Privacy Policy
This information is based on Act 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (also known as GDPR, General Data Protection Regulation).
It concerns the collection and processing of personal information implemented by means of this site (spedizionecomoda.com) and recorded in its filing system.
Data controller
The data controller is 
: the owner is obliged to comply with law 2016/679 in the act of offering a service to users located in the European Union, regardless of whether such services involve payment, or in the act of monitoring and collecting information from users located in the European Union in connection with a visit to the spedizionecomoda.com website.
The reference legislation consists of (by way of indication) articles 1683-1702 of the Civil Code (transport of goods), legislative decree 286/2005 (with particular reference to art. 1696, concerning compensation and art. 15 paragraph 1 of Presidential Decree 633/72, where the exclusion of VAT is inferred), arts. 1703-1730 (general provisions on the mandate), arts. 1737 - 1741 on the contract of consignment, arts. 1904-1932 (of insurance against damages), as well as arts. 1321-1469 (of contracts in general, preliminary provisions), and arts. 2755-2783 (of privileges over certain movable property).
In addition, for the regulation of liability in the case of international shipments, reference is made (in the case of carriage by air) to the “Warsaw Convention” concluded at Warsaw on 12 October 1929 or to that Convention as amended or supplemented by subsequent conventions or additional protocols; and to the “Convention for the Unification of Certain Rules Relating to International Carriage by Air” signed in Montreal on 28 May 1999.
In the case of transport by land, reference is made to the “Convention on the Contract for the International Carriage of Goods by Road” (CMR), concluded in Geneva on 19 May 1956 (also referred to as the “CMR Convention”).
Commitment to lawfulness and transparency of treatment
The company undertakes to process the data of users visiting this website in a lawful, correct and transparent manner. The information will only be collected for the purpose of providing the user with our service (also understood as mere consultation of the site) and will not be handled or processed in a manner incompatible with this purpose.
The information collected will be limited to that which is strictly necessary to provide this service or its specific purposes, and we will also ensure that it is accurate and up-to-date and that the user is provided with appropriate tools to rectify or update it.
Personal information shall be kept no longer than necessary in our systems in relation to the purposes for which it was collected and shall be stored in such a way as to ensure its security and integrity, and in particular in such a way as to prevent unauthorised access, accidental loss, and damage, by means of technical and organisational precautions.
In addition to these provisions, the use of our services does not involve the conditional acceptance of a contract, or of clauses in which the user is asked for information that is not necessary in relation to the nature of the services or of the operations necessary for their provision by us, in accordance with the criteria of transparency of processing and congruity with the purposes for which it is carried out in the interest of the user, to which we are committed.
Acceptance of the use of our website and service
Upon prolonged visit of our website, the visitor, regardless of whether he/she decides to make use of our dispatch services, expresses his/her acceptance of the contractual character of this information notice, and undertakes to consult it on subsequent visits as well, since this acceptance is also deemed relative to any changes that may be made to it over time.
Along with an implicit acceptance relating to the prolonged use of our website, this contract, and correspondingly the spedizionecomoda.com website, also provides for an explicit acceptance when the user subscribes to one of our shipping services, and explicitly provides personal information so that the company can provide the requested service.
The controller may also be obliged to process the data in order to comply with legal obligations relating to the conduct of its business, subject to the criteria of lawfulness, correctness and transparency of such processing described above.
If the user, after prolonged use of our website, and provided that he/she has had access to this information notice, does not wish to accept it, he/she must at the same time cease browsing our website and refrain from requesting or subscribing to its services any further: if he/she has objections to the processing and collection of personal information that may have taken place before he/she was able to express consent, he/she may send an email to info@spedizionecomoda.com requesting that the data linked to him/her be deleted or anonymised.
The reference legislation consists of (by way of indication) articles 1683-1702 of the Civil Code (transport of goods), legislative decree 286/2005 (with particular reference to art. 1696, concerning compensation and art. 15 paragraph 1 of Presidential Decree 633/72, where the exclusion of VAT is inferred), arts. 1703-1730 (general provisions on the mandate), arts. 1737 - 1741 on the contract of consignment, arts. 1904-1932 (of insurance against damages), as well as arts. 1321-1469 (of contracts in general, preliminary provisions), and arts. 2755-2783 (of privileges over certain movable property).
In addition, for the regulation of liability in the case of international shipments, reference is made (in the case of carriage by air) to the “Warsaw Convention” concluded at Warsaw on 12 October 1929 or to that Convention as amended or supplemented by subsequent conventions or additional protocols; and to the “Convention for the Unification of Certain Rules Relating to International Carriage by Air” signed in Montreal on 28 May 1999.
