Informativa sulla privacy

Last updated: September 10, 2026

EAF is a brand operated by KAHL KG DES KAHL MARKUS. This Privacy Policy explains how we collect, use, disclose, store and otherwise process personal data when you visit or use eaf.cc, purchase products from our online store, communicate with us or otherwise interact with our services.

We process personal data in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR) and applicable Italian data protection legislation.

Please read this Privacy Policy carefully. It explains what personal data we process, why we process it, the legal bases on which we rely, with whom we may share it and what rights you have.

1. Data Controller

The controller responsible for the processing of your personal data is:

KAHL KG DES KAHL MARKUS
Bastioni Maggiori 27
39042 Bressanone (BZ)
Italy

Commercial Register No.: 28224
REA: BZ-105412
Fiscal Code: 01186450217
VAT No.: IT 01186450217

Legal representative: Markus Kahl

For privacy-related questions or to exercise your data protection rights, you can contact us at:

E-mail: eaf7777.contact@gmail.com
Phone: +39 344 419 7630

2. Personal Data We Process

Depending on how you interact with EAF, we may process the following categories of personal data:

Identification and contact information

• First and last name
• E-mail address
• Telephone number
• Billing address
• Shipping address

Order and transaction information

• Order number
• Products purchased
• Product and order details
• Order history
• Returns, refunds and exchanges
• Transaction details
• Payment method
• Payment status

Customer communications

Information you provide when you contact us, including customer-service requests, questions, complaints, feedback and other communications.

Account information

Where customer accounts are available, we may process information associated with your account, such as login details, account preferences and settings.

Technical and usage information

Depending on your use of our website and the technologies enabled on it, we may process:

• IP address
• Browser type and version
• Device type
• Operating system
• Network information
• Approximate location derived from technical information where applicable
• Pages visited
• Referring website
• Information about interactions with our website
• Date and time of access
• Cookies, pixels and similar identifiers

Marketing and advertising information

Where applicable and subject to the required legal basis and consent, we may process information relating to interactions with EAF advertisements, marketing communications and our website, including information used to measure advertising performance, understand conversions and improve advertising relevance.

We do not intentionally collect special categories of personal data through our online store unless such processing is required or permitted by applicable law.

3. Sources of Personal Data

We may obtain personal data from the following sources:

Directly from you

For example, when you:

• place an order;
• create or use a customer account;
• contact us;
• subscribe to marketing communications;
• submit information through our website; or
• otherwise voluntarily provide information to us.

Automatically

When you browse or interact with our website, certain technical and usage information may be collected automatically through cookies, pixels and similar technologies, subject to applicable consent requirements.

From service providers

We may receive information from service providers that assist us with payment processing, shipping, e-commerce, website operation, customer service, analytics or other business functions.

From advertising and marketing platforms

Where applicable, advertising and marketing platforms may provide us with information relating to advertising performance, conversions or interactions with our advertising, subject to applicable law and consent requirements.

4. Purposes of Processing

We may process personal data for the following purposes.

4.1 Providing and fulfilling orders

We use personal data to:

• process and confirm orders;
• process payments;
• provide customer accounts where applicable;
• prepare and ship products;
• provide delivery notifications;
• process returns, refunds and exchanges; and
• provide customer support relating to purchases.

Legal basis: Performance of a contract or taking steps at your request before entering into a contract.

4.2 Customer service and communication

We use personal data to respond to questions, requests, complaints and other communications.

Legal basis: Performance of a contract, taking pre-contractual steps, compliance with legal obligations or our legitimate interests in managing customer relationships, depending on the circumstances.

4.3 Legal, accounting and administrative obligations

We may process personal data where necessary to comply with applicable legal obligations, including tax, accounting, commercial, consumer-protection and other regulatory requirements.

Legal basis: Compliance with a legal obligation.

4.4 Website operation and security

We may process technical information to:

• operate and maintain our website;
• protect our website and systems;
• detect and prevent fraud;
• prevent abuse and security incidents;
• troubleshoot technical problems; and
• protect our rights and the rights of our customers.

Legal basis: Our legitimate interests in operating a secure and reliable online store and, where applicable, compliance with legal obligations.

4.5 Analytics and service improvement

We may use analytics and similar technologies to understand how visitors use our website and to improve our products, services, website and customer experience.

Where applicable law requires consent for such technologies, they will only be used after the required consent has been obtained.

Legal basis: Consent where required, or our legitimate interests where processing may lawfully be carried out without consent.

4.6 Marketing and advertising

We may use personal data and certain online identifiers to:

• promote EAF products and services;
• measure the performance of advertising campaigns;
• measure conversions;
• understand how users interact with advertisements and our website;
• create or use advertising audiences;
• deliver or measure personalised advertising; and
• improve the relevance and effectiveness of our advertising.

