Privacy Policy

The Data Controller for the processing of personal data carried out through this website is ELimpia S.r.l., which operates the Cat Motion brand, with registered office in Gallarate (VA), Italy. For any matter relating to this notice or to the exercise of your rights, write to info@catmotion.xyz. Full corporate identification is provided in the Legal Notice.

Given the categories and volumes of personal data processed, the Data Controller is not required to designate a Data Protection Officer pursuant to Article 37 GDPR. Data subjects may nonetheless use the contact above for any matter relating to this notice.

This website processes the following categories of personal data:

• Data provided through the contact form (name, e-mail address, message content) or through any direct correspondence sent to the e-mail addresses published on this website.
• Order and customer data provided when you place an order: name, e-mail, billing and shipping address, the products ordered and your order history.
• Payment data. Payments are processed by Stripe Payments Europe Ltd. and the payment methods it offers (cards, PayPal, Klarna, bank transfer). Card and financial details are handled directly by the payment provider; we do not receive or store full card data.
• Newsletter data (e-mail address), processed only where you have expressly subscribed, and revocable at any time.
• Technical and consent data stored locally in the browser by means of strictly necessary technologies (see the Cookie Policy), used to remember your consent choice and to keep your shopping cart.

This website uses Google Analytics 4 (provided by Google Ireland Limited) to collect aggregated statistics on website usage, only after you have expressly granted consent via the cookie banner. Google may transfer data to the United States; transfers are covered by Standard Contractual Clauses pursuant to Chapter V GDPR. No other analytics, profiling or advertising technologies are used. Should additional tools be introduced in the future, this Privacy Policy will be updated accordingly.

Personal data are processed for the following purposes and on the following legal bases pursuant to Article 6 GDPR:

• Reply to enquiries and pre-contractual requests. Legal basis: Article 6(1)(b) GDPR (steps taken at the data subject’s request prior to entering into a contract) and, where applicable, Article 6(1)(f) GDPR (legitimate interest in managing business correspondence).
• Conclusion and performance of the sale contract — processing the order, taking payment, arranging delivery and providing related customer support. Legal basis: Article 6(1)(b) GDPR.
• Compliance with legal obligations, in particular accounting and tax obligations relating to invoicing. Legal basis: Article 6(1)(c) GDPR.
• Sending the newsletter, where you have subscribed. Legal basis: Article 6(1)(a) GDPR (consent), withdrawable at any time.
• Aggregated analytics, where you have accepted the analytics category. Legal basis: Article 6(1)(a) GDPR (consent).
• Defence in legal proceedings, to establish, exercise or defend legal claims. Legal basis: Article 6(1)(f) GDPR.

The provision of personal data through the contact form or the newsletter form is voluntary. The data marked as required in the order process are necessary to conclude and perform the sale contract; failure to provide them makes it impossible to process the order.

Personal data are processed by authorised personnel of ELimpia S.r.l. and, where strictly necessary, by service providers acting as Data Processors pursuant to Article 28 GDPR or as independent controllers: the payment provider (Stripe), the carriers entrusted with delivery, the hosting and infrastructure provider (Cloudflare) and the e-mail provider (Google Workspace), as well as professional advisors. Some of these providers may process data outside the European Economic Area; such transfers are covered by adequacy decisions or Standard Contractual Clauses pursuant to Chapter V GDPR.

Personal data are retained only for the time strictly necessary to achieve the purposes for which they were collected, in compliance with the principles of necessity and proportionality set out in Article 5 GDPR. As a general rule:

• data collected through the contact form are retained for the time necessary to handle the enquiry;
• order and invoicing data are retained for the term required by applicable tax law (as a rule, ten years);
• newsletter data are retained until you unsubscribe or object;
• data retained for legal-defence purposes are kept until the expiry of the relevant limitation periods.

Pursuant to Articles 15 to 22 GDPR, data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection, and may withdraw consent at any time where processing is based on it. Requests are to be addressed to info@catmotion.xyz; the Controller replies within the term set forth in Article 12(3) GDPR.

Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) where they consider that the processing of their personal data infringes the GDPR or the Italian Privacy Code. Contact details and procedures are available at garanteprivacy.it.

ELimpia S.r.l. does not carry out automated decision-making or profiling pursuant to Article 22 GDPR. Appropriate technical and organisational security measures are applied in accordance with Article 32 GDPR (encryption in transit, restricted access, periodic review).

This Privacy Policy may be updated to reflect changes in applicable law or in the processing activities carried out by the Data Controller. Updates are published on this page with a revised “last updated” date.