Personal data processing notice provided under Article 13 of Regulation (EU) 2016/679 (GDPR) to anyone accessing or interacting with onlypartsmilano.com.
The controller for the personal data collected through onlypartsmilano.com is OnlyPartsMilano di Nigel Florio, a sole proprietorship with registered office at Via Dante Alighieri 20, 20054 Segrate (MI), Italy, VAT number 12728730966.
For any request concerning the processing of personal data, the Controller can be contacted at info@onlypartsmilano.com.
In the course of using the site, the Controller processes the following categories of personal data:
Personal data is processed for the following purposes and on the following legal bases under Article 6 of the GDPR:
The site uses Google Analytics 4, a statistical analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), deployed via Google Tag Manager.
The measurement script is loaded only after the user has given explicit consent through the cookie banner, in accordance with Google's Consent Mode mechanism: without consent, no analytics cookie is installed and no data is sent to Google for statistical purposes.
Google Ireland Limited acts as an independent controller for the data collected through its own tools, as described in Google's privacy policy, available at https://policies.google.com/privacy.
Personal data may be shared with third parties acting as data processors under Article 28 GDPR, appointed by specific agreement, including: the provider of hosting and application infrastructure services (Vercel Inc.), the provider of database and backend services (Supabase Inc.) and, limited to the statistical data collected with consent, Google Ireland Limited for the Google Analytics 4 service.
Some of these providers may process data outside the European Economic Area. In such cases, the transfer is carried out in compliance with Chapter V of the GDPR, on the basis of Standard Contractual Clauses approved by the European Commission or applicable adequacy decisions for the destination country.
Data is never shared or disclosed to third parties for marketing purposes other than the Controller's own.
Contact data provided through the site's forms is kept for the time needed to handle the request or order and, subsequently, for the period required by applicable tax and civil-law regulations (typically 10 years for accounting records).
The register of consents given through the cookie banner is kept for a period of 5 years, as a precautionary period for evidence of the consent collected.
Aggregated statistical data collected via Google Analytics 4 is retained according to the retention period configured in the tool, currently set at 14 months, after which it is automatically deleted or anonymised.
As a data subject, the user has the right to obtain from the Controller, where applicable, access to their personal data, rectification or erasure of the data, restriction of the processing concerning them, data portability and the right to object to processing, as well as the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
These rights can be exercised by sending a request to info@onlypartsmilano.com. The Controller will respond to the request without undue delay and in any case within the time limits set out in the GDPR.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), based in Piazza Venezia 11, 00187 Rome, reachable through www.garanteprivacy.it, if they believe that the processing of their data infringes applicable law.
The Controller reserves the right to modify or update, in whole or in part, this privacy notice, including as a result of regulatory changes. Substantial changes will be notified to users through a dedicated notice on the site.
Last updated: 1 August 2026.
