Privacy Policy

Welcome to the Ciao Vintage website.

Below you can find information on how we treat the personal data of users who browse our sites, given in pursuance to, and for the purposes of art. 13 of the EU Regulation 2016/679. If you wish to have a more thorough understanding of the principles we follow, in our website management and the protection of your information, we advise you to consult the General Conditions of use of our websites.

Who is the data controller of users’ personal data? How can I contact the data controller?

We are family owned and operated antique shop in Rome, Via del Governo Vecchio 71, since 1955. You can contact Ciao Vintage by sending an email to the following address:

What are the methods used by Ciao Vintage to treat personal data?

The data you provide us with is processed by employees explicitly designated by the Data Controller, according to the respective authorisation profiles assigned. The designated persons may carry out consultation, use, processing and comparison operations, along with other appropriate processes, including automated searches, but only in cases where this has been explicitly authorised.

The data will be processed using computerised, telematic and paper-based tools and support, in compliance with legislation to guarantee the security and confidentiality, as well as the accuracy, in updating and relevance of data regarding the stated purposes. You yourself, can help us ensure that your data is always accurate by communicating updates to

Browsing our site

Ciao Vintage may collect and process users’ personal data when they access and visit Ciao Vintage’s site by browsing within the pages, without registration and without filling in or inserting data in online forms.

Ciao Vintage also uses cookies in some areas of the website. Cookies enable our sites to monitor, for example, whether users have already visited the site, providing an understanding of which of the pages are most visited. For this part of personal data processing, we ask you to read the Cookie Policy which should be consulted in conjunction with the information that Ciao Vintage provides in this statement.

Additionally, on our sites you can also find social buttons/widgets, or “buttons” depicting the icons of social networks (e.g., Facebook and Instagram) and interactive social walls (e.g. wall presenting photos from Instagram using a hashtag) which present content from social networks. These “buttons” allow users who are browsing the Ciao Vintage site, to reach and interact directly with social networks through a “click” which acquires data relating to your visit. Except for these cases, where you spontaneously click to share your browsing data with the chosen social networks, Ciao Vintage does not share any navigation information or user data acquired through its sites with social networks. In any case, when a user browses the site, they accept the terms and conditions of use of the website owned by Ciao Vintage, in addition to the provisions of this Privacy Policy. Therefore, if you do not accept these terms for browsing our sites, please do not access or use the content and services offered through them.

Using web services

Ciao Vintage can also collect and process the personal data of users who make use of web services available on the websites, for which the inclusion of personal data online or by email is required.

Spontaneous mail sending

When you spontaneously send an e-mail to one of the e-mail addresses mentioned on our sites, we acquire the sender address, along with any other personal data you may have entered in the message and attachments, in order to meet your request. The e-mail inboxes relating to the addresses shown on our sites are not personal. They belong to the company organisation and have the primary purpose of enabling work activities to be performed effectively within the Ciao Vintage. Which means that messages forwarded to Ciao Vintage’s email accounts, can be viewed by all those authorised to access these inboxes. By sending an e-mail to the e-mail addresses indicated on our sites, you declare that you have read and accepted the processing conditions contained in this policy.

Filling out web forms

When you access the Ciao Vintage website and use the services interactively (e.g. request newsletters, register on the sites, communities, make purchases, participate in events and campaigns, etc.), you may be asked to fill in web forms with some of your personal data, below we provide some useful information on how we treat the data you send us.

What categories of personal data does ciao vintage process?

To access services and content provided through our sites, you may be asked for personal information such as; name, surname, residential address or domicile, e-mail, date of birth, etc.

With regards to Gift Cards, if you have received it as a gift, we may use your contact details, such as your name and your e-mail address, in order to be able to deliver the Gift Card and guarantee its use. For these purposes, we inform you that your data is provided by the purchaser of the Gift Card to Ciao Vintage at the time of purchase.

To make a purchase on our sites, you may be asked for additional information. For example, data regarding means of payment, data for shipping products and billing.

Providing such data is optional, but necessary in order to use the services requested, which is why you can find specific information on the processing of your personal data on the web pages dedicated to these services.

On the web forms used on our site, we never ask for data of a sensitive nature (e.g. relating to racial and ethnic origin, religious, philosophical, political beliefs, health status, sexuality, etc.) or judicial (data regarding judicial records, or relating to the condition of defendant or suspect, etc.).

We may collect:

  • any optional information requested through the web forms;
  • information we may obtain by examining your interaction with us, via emails or newsletters, through our internet sites and through the apps which may be developed by us or by third parties (for more information, see the relevant privacy notice);
  • any information you share through social networks you have subscribed to.
We treat personal data that you provide us with for our own purposes and that is strictly relevant to individual services requested and used, in compliance with specific information on the page relating to the requested service. We may use your data for further or different purposes, only with prior consent or, in certain limited cases, in accordance with our legitimate interest.

