Privacy notice
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 29 September 2026.
This notice explains how we process the personal data of people who visit barriqule.com and barricati.it (Barriqule's editorial project), book an appointment, write to us, subscribe to the newsletter or buy online.
1. Data controller
Barriqule di Del Tufo, Via Vernazza 13, 12051 Alba (CN), Italy, VAT no. IT03912180043, REA CN-323594. Email: info@barriqule.com · Tel. +39 0173 282435.
2. What data we process, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Website browsing and security | IP address, browser, pages visited, date and time (technical logs) | Legitimate interest in the operation and security of the website (Art. 6.1.f) | Up to 12 months, unless needed to investigate unlawful activity |
| Replying to requests sent via forms, chat, email or phone | Name, email, phone, message content | Pre-contractual measures at your request (Art. 6.1.b) | The time needed to handle the request, then 24 months |
| Appointment booking (optometric consultation, eyewear service check) | Name, email, phone, chosen date and service | Performance of the requested service (Art. 6.1.b) | 24 months after the appointment |
| Online purchases, shipping, support, returns and warranty | Personal and contact details, address, order, payment data (handled by Stripe or PayPal: we never see your full card details) | Performance of the contract (Art. 6.1.b) and tax and accounting obligations (Art. 6.1.c) | 10 years for tax documents; otherwise until the end of the legal guarantee |
| Barriqule and Barricati newsletters | Name, email, email opens and clicks | Consent (Art. 6.1.a), which you can withdraw at any time via the link at the bottom of every email | Until you unsubscribe |
| Emails about products and services similar to those already purchased | Legitimate interest (Art. 130(4) Italian Privacy Code); you can object at any time | Until you object and in any case no longer than 24 months after your last purchase | |
| Visit statistics (Google Analytics) and advertising (Google Ads, Meta) | Cookie identifiers, browsing data, truncated IP address | Consent via the cookie banner (Art. 6.1.a GDPR and Art. 122 Italian Privacy Code) | See the cookie policy |
Data on your eye health collected during visits to the store (optometric exam, prescription) are processed under the specific notice you sign at the atelier and are not collected through the website.
3. Mandatory data
Data marked as mandatory in forms are needed to reply, schedule the appointment or fulfil the order: without them we cannot do so. Subscribing to the newsletter and accepting non-essential cookies is always optional.
4. Who we share your data with
We do not sell or transfer your data to third parties for marketing purposes. Your data may be processed, only for the purposes above, by:
- Odoo S.A. (Belgium), which provides our management software and website hosting, as data processor;
- Stripe and PayPal for payments, as independent controllers;
- couriers for shipping;
- Google Ireland Ltd (Analytics, Ads, Tag Manager) and Meta Platforms Ireland Ltd, only if you have consented to cookies;
- our accountant and the atelier's staff, bound by confidentiality;
- public authorities, where required by law.
5. Transfers outside the European Union
Google and Meta may transfer data to the United States. Both are certified under the EU-US Data Privacy Framework, recognised as adequate by the European Commission (decision of 10 July 2023), and use the Commission's standard contractual clauses.
6. Your rights
You can ask at any time for access to, rectification, erasure, restriction or portability of your data and object to processing (Articles 15-22 GDPR), as well as withdraw your consent without affecting processing already carried out. Write to info@barriqule.com: we reply within 30 days. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
7. Minors
Our online services are not intended for children under 14. If you believe a minor has given us data, write to us and we will delete it.
8. Security and changes
We adopt appropriate technical and organisational measures (HTTPS encrypted connection, personal access to our management system, backups). Any changes to this notice will be published on this page with the new update date.