including company management software, ERP systems and logistics platforms.

The service architecture requires such data, including the personal information of our users’ customers and details of their online purchases, to be stored within our IT systems and retained for the period required by the integration processes used by our customers.

In relation to this personal data, bindCommerce acts as a joint data controller, although it is not the primary data controller.

The rights that must be guaranteed to data subjects, including the right to receive information before data collection, to be informed of the existence of their data, to request rectification and to request partial or complete deletion, including the right to be forgotten, must be managed by the data controller. With regard to data stored in bindCommerce, the data controller may carry out the necessary maintenance operations, such as editing or deleting data, independently through the system interface.

Data Protection Officer

The Data Controller’s organisation has appointed a Data Protection Officer, or “DPO”.

The DPO is available to provide any information concerning the processing of personal data by bindCommerce s. R. L., including the list of data processors involved in such processing.

The appointed DPO is Eng. Paolo Tateo, who can be contacted at: dpo@@@PROT0@@

Purposes of processing

Your data will be processed for operational and commercial purposes: to respond to your request for information or services, to provide the requested service and subsequently to keep you informed about bindCommerce news and updates.

Disclosure of data to third parties

Your data may be processed by authorised individuals appointed by the Data Controller for the provision of the service. These individuals may include employees, project-based collaborators, occasional collaborators, external consultants or personnel appointed by partner companies to which specific activities may be assigned.

Your data may also be disclosed, where this may be of potential interest to you, to partner companies that provide services currently integrated, or which may be integrated in the future, with bindCommerce. This may occur for technical reasons connected with the provision of the service or to inform you about commercial opportunities, such as the possibility of selling new products, offering your products in new markets or using new channels or tools that increase visibility or improve relationships with your customers and prospective customers.

The disclosure of your data to partner companies is limited to your contact information, including company name, address, websites, contact person, telephone numbers and email addresses, as well as information about the IT platforms in use, such as eCommerce CMSs, management software and marketplaces. Confidential information concerning your business activities will never be disclosed.

Data protection measures

Data processing will be carried out using appropriate security and protection measures, whether the data is processed electronically or in paper form.

Data breach

Our policy provides that any personal data breach involving the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed shall be reported to the external data controller, namely the service user and any relevant partner companies, such as marketplaces operators, within 72 hours of the breach being discovered.

With regard to personal data for which Amazon is the data controller, namely data relating to orders received from Amazon, any breach will be reported to Amazon within 24 hours of its discovery. The form and content of any notification to the competent authorities will be agreed with Amazon in accordance with the document “Amazon MWS Developer Guide » Data Protection Policy”.

Data retention period

Unless the data subject expressly requests deletion, data collected by bindCommerce will be retained indefinitely, with appropriate safeguards in place to protect it.

Personal data originating from Amazon will be retained only for the period necessary for the purposes of processing and, in any case, for no longer than 30 days after the relevant orders have been shipped.

Optional provision of data

The provision of your data is optional. However, if you do not provide your data, we will not be able to provide the requested service or send you the commercial information described above.

Rights of data subjects

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. You also have the right to obtain information regarding: a) the source of the personal data; b) the purposes and methods of processing; c) the logic applied where processing is carried out using electronic systems; d) the identification details of the data controller, data processors and designated representative; e) the parties or categories of parties to whom the personal data may be disclosed or who may become aware of it in their capacity as designated representatives within the territory of the State, data processors or authorised persons.

You also have the right to obtain: a) the updating, rectification or, where relevant, completion of the data; b) the deletion, anonymisation or restriction of data processed unlawfully, including data whose retention is unnecessary in relation to the purposes for which it was collected or subsequently processed; c) confirmation that the operations referred to in points a) and b), including their content, have been brought to the attention of those to whom the data has been disclosed or disseminated, unless this proves impossible or involves a manifestly disproportionate effort compared with the right being protected.

You also have the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even where the data is relevant to the purposes for which it was collected; b) to the processing of personal data concerning you for the purpose of sending advertising or direct marketing material, carrying out market research or sending commercial communications.

Cookie Policy

This website and the related service platform use the following types of cookies:

Technical cookies, which facilitate browsing and the use of various functions, including the completion of forms, purchasing procedures and support services, by identifying the user’s session and storing preferences such as the selected language and other choices, for example the option not to display the cookie notice again.

Analytics cookies, which allow the anonymous analysis of user behaviour on the website and the creation of browsing profiles in order to improve the website.

Cookies added by Google Analytics are governed by Google Analytics’ own privacy policies. Please note that cookies can be enabled or disabled by following the instructions provided by your browser.

For a definition of cookies, please visit the relevant Wikipedia page.

Last updated: 29 September 2025