top of page

Information about your privacy


Information pursuant to art. 13 of the 2016/679 European Regulation (GDPR)

This information is provided to the Users of the website (hereinafter: "Site") and is intended to describe how the Site is managed with reference to the processing of personal data, as well as to allow them to know the purposes and methods of processing personal data by the Data Controller.

The information and data provided or otherwise acquired in the context of the use of the various services of will be processed in compliance with the provisions of the GDPR and the confidentiality obligations.

The treatments carried out will be based on the principles of lawfulness, correctness, transparency, purpose and conservation limitation, data minimization, accuracy, integrity and confidentiality.

The processing of personal data means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction .


The data controller is Guitars and Basses sas di Milazzo Luca e c., With registered office in Pavia, in V.le Argonne n. 14.

Contact email

Guitars and Basses sas di Milazzo Luca and c. owns the following


The personal data being processed will consist of an identifier such as name and surname, email address, physical address, telephone numbers (hereinafter only "Personal Data").

In particular, the Personal Data processed through the Site are as follows:

Navigation data. The computer systems and software procedures used to operate the Site acquire, during their operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that could, through processing and association even with data held by third parties, allow users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used to connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the User. These data are used in order to obtain statistical information on the use of the Site and to check its correct functioning, to identify anomalies and / or abuses. The data could be used to ascertain responsibility in the event of suspected computer crimes against the Site or third parties.


These Data are provided voluntarily by the User when registering on the Site.

Other Data. Data relating to the use of the Site by the User may also be collected, such as the pages visited, the actions performed, for statistical purposes, on the basis of the legitimate interest of the Data Controller to verify the functionality and security of the service.

Cookies. For Cookies, see specific information.


The Data Controller informs the Users of the Site that the data collected will be lawfully processed pursuant to art. 6 of the GDPR, and with your specific consent where necessary, exclusively for the following purposes:

1. allow navigation, consultation of the website, provide the requested services and check their quality;
2. elaborate studies, research, market statistics and preferences regarding the services rendered;
3. exercise and protect the rights and interests of the Data Controller, also in court, in relation to the relationship with the interested parties;
4. respond to requests for assistance or information received via e-mail;
5. respond to requests for assistance or information received by filling in the appropriate forms;
6. to trace the perpetrators of any offenses, in the event of anomalous behavior of the Users (for example, for the prevention of fraud, the Owner can put in place a control system that involves the detection and analysis of the behavior of Users on the associated Site to the processing of Personal Data including the IP address, ascertained through ordinary checks on the Site or at the request of the competent authorities;
7. carry out the obligations established by laws or regulations;
8. to fulfill any accounting and tax obligations;
9. to send information and / or offers on promotional services relating to own products and initiatives (or of affiliated and / or controlled companies) and of third parties (commercial partners and outsourcers) through newsletters that may be considered of interest for the User, without this resulting in the transfer of personal data to third parties;
10. check the correct functioning of the IT platforms, installations, infrastructures and information systems.

For purposes 1. 4. and 5. the legal basis is the execution of the contract of which the interested party is a party or the execution of pre-contractual measures at the request of the same;

For the purposes 2. 3. 6. and 10. the legal basis is the pursuit of the legitimate interest of the data controller; in this case: for the purpose 2. the legitimate interest consists in understanding the use of the Site by the Users; for purposes 3. and 6. the legitimate interest consists in the right to defense of the owner; for the purpose 10. the legitimate interest consists in verifying the safety and reliability of the systems;

For purposes 7. and 8. the legal basis is the legal obligation to which the data controller is subject;

For the purpose 9. the legal basis is the consent of the interested party.


The registration procedure on the Site requires the User to enter the following personal data: e-mail, name, surname, country, province, city, address, house number, postcode, mobile number. In some cases, to take advantage of specific services, the tax code may be required.

Users who have previously registered on our Site are reminded that the Tax Code was required among the data requested during registration; as of today, with the updates made, during the registration phase, this data is no longer required.

The provision of data and the related processing for the purposes indicated above are strictly functional to the registration on the Site and the execution of the services offered by the Site itself.


Any refusal by the User to provide one or more personal data will make it impossible to register and therefore to make full use of the service offered by the Data Controller.


The Personal Data that will be provided may be known and used by the Data Controller's collaborators in charge of managing the Site and the Users' requests, for the sole purpose of carrying out the activities that constitute the reason for which the data were collected.

The Personal Data of Users may also be disclosed to third parties, in charge of lawful processing on behalf of the Data Controller, as Data Processors.

A list of data processors and those authorized to process the processing is always available at the headquarters of the Data Controller.

Guitars and Basses sas di Milazzo Luca and c. makes use of third-party suppliers in the order fulfillment phase, for the delivery of packages, packages and packaging (eg: GLS, BRT, etc.) and to process the related payments (eg: Banks, PayPal, Klarna) . These third-party suppliers will process the personal data necessary for the performance of their activities as independent data controllers.

With regard to payments made by "Teacher's Card", the User must provide, in addition to the PDF copy of the bonus, a photocopy of his identity document and tax code, in order to verify the correspondence between the holder of the bonus and the buyer. The documents sent in this way will be processed exclusively for the purpose of concluding the purchase and will be kept for the time strictly necessary for this purpose.

The data controller may disclose the User's content in combination with the related personal data if required by law or if it believes in good faith that such disclosure is rightly necessary to:

(a) comply with a legal process;
(b) apply the terms set out in the General Conditions of Use;
(c) protect the rights, property or safety of Guitars and Basses sas di Milazzo Luca e c., its users and the public.


The data will be processed and stored in the EU. Save the impossibility of checking the permanence of the data disseminated on the network or on other resources beyond the control of the data controller, the data will be kept for the period strictly necessary to allow the management of the Site, except for those whose conservation is justified. contractual obligations, legal obligations, protection of rights or interests.


The data controller keeps the data and contents:

(a) for as long as the User maintains an account with and for the period of 12 months following its cancellation in the event that no purchases have been made. In the event that the user who has canceled has made purchases, the necessary information will be kept in compliance with the obligation to keep the tax documentation, for 10 years from the last purchase made;
(b) for the time necessary to protect their rights in the event of a potential violation of the terms or a dispute concerning the contents and / or the User's account;
(c) indefinitely, without reference to the User's personal data;


The subjects to whom the personal data refer, as interested parties, have the right to ask the Data Controller, in compliance, within the limits and under the conditions provided for by the legislation on personal data protection, with regard to the treatments covered by this Information, with regard to the exercise of the rights of the interested parties (Articles 15 to 22 GDPR), can:

1. request access to their data;
2. ask for the verification and correction of their data;
3. revoke the consent previously given at any time;
4. oppose the processing of their data;
5. ask for the limitation of the processing;
6. ask for the cancellation or removal of their personal data;
7. exercise the right to portability.

The interested party also has the right to lodge a complaint with the competent personal data protection supervisory authority or act in court, in the event that he believes that the treatments that concern him violate the rules of the GDPR, pursuant to art. 77 of the GDPR.
To exercise their rights, Users can send a request to the following email address:

bottom of page