Privacy Policy

This privacy policy explains how Calzaturificio Ardito S.r.l. processes the personal data of those who visit the website www.morisshoes.it, create an account and make purchases, as required by Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and by the Italian Privacy Code (Legislative Decree 196/2003).

1. Data controller

Calzaturificio Ardito S.r.l.
Via Gaudio Maiori 9, 84013 Cava de' Tirreni (Salerno), Italia
Operator of the online shop Morisshoes.it
VAT no. 03411900651
Email: info@morisshoes.it
Phone: 089462642

For any question about this privacy policy or your data, you can write to the email address given above.

2. What data we process

• Browsing data: IP address, browser type, pages visited, date and time of requests. The systems that run the website record them for security purposes and to solve technical problems.
• Account data: first name, last name, email address and password (stored encrypted), plus any optional data you choose to provide.
• Order data: shipping and billing addresses, phone number, tax code or VAT number when needed for the invoice, products purchased and order history.
• Payment data: you enter your card or account details directly on the payment service providers' pages; we only receive the outcome of the transaction and do not store those details.
• Contact requests: name, email address, message content and any attachments you send us through the contact form or by email.
• Newsletter: the email address you subscribe with and the date of subscription.
• Welcome discount: if you request the discount code from the window that appears on the website, your email address, the code we assign to you, the date of the request, the language of the website and the IP address the request comes from, which we use to block repeated requests. If you already have an account with that address, we link the code to your account. To check that the code is only valid on your first order, we check whether any orders have already been placed with the same email address. If you also tick the optional newsletter box, your address is subscribed to the newsletter.
• WhatsApp contact: if you write to us using the WhatsApp buttons on the website (the one shown on the pages and the one on the product page), your phone number, your WhatsApp profile name and the messages you send us, including any photos or attachments. The first message is already written with the address of the page you are viewing (on the product page also the product name, size and colour) and you can change it before sending it. The buttons are simple links: until you use them, the website does not send anything to WhatsApp.
• Cookies and similar technologies: described in the cookie policy, where you can also change your choices at any time.

3. Why we process them and on what legal basis

4. Whether providing data is mandatory

The data marked as mandatory in the forms are needed to complete the purchase or respond to the request: without them we cannot fulfil the order. Optional data and consent to the newsletter and to non-necessary cookies are freely given, and refusing does not prevent you from making purchases. Requesting the welcome discount is optional: without your email address we cannot give you the code, but you can still make purchases. Writing to us on WhatsApp is optional too: you can contact us by email or by phone.

5. Who we disclose data to

The data are processed by the controller's authorised staff and disclosed only to the parties we need in order to provide you with the service, appointed as processors where required (Art. 28 GDPR):

• the provider of the website's hosting and technical services;
• Brevo (Sendinblue SAS, France), the service that sends the shop's emails on our behalf (orders, account, welcome discount code, newsletter), appointed as processor;
• couriers and carriers that deliver orders (Spedizione con corriere espresso, Spedizione corriere espresso estero);
• payment services, which process the data as independent controllers (Bank transfer, Cash on delivery with fee);
• tax and accounting advisers, banks;
• WhatsApp Ireland Ltd (Meta group), if you write to us on WhatsApp: the conversation goes through its service, which processes your data as an independent controller under its own privacy policy;
• public authorities, when required by law.

The data are not disseminated or sold to third parties.

6. Transfers outside the European Union

Apart from WhatsApp contact, described below, the data are processed within the European Union, including the sending of emails through Brevo, which is based in France. Should a provider transfer them outside the Union, it will do so only with the safeguards provided for by Articles 44-49 GDPR.

If you write to us on WhatsApp, the conversation data may be transferred by WhatsApp and the other Meta group companies to the United States and to other countries outside the Union. The transfer takes place on the basis of the European Commission's adequacy decision on the EU-US Data Privacy Framework (July 2023) or, failing that, of the standard contractual clauses approved by the Commission (Art. 46 GDPR), as explained in WhatsApp's privacy policy.

7. How long we keep them

• Account data: for as long as the account remains active; you can request its deletion at any time.
• Orders and invoices: 10 years, as required by tax and civil law (Art. 2220 of the Italian Civil Code).
• Contact requests: the time needed to respond and handle the matter, then no longer than 24 months.
• Newsletter subscription: until you unsubscribe, which you can do via the link in every email.
• Welcome discount: the code is valid for 30 days from the request; we keep the email address, the code and the other request data for as long as needed to manage the discount and to make sure the same address does not receive it more than once, and you can request their deletion at any time. If you use the code, it remains recorded in the order and is kept together with the order.
• WhatsApp conversations: the time needed to respond to and handle your request; you can ask us to delete them at any time. WhatsApp keeps the data according to its own privacy policy.
• Technical browsing data: the time strictly necessary for the website's security, unless requested by the authorities.
• Log of cookie choices: 365 days, in order to demonstrate the consent collected.

8. Your rights

At any time you can ask the controller to:

• access your data and receive a copy (Art. 15 GDPR);
• rectify or complete them (Art. 16);
• erase them (Art. 17);
• restrict their processing (Art. 18);
• receive them in a structured format and transmit them to another controller (portability, Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw the consent given, without affecting processing carried out before the withdrawal (Art. 7(3)).

To exercise them, write to info@morisshoes.it. We respond within one month of the request.

If you believe that the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the country where you live or work.

9. Automated decisions and minors

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you. The shop is not intended for persons under 18 and we do not knowingly collect their data.

10. Changes to this privacy policy

We may update this privacy policy when services or regulations change. The version in force is always published on this page.

Last updated: 10/17/2026