Privacy notice

This notice describes how TM Italy Import Export processes the personal data collected through the website, the contact form, the client area and the shipments entrusted to us, under Articles 13 and 14 of Regulation (EU) 2016/679.

Data controller

The data controller is TOP MODA ITALY S.R.L. ("T.M.I. S.R.L."), with its registered office at Via Bianca Ceva 14, 20152 Milan (MI), Italy, VAT number 13257980964. For any request concerning personal data you may use the contact details published at the foot of this page and in the site footer.

No data protection officer has been appointed: requests are handled directly by the controller.

The data we collect

We process the data needed to answer requests, handle shipments and run the site. Browsing data for analytics and marketing is processed by optional services only with your consent.

  • Contact data: name, company name, email, telephone and the message sent through the form.
  • Client area account data: login credentials, saved addresses, order history.
  • Shipment data: sender, consignee, pickup and delivery addresses, contents and declared value of the parcel, customs documents.
  • Payment data: amount, outcome and transaction reference. Card details are handled directly by the payment provider and never pass through our systems.
  • Technical data: IP address, browser type and pages visited, within the limits set out in the Cookie Policy.

Purposes and legal bases

Every processing operation rests on a specific legal basis.

  • Answering quotes and contact requests: pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR).
  • Carrying out the transport, the customs formalities and the payment: performance of the contract (Art. 6(1)(b) GDPR).
  • Tax, accounting and customs obligations: legal obligation (Art. 6(1)(c) GDPR).
  • Newsletter and commercial communications: consent, which may be withdrawn at any time (Art. 6(1)(a) GDPR).
  • Site security: legitimate interest of the controller (Art. 6(1)(f) GDPR). Statistics with Google Analytics 4 and advertising measurement with Meta Pixel: separate, withdrawable consent (Art. 6(1)(a) GDPR).

Who we share data with

The data is accessible to authorised staff and to the suppliers who process it on our behalf as processors under Art. 28 GDPR: the carrier performing the shipment, the payment provider, the email service and the site's hosting provider.

The data required by customs law is disclosed to the authorities of the countries of departure and destination. We do not sell personal data. If you consent to optional cookies, Google and Meta may process browsing data for the purposes described in the Cookie Policy.

Transfers outside the European Union

An international shipment necessarily involves transferring the consignee's data to the country of destination. Where that country is not covered by an adequacy decision of the European Commission, the transfer relies on standard contractual clauses or on Art. 49(1)(b) GDPR, being necessary for the performance of the contract of carriage.

Analytics and marketing providers may also process data outside the European Economic Area. See their notices for details of transfers and safeguards.

How long we keep it

We keep data for as long as the purpose it was collected for requires and, after that, for the periods the law imposes.

  • Contact requests with no follow-up: 12 months from the last exchange.
  • Transport documents, invoices and customs files: 10 years, as required by tax and customs law.
  • Client area accounts: until deletion is requested, save for the documents listed above.
  • Newsletter subscriptions: until consent is withdrawn.

Your rights

You may at any time request access to your data, its rectification or erasure, restriction of processing, portability, and object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it without affecting the lawfulness of processing already carried out.

We answer within one month of the request. If you believe the processing infringes the law you may contact the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or the supervisory authority of your country of residence.

Updates

This notice may be updated to reflect changes to the services or to the law. The date at the top of the page always indicates the version in force; substantial changes are announced on the site.