Complete Privacy Policy

1. Controller and scope of this notice

The data controller is BODY NUTRITION di Di Nunno Marco Leonardo, at the contact details shown above. This notice covers personal data processed through bodynutrition.biz and services connected with its online retail activities. Additional information may be provided when data is collected for a specific service or initiative.

2. What data we process

Depending on the services you use, we may process:

• Identity and contact details: your name, email address, telephone number, billing address and delivery address;
• Account and purchase data: account credentials managed by the website, products ordered, amounts, order status and information needed for payments, deliveries, returns and support;
• Information you provide: messages sent through the contact form, chatbot or other support channels, and reviews or comments;
• Technical and browsing data: IP address, logs, device and browser information, website usage data and identifiers associated with cookies or similar technologies;
• Preferences: newsletter subscriptions and choices concerning cookies and other tracking technologies.

Please do not include unnecessary information in messages or reviews, particularly health information or other sensitive personal details.

3. Purposes and legal bases

Accounts, orders and related support. We process the data needed to provide your account, receive and fulfil orders, and manage payments, deliveries, returns and related requests. The legal basis is the performance of a contract or steps taken at your request before entering into a contract.

Legal obligations. We process data needed to comply with tax, accounting and other applicable legal requirements. The legal basis is compliance with a legal obligation.

Contact requests and chatbot. We process the information you send us to answer questions and provide assistance. Depending on the request, the legal basis is performance of a contract, pre-contractual steps or our legitimate interest in responding to communications.

Reviews. We process data needed to collect, manage and publish reviews in accordance with the information provided when a review is submitted. The applicable legal basis depends on how the review service operates and the choices presented to users.

Newsletter. We use email addresses to send promotional messages where we have a valid legal basis to do so. Where processing is based on consent, you may withdraw it at any time using the link in the emails or by contacting us. Operational emails about an order do not constitute a newsletter subscription.

Security and legal claims. We may process technical data and order information to protect the website, prevent misuse and establish, exercise or defend legal claims, within the limits of applicable law.

Analytics and online marketing. We use analytics services and may use technologies connected with promotional activities. The legal basis and whether consent is required depend on the specific technology and its configuration, as explained in the Cookie Policy.

4. Whether you need to provide data

Some information is needed to create an account, make a purchase, receive a delivery or obtain support. Without it, we may be unable to provide the requested service. Participation in promotional activities and the provision of data not needed for a purchase are optional.

5. Payments through Nexi

If you select a payment method handled by Nexi, the information needed for the transaction is processed through the payment provider’s services. BODY NUTRITION receives the information needed to determine the payment outcome and manage your order. Information about data entered into the payment interface is also provided by the payment service provider.

If you choose a different payment method available at checkout, the arrangements for that method apply.

6. Deliveries and data recipients

To prepare and deliver an order, we share the necessary information with the relevant warehouses and delivery carrier. Data may also be accessed, within the limits of their duties, by people authorised by BODY NUTRITION and by providers of technical, hosting, support, communications, payment, security and analytics services.

Depending on their role, these parties process data as processors appointed by us or as independent controllers for their own activities. We may also disclose data to authorities or other parties when required by law. You can request further information about recipients by emailing [email protected].

7. Chatbot and support requests

When you use the chatbot, we process your messages and any contact details you choose to provide so that we can respond and, where necessary, continue providing support. Please do not enter passwords, complete payment-card details or unnecessary personal information into the chat.

If the chatbot uses an external platform, its provider may process technical data needed to operate the service, according to its applicable role and terms.

8. Reviews and public content

If you submit a review or comment, its text and the displayed name may appear publicly on the website. An email address requested to manage the review should not be included in its public text. Before submitting a review, please make sure it does not contain personal information about you or anyone else that you do not wish to make public.

Reviews may be managed through third-party technical services. Their actual configuration determines which data is needed and which parties can access it.

9. Newsletter

If you subscribe to the newsletter, we use the necessary information to send you BODY NUTRITION news, content and offers. You can stop receiving these messages by using the unsubscribe link in an email or by writing to [email protected].

Registering on the website or making a purchase should not be described as an automatic newsletter subscription. Messages essential to confirming and managing an order remain separate from promotional emails.

10. Analytics, Facebook and Instagram

Analytics services help us understand how the website is used and improve its operation. The data processed and any use of cookies depend on the specific technologies installed and their configuration.

The website includes links to BODY NUTRITION profiles on Facebook and Instagram. If you follow these links, you access those platforms, which process data under their own privacy notices. Any pixels, embedded widgets or other social-platform technologies on our website are different from ordinary links and must be described in the Cookie Policy according to what is actually active.

11. Cookies and tracking technologies

The website uses cookies and may use other tracking technologies. Some are necessary to operate the shop, for example to maintain your session and shopping cart; others may relate to analytics or promotional activities. Their categories, providers, lifetimes and methods for managing preferences are explained in the Cookie Policy (Italian).

Cookie choices are managed through the consent system available on the website. The published information must reflect the technologies actually in use and how the banner operates in practice.

12. Transfers outside the European Economic Area

Some technology providers may process data in countries outside the European Economic Area. Where a transfer takes place, it must rely on a mechanism provided for by the GDPR, such as an adequacy decision or appropriate safeguards. You may contact the controller for information about transfers relating to the services actually used.

13. Retention periods

We keep personal data for as long as needed for the purposes for which it was collected. Order data and tax records are retained to meet legal obligations and, where necessary, to protect rights connected with the contractual relationship. Support requests are retained for the time needed to handle them and document their outcome.

Where consent is the legal basis, data used for newsletters is processed until consent is withdrawn, or for any different period applicable to the specific activity. Cookie and similar-technology lifetimes are set out in the Cookie Policy. The periods or criteria stated here must be checked against the retention practices actually in place.

14. Your rights

Where provided for by the GDPR, you may request access to your personal data, its correction or deletion, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, email [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.

15. Security and updates

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. We may update this notice if our services, data-processing practices or applicable rules change. Changes will be published on this page.