Privacy Policy

Information provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data Controller

The Data Controller is Brulania S.r.l. (TOPPE.COM brand), Via Cupa San Marco, 47 – 80050 Santa Maria La Carità (NA) – Italy. VAT no. 10305791211. Email: info@toppe.com – Tel. +39 081 8701524.

2. What data we collect

We process the personal data you voluntarily provide and data collected while browsing:

Order and billing data: first and last name, company name, shipping and billing address, email, phone, VAT number/tax code.
Contact and quote form data: name, email, phone, message and any files/artwork attached.
Payment data: handled directly by the payment circuits (e.g. PayPal, cards via Nexi XPay); we do not store full card numbers.
Browsing and cookie data: IP address, browser type, pages visited, as described in the Cookie Policy.

3. Purposes and legal basis of processing

Order fulfilment, shipping management, invoicing and customer service – legal basis: performance of a contract (Art. 6(1)(b) GDPR);
Compliance with legal, tax and accounting obligations – legal basis: legal obligation (Art. 6(1)(c) GDPR);
Responding to requests sent via the contact and quote forms – legal basis: pre-contractual measures (Art. 6(1)(b) GDPR);
Sending commercial communications and newsletters, where applicable – legal basis: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time;
Website security and service improvement – legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Processing methods and retention

Data is processed using electronic and paper tools, adopting technical and organisational measures adequate to ensure its security and confidentiality. Data is kept for the time necessary for the stated purposes and, for tax and accounting obligations, for the period required by law (usually 10 years).

5. Disclosure of data to third parties

Data may be disclosed, solely for the purposes indicated above, to: couriers and shippers for order delivery; payment service providers; tax and accounting consultants; technical and IT service providers acting as Data Processors. Data is not disseminated or sold to third parties for their own purposes.

6. Transfer of data outside the EU

Some providers (for example the payment circuits) may process data outside the European Economic Area. In such cases the transfer takes place in compliance with the safeguards set out in Articles 44 et seq. of the GDPR (standard contractual clauses or adequacy decisions).

7. Rights of the data subject

You may exercise at any time the rights set out in Articles 15-22 of the GDPR: access, rectification, erasure, restriction, objection, data portability and withdrawal of consent. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. How to exercise your rights

To exercise your rights or for any request regarding the processing of your data, you can write to info@toppe.com.

9. Cookies

For detailed information on the cookies used by the site, please see our Cookie Policy.