Privacy Policy
Your privacy matters to us. This Privacy Policy explains what personal data MA.TI. COSTRUZIONI SRL ("we", "us") collects when you shop at portaspliteu.com, how we use it, and your rights under GDPR.
Data controller
The data controller is MA.TI. COSTRUZIONI SRL, operating portaspliteu.com as an authorised Midea sales channel in Europe. For any privacy-related queries contact us at support@portaspliteu.com.
Personal data we collect
When you place an order or contact us, we may collect:
- Identity data: first name, last name, email address
- Delivery data: postal address, city, postcode, country
- Payment data: order reference and payment status only — card details are handled exclusively by myPOS and are never stored by us
- Communication data: messages sent via our chat, email, or support channels
- Technical data: IP address, browser type, pages visited, session duration (collected by our analytics system)
Legal basis for processing
We process your data on the following legal grounds:
- Contract performance: to process and fulfil your order and arrange delivery
- Legal obligation: to retain financial records under applicable EU law (typically 10 years)
- Legitimate interest: to prevent fraud, improve our service, and send order-related communications
- Consent: for optional marketing communications (you may withdraw at any time)
How we use your data
- Processing and fulfilling your purchase order
- Arranging delivery and free on-site setup guidance
- Responding to your support enquiries
- Sending order confirmation and dispatch notifications
- Fraud detection and prevention
- Improving website performance via anonymised analytics
Sharing your data
We do not sell your data. We share it only where necessary:
- myPOS (payment processing) — order reference and amount only
- Logistics partners (courier services) — name and delivery address for shipment
- IT service providers — under data processing agreements, for hosting and infrastructure only
We require all third parties to keep your data secure and process it only as instructed by us.
Data retention
- Order and financial records: 10 years (EU accounting obligations)
- Customer support communications: 3 years from resolution
- Analytics data: 24 months, then anonymised or deleted
- Marketing consent records: until you withdraw consent
Your rights under GDPR
As a data subject in the EU/EEA, you have the right to:
- Access a copy of your personal data
- Correct inaccurate or incomplete data
- Request erasure ("right to be forgotten") where legally permissible
- Restrict or object to certain processing activities
- Data portability in a machine-readable format
- Lodge a complaint with your national data protection supervisory authority
To exercise any of these rights, email support@portaspliteu.com. We will respond within 30 days.
Cookies
We use strictly necessary cookies for shopping-cart and session functionality, and analytics cookies to understand how visitors use our site. You can manage cookie preferences via your browser settings at any time.
Security
We apply industry-standard technical and organisational measures to protect your data, including TLS encryption in transit and access controls for data at rest.
Children
Our website and products are intended for adults (18+). We do not knowingly collect personal data from individuals under 16 years of age.
Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. We will post material changes on this page with an updated date. Continued use of the site after changes constitutes acceptance.
Questions about this policy?
Contact us at support@portaspliteu.com — we reply within 2 business days.