Advertising and marketing services may include services provided by third parties such as Meta (Facebook and Instagram), TikTok, Google or other advertising platforms.

We may introduce or discontinue such services from time to time.

Where the use of cookies, pixels, identifiers or similar technologies for these purposes requires consent, such technologies will only be activated after the required consent has been obtained.

Legal basis: Consent where required by applicable law and, where applicable, our legitimate interests for activities that may lawfully be carried out without consent.

You can withdraw or change your consent at any time through our cookie-preference settings.

4.7 Direct marketing

Where permitted by applicable law, we may send you information about EAF products, launches, events, promotions or other news.

Where consent is required, we will only send such communications after obtaining the required consent.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the communication or by contacting us.

5. Cookies, Pixels and Similar Technologies

EAF uses cookies and similar technologies to operate, secure and improve our website.

These technologies may include:

• essential cookies;
• preference and personalisation technologies;
• analytics technologies;
• advertising and marketing technologies;
• pixels;
• tags;
• software development kits (SDKs);
• APIs; and
• similar tracking or measurement technologies.

The exact technologies used may change over time as we update our website, services and marketing activities.

Essential technologies

Certain technologies are necessary for the website to function, including features such as shopping-cart functionality, checkout, security and basic website operation.

These technologies may be used without consent where permitted by applicable law.

Personalisation technologies

We may use technologies to remember preferences or provide a more personalised shopping experience.

Where consent is required, these technologies will only be activated after consent has been obtained.

Analytics technologies

We may use analytics technologies to understand website traffic, interactions and performance.

Where consent is required, analytics technologies will only be activated after consent has been obtained.

Marketing technologies

We may use advertising technologies to measure and improve advertising campaigns and, where permitted and consented to, provide personalised advertising.

These technologies may be provided by platforms such as Meta, TikTok, Google or other advertising providers.

Where consent is required, these technologies will only be activated after the relevant consent has been obtained.

6. Cookie Preferences and Consent

Our website uses Shopify’s customer privacy and cookie-consent functionality.

Depending on your location and applicable law, you may be able to manage different categories of data collection, including:

• Required
• Personalization
• Analytics
• Marketing

You may choose to accept all applicable categories, decline non-essential categories or manage your preferences individually.

Where consent is legally required, we will not intentionally activate the relevant non-essential cookies, pixels or similar technologies before the required consent has been obtained.

You may change or withdraw your consent through the Cookie Preferences function available on our website.

Please note that withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

The use of our cookie-consent system does not replace the other legal bases that may apply to the processing of personal data.

7. Shopify

Our online store is hosted and operated using Shopify.

Shopify provides the infrastructure and services necessary to operate our online store, including website hosting, checkout, shopping-cart functionality, order processing and related services.

Shopify may process personal data in connection with providing these services.

Depending on the Shopify features enabled in our store, Shopify may also process information relating to interactions with our store and may provide additional services relating to analytics, personalisation, advertising, security and other functionality.

For information about Shopify’s processing of personal data, please refer to:

Shopify Consumer Privacy Policy:
https://privacy.shopify.com/

Shopify may have its own legal responsibilities for certain processing activities. Where applicable, you may exercise certain rights directly with Shopify.

8. Advertising and Marketing Services

To promote EAF and understand the effectiveness of our marketing, we may use third-party advertising and marketing services.

These may include, depending on the services we use at any given time:

• Meta, including Facebook and Instagram;
• TikTok;
• Google and related advertising services;
• other advertising, analytics or marketing providers.

These services may use cookies, pixels, identifiers, APIs or similar technologies.

Depending on the service, such providers may process information such as:

• IP address;
• device and browser information;
• website interactions;
• pages viewed;
• products viewed;
• products added to a cart;
• purchases or other conversion events;
• advertising interactions; and
• information necessary to measure or improve advertising campaigns.

Where required by applicable law, these technologies will only be used after the required consent has been obtained through our cookie-consent mechanism.

The relevant third-party providers may process personal data in accordance with their own privacy policies and may process data outside the European Economic Area.

We may change, add or remove advertising and marketing providers over time. Where required, our cookie information and consent mechanisms will be updated accordingly.

9. Payment Providers

Payments are processed through the payment methods and payment service providers made available during checkout.

Depending on the payment method selected, the relevant provider may process information necessary to authenticate and complete the payment.

We do not generally receive or store full payment-card details ourselves.

Payment providers process personal data in accordance with their own privacy policies and applicable legal requirements.

10. Shipping and Fulfilment Providers

To fulfil and deliver orders, we may provide necessary information to shipping and logistics providers.

This may include:

• name;
• shipping address;
• e-mail address;
• telephone number;
• order information; and
• shipment information.

Only information necessary for fulfilment and delivery will be shared for this purpose.

11. Other Service Providers

We may use service providers to assist us with operating EAF and our online store.