In the case of transport by land, reference is made to the “Convention on the Contract for the International Carriage of Goods by Road” (CMR), concluded in Geneva on 19 May 1956 (also referred to as the “CMR Convention”).
Purpose of the service
“Spedizionecomoda.it” is a leading digital platform for logistics services in Italy. The purpose of the website is to provide a clear and effective interface to our customers, to carry out partial load (LTL) or full load (FTL) shipments both throughout Italy and abroad, at the most convenient prices, using the best couriers nationally and worldwide.
At the heart of our service is the conviction that logistics should be simple and transparent. With SpedizioneComoda.co.uk, booking takes only a few clicks and usually takes less than 3 minutes.
Our technology-driven solution offers a more organised, user-friendly and cost-effective approach to logistics.
Categories of personal data covered by the service
The data processing of our platform and service is limited to 1) data subject to anonymisation and pseudonymisation in connection with a simple visit to our website (“traffic data”) and 2) certain identification data when subscribing to our services, and strictly excludes biometric, medical and judicial data.
In the course of data processing, we will not collect information of an ethnic or racial nature, about political opinions or religious or philosophical beliefs, affiliations, data concerning health, sex or sexual orientation.
Given that data of this type will not be collected in any way in connection with the execution of a contract for the use or provision of our services, or in connection with the user's browsing of our website, we may, however, take some of this data into account, where it is explicitly provided by the user in a CV or other information vehicle, when the user sends information to the owners of this website for employment purposes. (as stipulated in Art. 9, 2 b of the GDPR).
Categories of recipients who have access to the processed data
The categories of controllers involved in the management of the processing, which we use, are:
1) website hosting company.
2) companies or professionals for tax, accounting, administrative consultancy.
3) companies providing services related to the making of payments;
4) companies that provide services relating to website visit statistics and analysis;
5) webmaster or IT (information technology) company for the development and management of the spedizionecomoda.com website and its database;
6) other persons authorised by the company to carry out activities necessary for the provision of services (under legal obligation of confidentiality)
7) national or international couriers taking charge of the shipment;
8) other bodies or authorities to which, for legal reasons or obligations, it is necessary to communicate your personal data.
The company undertakes to enter into agreements with data processors with a legal obligation of confidentiality and with a constraint to act under the authority of the data controller.
In the case of companies, ensure that they themselves comply with the GDPR, adopt appropriate codes of conduct or hold certificates issued by Union-approved bodies.
The reference legislation consists of (by way of indication) articles 1683-1702 of the Civil Code (transport of goods), legislative decree 286/2005 (with particular reference to art. 1696, concerning compensation and art. 15 paragraph 1 of Presidential Decree 633/72, where the exclusion of VAT is inferred), arts. 1703-1730 (general provisions on the mandate), arts. 1737 - 1741 on the contract of consignment, arts. 1904-1932 (of insurance against damages), as well as arts. 1321-1469 (of contracts in general, preliminary provisions), and arts. 2755-2783 (of privileges over certain movable property).
In addition, for the regulation of liability in the case of international shipments, reference is made (in the case of carriage by air) to the “Warsaw Convention” concluded at Warsaw on 12 October 1929 or to that Convention as amended or supplemented by subsequent conventions or additional protocols; and to the “Convention for the Unification of Certain Rules Relating to International Carriage by Air” signed in Montreal on 28 May 1999.
In the case of transport by land, reference is made to the “Convention on the Contract for the International Carriage of Goods by Road” (CMR), concluded in Geneva on 19 May 1956 (also referred to as the “CMR Convention”).
Your rights with regard to processing
1) Right to information. The data subject has the right to obtain confirmation from the data controller of the existence of data concerning him/her.
2) Right of access. In particular: purpose of the processing, categories of personal data involved, recipients or categories of recipients to whom access to the data is granted, including third parties or international organisations; how long the data is expected to be kept on record or the criteria used to determine the time frame; whether there are any restrictions on the data subject requesting the data controller to amend or erase the data or restrict processing the right to lodge a complaint with the designated authority; any alternative sources from which data relating to the data subject are obtained; whether decisions are made automatically concerning the data subject's use of the website or enjoyment of the service or there are automatic profiling mechanisms: in both cases, the data controller is required to provide information on the logic used and the consequences for the data subject; if the data subject's data are transferred to third parties or international organisations, the data subject must be informed about the precautions taken during the transfer. Finally, the data subject has the right to obtain a copy of the data subject's data being processed, where this does not infringe the rights and freedoms of others.
