Last updated: 4 September 2026
This notice explains how personal data is processed when you visit this online store, create an account or place an order. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (the «GDPR»).
1. Who processes your data
This store sells the official merchandise of Università Telematica San Raffaele Roma, but it is not operated by the University. The site is operated, and personal data is processed, by:
- Maior Group S.r.l.
- Via L. Zamenhof, 697 — 36100 Vicenza (VI), Italy
- VAT and tax number 03948440247
- REA VI-366954
- E-mail: store@maior-group.com
Maior Group S.r.l. is the data controller and is the only party that sells the products, issues invoices, collects payments, arranges shipping and handles customer service, returns and complaints.
Università Telematica San Raffaele Roma is the licensor of the trademarks reproduced on the products offered for sale. The University is not a party to your purchase contract and is not the controller of the data collected through this site. Your data is disclosed to the University only if you give a specific, optional consent, as explained in section 4: in that case, and limited to the data we disclose to it, the University becomes an independent controller.
2. What data we collect
2.1 Data you give us
- Account data: first name, last name, e-mail address, password (stored in encrypted form), date of birth where provided.
- Billing and shipping data: address, town, postcode, province, country, phone number if you provide one, and the tax details needed to issue the sales document.
- Order data: products purchased, sizes and colours chosen, amounts, purchase history, returns and refunds.
- Contact data: the content of the e-mails and support requests you send us.
- Newsletter subscription: your e-mail address, if you choose to subscribe.
2.2 Data collected automatically
- Browsing data: IP address, browser and device type, pages visited, date and time of access. This data is acquired by the site's systems in order to operate and secure the service.
- Cookies and similar technologies: see section 9.
2.3 Data we do not collect
Your payment card details do not pass through our systems and are not stored by us: they are handled directly by the payment provider, as explained in section 5.
3. Why we process your data, and on what legal basis
3.1 Performance of the contract (Art. 6.1.b GDPR)
We use your data to create and manage your account, receive and process your order, collect payment, ship the products, handle withdrawal, returns, replacements and after-sales support. Without this data we cannot enter into or perform the contract.
3.2 Legal obligations (Art. 6.1.c GDPR)
We process the data required for invoicing, bookkeeping and tax compliance, and for retaining order records as required by e-commerce legislation.
3.3 Consent (Art. 6.1.a GDPR)
With your consent, which you may withdraw at any time, we process data in order to:
- send you the store newsletter and promotional communications;
- set non-essential cookies and similar technologies, according to the choices you make in the cookie banner;
- disclose your data to Università Telematica San Raffaele Roma, which will process it as an independent controller for its own direct marketing purposes, that is to send its own promotional communications (see section 4).
3.4 Legitimate interest (Art. 6.1.f GDPR)
We process browsing data and logs to keep the site secure and to prevent fraud and abuse, and we may process the data needed to establish, exercise or defend a legal claim.
4. Disclosure to the University is separate and optional
Disclosing your data to Università Telematica San Raffaele Roma for the University's own direct marketing purposes — that is, sending the University's promotional communications — is a purpose separate from your purchase and from the commercial communications of Maior Group S.r.l.
- The relevant consent is optional: you can buy without giving it.
- It is collected separately from newsletter consent and from your acceptance of the terms of sale.
- The consent box is not pre-ticked.
- You may withdraw consent at any time, as easily as you gave it: from the Consents section of your account or by writing to store@maior-group.com. Withdrawal does not affect the lawfulness of processing carried out beforehand, nor your pending orders, and is acted upon within one working day.
If you give this consent, the University will process the data it receives as an independent controller, under its own privacy notice.
5. Who we share your data with
Your data is accessible only to those employees and collaborators of Maior Group S.r.l. who are authorised to process it and instructed under Art. 29 GDPR, within the limits of their respective duties: administration and accounting, order management and customer service, logistics and warehousing, information systems. Your data may also be shared with the providers of services needed to perform your order, appointed as data processors under Art. 28 GDPR where applicable:
- Carriers: SDA for deliveries within Italy and UPS for deliveries abroad, which receive the data needed for delivery.
