Privacy Policy

Privacy Policy

Data Controller
Andreas Wagner – sole proprietorship
Corso Alcide De Gasperi 292
70125 Bari, Italy
VAT ID: IT08910090722
E-mail: shop@levelaudio.it

1. General Principles

We respect your privacy and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR). This Privacy Policy explains what data we collect on www.levelaudio.it, for what purposes, how long it is stored, and with whom it may be shared.

2. Hosting and Server Logs

Our website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). When you access our site, the server automatically stores log files (e.g. IP address, browser type, access time). This processing is based on Art. 6 (1)(f) GDPR (legitimate interest in the secure and stable operation of the website). Logs are deleted after a maximum of 30 days.

3. Data We Collect

We collect and process personal data when you:

  • contact us by e-mail,
  • place an order in our online store,
  • subscribe to our newsletter,
  • visit our website (cookies, analytics, tracking).

The legal bases are Art. 6 (1)(b) GDPR (contract performance), Art. 6 (1)(a) GDPR (consent) and Art. 6 (1)(f) GDPR (legitimate interest in security and optimization).

4. Recipients and Data Sharing

We share data only with trusted service providers when necessary to operate our website or fulfill a contract:

  • Hosting: Hetzner Online GmbH (Germany)
  • Newsletter: Klaviyo Inc., 125 Summer Street, Boston MA 02110, USA
  • Analytics & Advertising: Google Ireland Ltd., Gordon House, Dublin 4, Ireland
  • Payment processors:
    • PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
    • Stripe Payments Europe Ltd., Ireland
    • Apple Pay / Google Pay (via Stripe or respective providers)

All providers process data under data-processing agreements (Art. 28 GDPR). Transfers to the USA (e.g. Google, Klaviyo) are based on Standard Contractual Clauses (SCCs) and/or adequacy decisions under Art. 45 GDPR.

5. Cookies and Consent

We use cookies to enable essential shop functions (cart, language settings) and to collect analytics and marketing data. On your first visit you are asked for consent via our cookie banner. You may withdraw or change your consent at any time.

6. Analytics and Advertising Tools

Google Analytics
We use Google Analytics (Google Ireland Ltd.) to analyze website usage. Cookies may be set, and data such as visited pages, approximate location (anonymized) and session duration may be processed. IP addresses are stored in anonymized form only. Processing occurs solely with your consent (Art. 6 (1)(a) GDPR). Analytics data are retained for 14 months.

Google Ads Conversion Tracking
We use Google Ads to measure the performance of our advertising campaigns. Google may set cookies if you have given consent. Conversion data are deleted or anonymized after 90 days.

7. Newsletter (Klaviyo)

If you subscribe to our newsletter, we store your e-mail address (and optionally your name). The newsletter is sent via Klaviyo Inc. (USA). Processing is based on your consent (Art. 6 (1)(a) GDPR). You may unsubscribe at any time. Your data are kept until you withdraw consent or we discontinue the service.

8. Orders and Payments

To process your orders we store contact, delivery and payment-related data. This is necessary to fulfill the contract (Art. 6 (1)(b) GDPR).

  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
  • Stripe: Stripe Payments Europe Ltd., Ireland
  • Apple Pay / Google Pay: processed through Stripe or the respective provider

We do not store complete credit-card details on our servers. Accounting-related data are retained for 10 years to meet statutory obligations (Art. 6 (1)(c) GDPR).

9. E-Mail Communication

If you contact us via e-mail, the data you provide are processed solely to handle your inquiry. E-mails are deleted after 6 months unless longer storage is required by law.

10. Your Rights

You have the right to:

  • access your data (Art. 15 GDPR)
  • rectify inaccurate data (Art. 16 GDPR)
  • erase data (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing (Art. 21 GDPR)

To exercise these rights, please contact shop@levelaudio.it.

11. Data Security

Our website uses HTTPS encryption. Technical and organizational measures are in place to protect data against unauthorized access, loss or manipulation.

12. Data Retention Periods (Summary)

  • Server logs: 30 days
  • Newsletter data: until consent is withdrawn
  • Order / invoice data: 10 years (legal requirement)
  • E-mails: 6 months
  • Analytics / marketing data: up to 14 months (Google)
  • Cookie consent: 12 months

13. Updates

We may update this Privacy Policy when required. The current version is always available at levelaudio.it/en/privacy-policy.