3) Right to rectification/alteration of information. Personal data may be rectified without delay, and may also be supplemented with an additional statement.
4) Right to be forgotten. The data subject may request erasure in the following cases: a) the processing of data by the data controller is no longer required; b) the data subject withdraws consent to the processing of data; c) the data subject objects to the processing, in particular if the processing is for marketing purposes; d) the processing was unlawful; e) the personal data must be erased in accordance with another law to which the data controller is subject.
5) Right to restriction of processing. The data subject may request the restriction of processing in the following cases: a) the accuracy of the data is contested by the data subject, as long as the data controller has not carried out the necessary checks; b) processing is unlawful and the data subject requests the restriction of processing instead of erasure; c) the data controller no longer needs the data, the persistence of which is necessary for the data subject for legal reasons; d) the data subject has objected to the processing, and the verification is under way as to whether the obligations or rights of the data controller outweigh those of the data subject. Finally, the data subject has the right to be informed by the data controller if the restriction on processing is lifted.
6) Right to be notified of deletion, modification or restriction of processing. The data controller is obliged to notify the data subject in the event of erasure, rectification, modification or restriction of processing. Furthermore, the controller is obliged to inform the other controllers employed by him of the rectification/alteration, erasure or restriction of the processing, insofar as this is possible or does not require disproportionate effort. In addition, the data controller is obliged to inform the data subject about other data processors if the latter so requests.
7) Right to data portability. The data subject has the right to receive personal data relating to him or her in a structured, commonly used (standard), machine-readable format and, if necessary, to have it transmitted to another data controller without being obstructed by the data controller (even if the processing is carried out by automated means). The data subject may also request that the data be transmitted directly to another data controller, where technically possible.
8) Right to object to processing. The data subject may object to processing in the event that personal data are processed for marketing purposes, including profiling: in this case, the data subject may request that personal data no longer be used for such purposes. The data controller is obliged to inform the data subject at the time of his or her first communication with him or her, in a clear and prominent manner with respect to other information.
9) Right not to be subject to decisions based on automatic profiling or processing (except for the performance of a contract). Even in the event that the data subject has given consent within the framework of an automated process, he/she may request the data controller, with regard to his/her use of the website or the use of the service offered by it, to communicate his/her point of view and contest any decisions that may have been determined automatically.
10) Right to be informed without delay in the event of a personal data breach. If the loss/deletion of data constitutes a high risk for the rights and freedoms of natural persons, the data subject must be notified immediately of the breach (with information on the identity of the data controller, the consequences, and the precautions taken). An exception to this is made if: a) the data subject to the breach has previously been encrypted; b) the data controller has subsequently taken appropriate measures to prevent the above risks from materialising; c) an individual communication to the data subject would involve a disproportionate effort: in this case, the data subject must be effectively informed by means of a collective communication. The designated supervisory authority may be consulted in this case.
“
”It undertakes to protect all these rights of its users, both by means of this directive, with reference to the information that the data controller is required to provide to data subjects, and by adopting an appropriate code of conduct, and, finally, by promptly replying to requests made by users.
Please send an email to privacy@spedizionecomoda.com and we will do our utmost to clarify any doubts and to fulfil your requests where required by law.
Third parties involved in treatment
“” delegates the responsibility for processing to a limited number of partners with respect to specific website features or aspects of the service offered on the spedizionecomoda.com website, choosing leaders in the relevant field, with the aim of offering a comprehensive service with a character of excellence. Currently, the owner company makes use of the following partners to fulfil its service:
1) “Server Plan srl” (hosting provider). It is the company, based in Italy, which offers and maintains the IT infrastructure on which the site spedizionecomoda.com is based. The respective privacy policy can be consulted here. “Server Plan srl” offers a high level of professionalism and the adoption of both technical and organisational measures to guarantee the security of data processing with reference to reliability, integrity, the ability to cope with any unforeseen events, the ability to restore data following any incidents, and the regular performance of tests to verify the conformity of the technical and organisational measures aimed at guaranteeing the security of processing. The same company also provides adequate safeguards for data security with regard to destruction, loss, alteration, unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed. (see Art. 32 GDPR for technical and organisational requirements regarding security of processing).