These may include providers for:

• e-commerce and website hosting;
• payment processing;
• shipping and logistics;
• customer support;
• e-mail communications;
• IT and technical services;
• website security;
• analytics;
• advertising and marketing;
• accounting and administration.

Where a provider processes personal data on our behalf, we take appropriate measures to ensure that the processing is carried out in accordance with applicable data protection law.

12. Recipients of Personal Data

Depending on the circumstances, personal data may be disclosed to or accessed by:

• Shopify and its relevant service providers;
• payment service providers;
• shipping and logistics providers;
• IT and technical service providers;
• customer-support providers;
• analytics providers;
• advertising and marketing platforms;
• accounting, tax and legal advisers;
• public authorities and governmental bodies where required by law.

We do not sell personal data as a general business practice.

Where personal data is shared with third parties for advertising or similar purposes, such processing will be carried out in accordance with applicable law and any required consent.

13. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

This may include technology, e-commerce, payment, analytics, advertising and other service providers.

Where personal data is transferred outside the EEA, we will rely on an applicable legal mechanism for the transfer, such as:

• an adequacy decision of the European Commission;
• appropriate safeguards, including Standard Contractual Clauses adopted by the European Commission; or
• another lawful transfer mechanism recognised under applicable data protection law.

Further information about international transfers may also be available in the privacy policies of the relevant service providers.

14. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The applicable retention period depends on the type of information and the reason for processing.

For example:

• Order, transaction and accounting information may be retained for the periods required by tax, accounting and commercial laws.
• Customer-service communications may be retained for as long as necessary to handle the request and, where appropriate, to establish, exercise or defend legal claims.
• Marketing information may be retained until you withdraw your consent or unsubscribe, unless another lawful basis applies.
• Customer-account information may be retained while the account remains active and for any additional period required by law.
• Cookie, analytics and advertising information may be retained according to the relevant technology, consent settings and retention periods of the respective providers.

When personal data is no longer required, we will delete or anonymise it unless continued retention is required or permitted by law.

15. Your Data Protection Rights

Subject to applicable law and the relevant conditions and exceptions, you may have the right to:

• obtain confirmation as to whether we process personal data concerning you;
• access your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive personal data in a structured, commonly used and machine-readable format;
• request portability of your personal data where applicable;
• withdraw consent where processing is based on consent; and
• object to direct marketing at any time.

To exercise your rights, please contact:

eaf7777.contact@gmail.com

You will generally not be charged for exercising your statutory data protection rights. However, applicable law may permit us to charge a reasonable fee or refuse a request in certain circumstances, particularly where requests are manifestly unfounded or excessive.

We may need to verify your identity before processing certain requests.

16. Right to Withdraw Consent

Where we process personal data on the basis of your consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

For cookie and similar technology preferences, you can use the Cookie Preferences function on our website.

For marketing communications, you can use the unsubscribe mechanism included in our communications or contact us directly.

17. Right to Lodge a Complaint

If you believe that we process your personal data in violation of applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Italy, the competent supervisory authority is:

Garante per la protezione dei dati personali
Piazza Venezia 11
00187 Rome
Italy

Website:
https://www.garanteprivacy.it/

Depending on the circumstances, you may also have the right to lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

18. Automated Decision-Making and Profiling

We do not intend to make decisions producing legal or similarly significant effects concerning you solely on the basis of automated processing.

Where advertising or personalisation technologies involve profiling, such processing will be carried out in accordance with applicable data protection law and, where required, only after obtaining the appropriate consent.

19. Children’s Data

Our online store is not directed at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal data to us unlawfully, please contact us at:

eaf7777.contact@gmail.com

20. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission or storage over the internet can be guaranteed to be completely secure.

21. Third-Party Websites and Services

Our website may contain links to websites, social-media platforms or other services operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites or services.

When you interact directly with third-party services, such as Meta, Instagram, TikTok, Google or other platforms, their own privacy policies and terms may apply.

We recommend reviewing the privacy information of any third-party service before providing personal data to it.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our business;
• changes to our website or services;
• changes to the technologies we use;
• changes to our advertising or marketing activities;
• changes to our service providers; or
• changes to applicable legal or regulatory requirements.

The updated version will be published on this page with a revised “Last updated” date.

Where required by applicable law, we will provide additional notice of material changes.

23. Contact

If you have any questions about this Privacy Policy, our privacy practices or the processing of your personal data, please contact:

KAHL KG DES KAHL MARKUS
Bastioni Maggiori 27
39042 Bressanone (BZ)
Italy

EAF Privacy Contact
E-mail: eaf7777.contact@gmail.com
Phone: +39 344 419 7630

For the purposes of applicable data protection law, KAHL KG DES KAHL MARKUS is the data controller responsible for the processing of your personal data.