Privacy policy
1. Data controller
The controller responsible for data processing on this website is:
Schnalser Säge – Lisa Metzdorff
Karthaus 98, I-39020 Schnals (BZ), Italy
Phone: +39 334 7155699
Email: l.metzdorff@schnalsersaege.com
VAT number (P.IVA): 02831470212
2. General information
We treat your personal data confidentially and in accordance with the General Data Protection Regulation (GDPR), the Italian Data Protection Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018) and this privacy policy. Personal data means any data by which you can be personally identified.
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser's address bar.
3. Hosting and shop system (Shopify)
Our online shop runs on the Shopify e-commerce platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).
Shopify processes on our behalf all data required to operate the shop and fulfil your orders: names, addresses, email addresses, telephone numbers, order and payment information, and technical access data. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the shop).
Shopify is part of the Canadian company Shopify Inc.; processing of data in Canada and the United States cannot be ruled out. An adequacy decision of the European Commission is in place for Canada; transfers to the United States are based on the EU-U.S. Data Privacy Framework or on EU standard contractual clauses. We have concluded a data processing agreement (Data Processing Addendum) with Shopify. Further information: https://www.shopify.com/legal/privacy
Server log files
When you visit the website, information is automatically stored in server log files (browser type and version, operating system, referrer URL, host name, time of the request, IP address). This data serves to provide the website in a technically correct and secure manner (Art. 6(1)(f) GDPR) and is not combined with other data sources.
Cookies and consent
This website uses cookies. Strictly necessary cookies (e.g. basket, session and security cookies) are stored on the basis of Art. 6(1)(f) GDPR; they are required for the operation of the shop. All non-essential cookies (e.g. analytics) are only set with your consent (Art. 6(1)(a) GDPR), which you give via the cookie banner and which you can change or withdraw there at any time with effect for the future.
4. Orders and customer account
To process orders we handle the data you provide during the ordering process (name, delivery and billing address, email address, telephone number where applicable, order details). The legal basis is Art. 6(1)(b) GDPR. We store this data for as long as it is required to perform the contract and, beyond that, within the scope of statutory retention obligations (in Italy generally 10 years for business records).
You may optionally create a customer account. You log in using a one-time confirmation code sent to your email address; the account data (order history, addresses) is processed by Shopify. You can ask us to delete your customer account at any time.
5. Payment service providers
Shopify Payments
Card payments and other payment methods are handled via Shopify Payments (payment processing by Shopify International Limited or its payment service providers, including Stripe). The data required for payment (payment details, amount, name) is transmitted directly to the payment service provider. The legal basis is Art. 6(1)(b) GDPR. Further information: https://www.shopify.com/legal/privacy
PayPal
If you pay via PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. The legal basis is Art. 6(1)(b) GDPR. PayPal's privacy notices apply in addition: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
6. Contact form and email contact
If you send us enquiries via the contact form or by email, we process the details you provide (name, email address, telephone number where applicable, message) in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). The data remains with us until the purpose of storage no longer applies; statutory retention obligations remain unaffected.
7. Newsletter
If you subscribe to our newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). Registration uses the double opt-in procedure: you receive a confirmation email and are only added to the mailing list once you have confirmed. Dispatch and subscriber management take place via Shopify (see section 3).
You can unsubscribe from the newsletter at any time using the unsubscribe link in every email or by sending us a message; the lawfulness of processing carried out up to the point of withdrawal remains unaffected. After unsubscribing, your email address is deleted from the mailing list.
8. Fonts
The fonts used on this website (Bitter, Work Sans) are delivered locally via the servers or the content delivery network of our shop system, Shopify. No connection to Google servers takes place.
9. Your rights
You have the following rights against us in respect of your personal data:
the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).
You may withdraw any consent you have given at any time, without formality and with effect for the future (Art. 7(3) GDPR), for example by email to l.metzdorff@schnalsersaege.com.
You also have the right to lodge a complaint with a data protection supervisory authority. For Italy this is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it. You may also contact the supervisory authority in your country of habitual residence.
10. Retention period
Unless stated otherwise in this policy, we store personal data only for as long as is necessary for the purposes described or as required by statutory retention periods (in particular tax and commercial law periods of up to 10 years). The data is deleted thereafter.
11. Objection to advertising emails
We hereby object to the use of the contact details published in our legal notice for sending advertising that has not been expressly requested.
Last updated: July 2026