Privacy Policy pursuant to EU Regulation 2016/679 (GDPR)

1. Data Controller

The Data Controller is:

Mistral Hockey di Corio Riccardo
VAT ID: 13190210016
Tax Code: CRORCR90T18L219J
Registered office: Corso Re Umberto 87, 10128, Turin, Italy
Legal representative: Riccardo Corio
Certified email (PEC): riccardo.corio@pec.fiscozen.it
Contact email: hello@mistralhockey.com

2. Types of Data Collected

We collect and process the following categories of personal data:

• Identification data: first name, last name

• Contact data: email address, billing/shipping address

• Payment data: processed via external providers (e.g., Stripe)

• Technical and usage data: IP address, cookies, device/browser information

3. Purposes of Data Processing

Personal data are processed for the following purposes:

• Order fulfillment and payment processing

• Legal and accounting compliance

• Customer support and order communication

• Marketing and newsletter (only with explicit consent)

• Website performance analysis and improvement

• Legal defense, if necessary

4. Legal Basis for Processing

Data processing is based on:

• Execution of a contract or pre-contractual measures (Art. 6, par. 1, let. b GDPR)

• Legal obligations (Art. 6, par. 1, let. c GDPR)

• Consent of the data subject (Art. 6, par. 1, let. a GDPR)

• Legitimate interest of the Data Controller (Art. 6, par. 1, let. f GDPR), e.g., site security

5. Data Processing Methods

Personal data are processed using electronic and manual tools, with adequate technical and organizational security measures in place to protect confidentiality and integrity.

6. Disclosure of Data to Third Parties

Personal data may be shared with third parties, strictly for the purposes mentioned above, such as:

• Payment service providers (e.g., Stripe)

• Hosting and e-commerce platform providers

• Marketing or newsletter platforms

• Legal or tax consultants, if necessary

These parties act as external Data Processors under GDPR.

7. Data Retention

Data will be stored for the time necessary to achieve the purposes for which they were collected, in accordance with legal obligations and industry standards.

8. Data Subject Rights

Data subjects may exercise their rights under Articles 15–22 of the GDPR, including:

• Right of access

• Right to rectification or erasure

• Right to restrict processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent at any time

• Right to lodge a complaint with the supervisory authority (Garante Privacy)

Requests can be sent to: hello@mistralhockey.com

9. Data Transfers Outside the EU