Privacy notice
What we know about you, and why.
This notice explains which personal data we collect through outlusso.com, why, how long we keep it and what you can ask of us. It is written under Article 13 of Regulation (EU) 2016/679 (GDPR).
Last updated 12 September 2026
Data controller — still to be completed
The selling entity is not incorporated yet, so these details cannot be published: company name, legal form, registered office, Companies Register and REA number, VAT number, email and certified email, telephone.
While this panel is here, the site does not meet Article 13 GDPR or Article 7 of Legislative Decree 70/2003 on identification: they must be filled in before the first order is accepted.
The site does not profile you
We use no profiling cookies, load no analytics and run no advertising pixel. When you open a page your browser only talks to outlusso.com: even the typefaces are hosted by us and are never requested from Google. None of your data reaches a third-party service while you browse.
The data you give us
We collect only what you write into one of the site's three forms.
- Joining the list: your email address and the discount code we assign you. Legal basis: your consent (Art. 6(1)(a) GDPR). Kept until you ask to be removed.
- Made-to-order request: name, email, phone if you leave one, the description of the piece and the photos you attach. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). Kept for 24 months after the request is closed.
- Order request from the bag: name, email, phone if you leave one, your selection, any discount code and your notes. Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR). If the request becomes an order, the data falls under tax obligations and is kept for ten years as the law requires.
The photos you attach
Images sent with a made-to-order request are not public: they are stored outside the site's web folder and open only after signing in to the management area. No public address lets anyone download them.
Technical data
The server hosting the site and the Cloudflare network that publishes it record IP addresses and incoming requests, to keep the connection working and defend it from abuse. Legal basis: our legitimate interest in security (Art. 6(1)(f) GDPR).
Cloudflare, Inc. acts as a processor and may handle this data outside the European Union, under the Standard Contractual Clauses approved by the Commission.
In your browser, not with us
Your bag, wishlist, language, cookie choice and discount code stay in your browser's local storage. They are never sent to us and we cannot see them. Clear this site's data in your browser to remove them.
Who sees your data
Only the people running the shop. We do not sell, share or trade data with anyone. When shipping and payments go live, the courier and the payment provider will receive what they need to deliver and collect, as processors: the list will appear here before the first order.
Your rights
At any time you may ask us to access your data, correct it, erase it, restrict its use, receive it in a readable format or object to the processing. Where you gave consent, you may withdraw it whenever you like without affecting what came before.
If you believe we handle your data improperly you may complain to the Italian data protection authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or to the authority of the country where you live.
How to write to us — still to be completed
The email address for exercising these rights will be published here together with the seller's details.