Privacy Policy

01 Data controller

Il Data controller dei dati personali raccolti tramite il sito astralithlabs.com è:

Domechan di Domenico Morabito
Registered office: Via Giuseppe Grassi, 18 – 26864 Ospedaletto Lodigiano (LO), Italy
VAT No.: IT08951440968 – REA: LO-1473761

Astralith Labs is a commercial division of Domechan di Domenico Morabito.

02 Data collected

We only collect the data that users voluntarily provide through the contact form available on the website:

• First and last name
• Email address
• PrestaShop website URL (optional)
• Message text

We also collect anonymous and aggregated technical browsing data (IP address, browser type, pages visited) through analytics tools, solely to improve the service.

03 Purposes and legal basis

Data is processed for the following purposes:

• Responding to contact and demo requests – Legal basis: performance of pre-contractual measures (Art. 6.1.b GDPR)
• Managing the commercial relationship – Legal basis: performance of a contract (Art. 6.1.b GDPR)
• Tax and accounting obligations – Legal basis: legal obligation (Art. 6.1.c GDPR)
• Commercial communications about our products – Legal basis: explicit consent (Art. 6.1.a GDPR), which may be withdrawn at any time

04 Data retention

Data is retained for the time strictly necessary for the purposes indicated:

• Contact data: 24 months from the last interaction, unless a different legal obligation applies
• Accounting and tax data: 10 years in accordance with Italian tax law
• Anonymous browsing data: 12 months

After these periods, the data is deleted or irreversibly anonymized.

05 Disclosure to third parties

Personal data is not sold or transferred to third parties. It may only be disclosed to:

• Web3Forms (email forwarding service) – processes data as a data processor
• Stripe (payment processor) – for transaction management
• Competent authorities, where required by law

All third-party providers are selected from parties that guarantee adequate security measures and are bound by specific data processing agreements (DPAs).

06 International transfers

Some providers (e.g. Web3Forms, Stripe) may process data outside the European Economic Area (EEA). In such cases, we ensure that the transfer takes place in compliance with the safeguards provided by the GDPR, in particular through:

• Standard contractual clauses approved by the European Commission
• Adequacy of the third country as recognized by the European Commission

07 Data subject rights

Pursuant to Articles 15–22 of the GDPR, you have the right to:

• Access – obtain confirmation of processing and a copy of your data
• Rectification – correct inaccurate or incomplete data
• Erasure (“right to be forgotten”) – obtain deletion of your data
• Restriction – restrict processing in certain cases
• Portability – receive your data in a structured, machine-readable format
• Objection – object to processing for direct marketing purposes
• Withdrawal of consent – at any time, without affecting the lawfulness of prior processing

To exercise your rights, write to contact@astralithlabs.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

08 Minors

Astralith Labs services are intended exclusively for adults (18 years of age or older). We do not knowingly collect personal data from minors. If we become aware that minors’ data has been collected inadvertently, we will delete it immediately.

09 Changes to this policy

We reserve the right to update this notice at any time. Changes will be published on this page with the updated date indicated. In the event of substantial changes, registered users will be informed by email.

10 Contact

For any questions regarding the processing of your personal data:

Domechan di Domenico Morabito – Astralith Labs
Via Giuseppe Grassi, 18 – 26864 Ospedaletto Lodigiano (LO)