Privacy & Cookies

Data controller: Osteosteel (contact details on the Contact page). This notice describes, in draft form, how the shop processes personal data under Regulation (EU) 2016/679 (GDPR).

What we process: order data (email, items, amounts), optional account credentials (email and a hashed password), and warranty claims (description and any photo you upload). Payments are processed entirely by Stripe; the shop never sees or stores card numbers.

Why we process it: to fulfil your order (contract), to keep accounting records (legal obligation), and to handle warranty claims (contract). We do not use your data for profiling and we do not sell it.

Retention: order records are kept for as long as tax law requires; account data until you ask us to delete it; warranty claims for the life of the warranty.

Your rights: access, rectification, erasure, restriction, portability and objection — write to the email on the Contact page. You may also lodge a complaint with the Garante per la Protezione dei Dati Personali.

Cookies: the shop sets only technical cookies that are strictly necessary (language, cart, sign-in session). No advertising or analytics cookies are set.