Does Ciao Vintage communicate or circulate personal information?

Ciao Vintage only communicates personal data to third parties when it is necessary and functional in order to achieve the data processing purpose pursued in accordance with the service you have requested. In any case, we only communicate after having informed you, and where necessary, having received your consent to do so.

In general, the data acquired during navigation may be known by third-party companies that provide Ciao Vintage with technical assistance and data processing services (for example hosting activities entrusted to third parties connected to the use of our websites) appointed for this purpose, to Data processing managers.

The data collected through individual services and for the purposes indicated in this statement, are normally communicated through the following subject categories:

  • subjects to whom the right of access is granted by law or regulation (e.g. public security authorities and police forces);
  • companies belonging to the Ciao Vintage as parent, subsidiary or associated companies;
  • Ciao Vintage sales points;
  • data processing and IT service companies (e.g. web hosting, data entry, management and maintenance of IT infrastructures and services, e-mail marketing, Acquirer, etc.);
  • companies and firms providing consultancy services;

In particular, some specific services provided through our website also include communication through additional subject categories, such as:

  • purchase of products: companies that provide payment services, Paypal, shipping companies, financial institutions, companies that provide mailing and correspondence services.

The list of persons appointed as data processors is obtainable by writing to

In case of explicit request and in circumstances authorised by law, the data may be communicated by Ciao Vintage to Public Security Authorities and to the police forces.

Ciao Vintage does not normally circulate your data. Some services provided by our site, however, enable the circulation of your personal data to other users and services on the Internet; however, this is left as your free choice and is only possible following your specific and voluntary initiative. In some specific cases, however, we may ask to release your personal data (including photographic and audio-video images) to allow you to participate in extraordinary and temporary events, competitions and initiatives, which by their very nature, involve communication and circulation. In these cases, we will notify you by asking you to give explicit and specific consent.

Does Ciao Vintage transfer personal data to non-EU countries?

Personal data collected through this website may be transferred outside the EU to be stored on Customer Relationship Management servers. The transfer is carried out with Standard Contractual Clause stipulation or upon verification of the Privacy Shield certification from the service provider (specifically appointed as Data Processor).

What are your rights that you can exercise as a concerned party?

You can exercise the rights that the law governs you regarding your personal data by writing to We will reply to your request as soon as possible and in any case, no later than 30 days upon receipt. In some cases, we may request a copy of an identification document if required in conjunction with your request, to enable us to verify your identity.

Right of access

You have the right to know if your personal data is being processed and if confirmed, to obtain a copy of such data and be informed about; the source of the data, the categories of personal data processed, data recipients, the processing purposes, the existence of an automated decision-making process, (including profiling) the data retention period and the rights provided by Regulation.

Right of rectification

You have the right to obtain a rectification of data in our possession that concerns you or to update data that is incomplete. We remind you that when you provide your data to use our services, you guarantee its authenticity and accuracy. You yourself, can help us ensure that your data is always accurate by communicating updates to

Right of erasure

You have the right to request the erasure of your personal data if it is no longer needed for the purpose for which they were collected, or if we are no longer authorised to process this.

Right of restriction of processing

You have the right to obtain processing restrictions in the following cases:

  • you objected to the accuracy of personal data. You can request processing restriction for the period in which we will verify the accuracy of your data;
  • we are not authorised to process your data and instead of deleting them, you can request a limit in their usage;
  • where the data in our possession, although no longer necessary for us for the processing purposes for which they were collected, are required for the investigation, exercise or defence of a right in court;
  • you oppose processing based on our legitimate interest. You can ask us to limit processing, pending verification of the precedence of our legitimate reasons, regarding those that are your responsibility.

Right of consent withdrawal

You can withdraw your consent in relation to all processing of data that requires it.

Right of data portability

In the event that we process data based on your consent or in the implementation of a contract, or if the processing is carried out by automated means, you can exercise the right of data portability. You will then be able to receive the personal data you have communicated to us in a structured format, commonly used and readable using an automatic device. You can also request to forward your data directly to another company, as long as this is technically possible.

Right of opposition

You have the right to object to the processing of your personal data at anytime based on our legitimate interest, including profiling.

We also inform you that if you believe that the processing of your personal data goes against the provisions of EU Regulation 2016/679 you have the right to file a complaint with the competent data protection supervising authority.

We periodically reserve the right to update the content of this page. We therefore invite you to consult our privacy policy on a regular basis, in order to keep up to date with any changes made following your last consultation.