2) Authorize.net (online payment gateway). Authorize.net is based in California (USA) and is a subsidiary of Visa.inc. It offers high security standards and its privacy policy can be found here. When a user of our service chooses Authorize.net as a payment method, the following information will be sent to Authorize.net the following information: credit/debit card number, expiration date, card verification code, name/type of service purchased, quantity, description and price; tax amount, type and description; tax amount, type and description; purchase id; customer id; user contact information, such as first name, last name, company, address, city, state/region (if applicable), postal code and country; contact information (if different from contact information), user ip address, some payment settings. Contact information is needed as billing information, and delivery information is needed to deliver products correctly.
“” will not intervene in the payment process in any way, which is entirely managed by Authorize.net and its affiliated companies (see Authorize.net's privacy policy for further information), and is solely concerned with the making and transmission of payment between merchants (“”) and customer (user of the spedizionecomoda.com site who purchases its services) and fraud prevention.
The user may withdraw consent to the processing of personal information handled by Authorize.net, request its deletion, modification or restriction.
3) Google Analytics (data traffic statistics service). Google Analytics is a service of Google Inc. Google's headquarters is located in California (USA), however, the subsidiary company for services for European users, as of January 2019, is “Google Ireland Limited”, based in Dublin (Ireland). Google Analytics makes use of a number of cookies (packages of information saved by our site on the user's computer via the browser) which allow us to track users“ activity over the course of different browser sessions (a session is when the browser is opened/launched, the session ends when the browser is closed or the computer is switched off/restarted). In particular, the cookies recorded by Google Analytics are the following (the list below may be subject to change): ”_ga“ (records user activity over the course of several browser sessions); ”_gali“ (records user interaction with elements of the page); ”_utma“: records information about the number of visits, first visit, and most recent visit; ”_utmb“: records the timestamp (time information, with date, hour, and seconds) when the user accesses the site; ”_utmc“, records the user's timestamp when he/she leaves the site; ”_utmz" records the user's home url. Google Analytics may also record information about the device used by the user, the geographical area in which the user is located (either by IP address or by cross-referencing data from the internet provider or router in the vicinity), the user's IP address, and information about the browser and operating system used. In any case, all data used by Google is anonymised: i.e. it is not intended to identify the user in particular, but only to provide statistical data for the improvement of our website and user experience. As Google inc. and its subsidiary Google Ireland Limited are data controllers for all traffic data sent to them via our website, the user can refer to the relevant privacy policy.
As with the services of the other international companies we use to provide our service, we invite our users to contact us at privacy@spedizionecomoda.com for further assistance.
Use of cookies
Cookies are packets of information that the website visited can record on the user's computer for the purpose of tracking visitor activity over several browser sessions.
Cookies in themselves do not pose a security risk, since browsing data can be sent to the website even in the absence of cookies, but they do make it possible to organise browsing data in a consistent manner, with benefits both for website operators (who can, for example, obtain reliable and consistent information on website traffic) and for users, who can enjoy a personalised experience thanks to cookies, e.g. by saving their preferences, accessing restricted areas within websites to administer services or make purchases, and enjoying other benefits.
Spedizionecomoda.it may use third-party cookies (see section “Third parties involved in processing”, except for the hosting service), i.e. for analytical purposes (data traffic analysis using Google Analytics), and in connection with the payment services we use (Authorize.net).
Spedizionecomoda.comoda.co.uk does not access these cookies in any way and they are instead managed by these companies, which play the role of data controller in relation to the user's personal data or profiling.
Spedizionecomoda.co.uk may use cookies to enable the user to access their personal area, to keep the user logged in, and for them to manage their shopping cart, subscribed services and personal settings.
However, in accordance with the May 2011 amendment of the “e-Privacy Directive”, such use of cookies by spedizionecomoda.com is strictly necessary to provide the requested service and therefore the user's consent will not be required for this, which will instead be requested for cookies registered through our site by the third parties mentioned above.
Transfer of data to third countries
All controllers/processors involved in the service operate in countries that comply with an “adequacy decision” by the European Union.
In particular, the data controller operates in the United States (Florida), the IT infrastructure is located and managed in Italy, the payment service Authorize.net operates in the United States (California), and the company to which Google Analytics belongs is Google Inc., also based in the United States (California) and in Ireland (Dublin) as a subsidiary company in charge of data processing for users in the European Union.
The company does not plan to transfer data to countries for which the ’Adequacy Decision“ by the European Union is absent, with a view to relying only on leading companies in their sector that can guarantee reliability and security standards at the highest level.
Control authority
If you do not get satisfactory feedback from the Italian authority, you can turn to the European Data Protection Supervisor (EDPS) whose role is to ensure that EU institutions and bodies respect people's right to privacy in relation to the processing of their personal data. The contact details and mission of the European Data Protection Supervisor can be found here.Date of writing: October 2025