- Payment provider: the qualified provider handling credit card and PayPal payments, which processes payment data as an independent controller under its own privacy notice.
- Technical providers: those hosting the site, maintaining the systems and sending transactional e-mails and the newsletter. The servers hosting the site and the mail service are located in Italy.
- Professional advisers: accountants and legal advisers, within the scope of their engagement.
- Authorities: where disclosure is required by law or by a judicial authority.
- Università Telematica San Raffaele Roma: only with your specific, optional consent (section 4). The data disclosed is your first name, last name, e-mail address, phone number and the details of the products you purchased; the University processes it as an independent controller for its own direct marketing purposes, under the privacy notice it will provide before processing begins.
Your data is never sold, traded or publicly disseminated.
6. Transfers outside the European Economic Area
Data is normally processed within the European Union, and the servers hosting the site and the mail are located in Italy. If you have an order delivered to a country outside the Union among those served by the store, the data strictly needed for delivery is passed to the carrier in that country. Any transfer to a third country takes place only under an adequacy decision of the European Commission or on the basis of the standard contractual clauses provided for by Art. 46 GDPR. You can request a copy of the safeguards in place by writing to store@maior-group.com.
7. How long we keep your data
- Account data: for as long as the account remains active. If you ask us to delete it, we do so except for what we are required by law to retain.
- Order and billing data: ten years from the date of the tax document, as required by Italian civil and tax law.
- Withdrawal, returns and warranty data: for the duration of the legal warranty and for as long as needed to handle any dispute.
- Newsletter: until you withdraw consent or unsubscribe.
- Consent to disclosure to the University: until withdrawn. The record of the consent and of any withdrawal (date, time, IP address, version of the text shown) is kept for 365 days from the withdrawal or from the end of the consent.
- Logs and browsing data: for the technical period needed to keep systems secure.
- Cookies: for the durations set out in the Cookies Policy.
8. Your rights
At any time you may exercise the rights granted by Articles 15 to 22 GDPR:
- access: find out whether we process data about you and obtain a copy;
- rectification: correct inaccurate data or complete incomplete data;
- erasure: have your data deleted, in the cases provided by law;
- restriction: ask that processing be suspended pending verification;
- portability: receive the data you provided in a machine-readable format and ask for it to be transmitted to another controller;
- objection: object to processing based on legitimate interest;
- withdrawal of consent: at any time and without formality, without affecting processing carried out beforehand.
To exercise them, write to store@maior-group.com. We reply within one month of your request, extendable by two further months in complex cases, of which we will inform you.
If you believe the processing infringes data protection law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it), with the supervisory authority of your country of residence, or bring the matter before the courts.
9. Cookies
The site uses essential cookies, needed for the store and the cart to work, and may use cookies subject to your consent. The current list of cookies, their purpose and their lifetime, together with the tools to change your choices at any time, are set out in the Cookies Policy, which forms an integral part of this notice.
10. Security
We apply technical and organisational measures appropriate to protect data against unauthorised access, loss and disclosure: encrypted connection, passwords stored in non-readable form, access limited to authorised staff. No system is absolutely secure, and you remain responsible for keeping your account credentials safe.
11. Minors
The store is intended for adults. We do not knowingly collect data relating to persons under eighteen. If we become aware that we have, we delete it; if you are a parent or guardian and believe this has happened, write to store@maior-group.com.
12. Automated decision-making
We do not carry out automated decision-making or profiling producing legal effects concerning you.
13. Changes to this notice
We may update this notice to reflect changes in the law or new features of the store. The version in force is always the one published on this page, with the last-updated date shown at the top. Where changes concern processing based on consent, we will ask for your consent again.
14. Contact
For any request concerning your personal data, write to store@maior-group.com or to Maior Group S.r.l., Via L. Zamenhof, 697 — 36100 Vicenza (VI), Italy.