Privacy Policy (GDPR)

Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR), this website informs users regarding the processing of personal data.

Data Controller

The data controller is Ultra Srl, with registered office at Via Bisceglie 76, Milan, 20153, email: info@ultra.site

Types of Data Processed

The website collects:

  • Personal and contact details (name, surname, address, phone number, email) for order fulfillment.

  • Payment data necessary to complete purchases (securely managed through external providers).

  • Email addresses voluntarily provided for newsletter subscription.

Purposes and Legal Bases of Processing

Order and purchase management: data are processed for the conclusion and execution of online sales contracts (Art. 6.1.b GDPR).

Legal obligations: data related to invoicing and accounting are stored in compliance with tax and civil law obligations (Art. 6.1.c GDPR).

Newsletter and marketing communications: sent exclusively with the user’s explicit consent, collected through a dedicated form (Art. 6.1.a GDPR).

Data Retention

Order-related data are retained for the time necessary to execute the contract and, in any case, according to tax law requirements (10 years for accounting records and invoices).

Data collected for newsletter purposes are retained until consent is withdrawn or the user unsubscribes.

Data Disclosure

Data may be disclosed to third parties only where strictly necessary:

  • Couriers and shipping providers for product delivery.

  • Payment providers for transaction management.

  • Accounting/tax consultants in case of legal obligations. Data are not sold or transferred to third parties for commercial purposes.

User Rights

As a data subject, the user has the right to:

  • Access their personal data.

  • Request rectification or erasure.

  • Restrict or object to processing.

  • Withdraw consent at any time (without affecting the lawfulness of processing based on consent before withdrawal).

  • Lodge a complaint with the Data Protection Authority.

Requests may be sent to: info@ultra.site

Processing Methods

Data are processed using appropriate electronic and organizational tools, in compliance with the security measures required by the GDPR.