LILLA AUDIO SAMPLER← Back to LILLA

Privacy notice

Last updated: 8 November 2026

Who is responsible

Sandro Grassia, Via Guerrino Vandi, 11, 47922 Rimini (RN), Italy.
Contact: info@lillasampler.it.

Information used for your request and order

We process your name, email address, shipping address, country, optional telephone number, delivery notes and correspondence. When an order is paid or shipped, we also keep the quote, order status, payment references and carrier/tracking details. PayPal handles payment credentials; the shop uses payment references and status to check the outcome.

Contact and delivery details are needed to assess shipping, prepare your requested quote, fulfil an order and provide assistance. Without the necessary details, we cannot process the request. Please do not include sensitive information in delivery notes.

Technical records may include IP addresses, request times, browser information, session identifiers and hashed identifiers used to limit abusive submissions. You provide contact and delivery details directly; payment and delivery updates come from the relevant service providers.

Purposes and legal bases

Responding to a quote request and fulfilling an order are based on steps requested before a contract and performance of a contract. Records required by applicable law are processed to comply with legal obligations. Technical security measures help protect the site against abuse and preserve accurate payment records, based on legitimate interests, subject to the rights of affected individuals.

We do not use your request details for advertising or profiling. Shipping availability and quotes are reviewed by the seller; the site calculates the regional list price from the destination you select.

Service providers and recipients

Provider information: Aruba privacy notice, Server.it data protection, Google privacy policy, PayPal privacy statement.

International processing

Google and PayPal may process information outside the European Economic Area. Their notices describe the applicable transfer safeguards, including adequacy arrangements and contractual safeguards where relevant. Hosting in Italy does not mean that all correspondence and payment processing remain in Italy.

Retention

For requests that do not lead to an order, the retention period in the shop's operational database is two days after the request is closed or the last applicable quote expires. Active requests remain available while being assessed or while a quote is valid. Requests linked to an order or a payment requiring verification are handled separately.

Automatic cleanup also covers identifiable emails sent by this website and held in the seller's Gmail mailbox for eligible requests, using the same two-day period. Copies and correspondence held in the Aruba mailbox are reviewed and deleted manually under the same retention policy. It runs periodically and processes queued messages in batches. Messages that cannot be safely identified or deleted are retained for review. For requests that do not lead to an order, replies written personally by the seller are deleted manually under the same two-day retention policy. Correspondence needed for an active request, an order, a legal obligation or a dispute is assessed separately and retained only as necessary. Emails no longer linked to a request in the database are reviewed manually because they cannot be identified by the automated cleanup. This does not delete copies held by recipients.

Orders, security records and backups

The two-day cleanup does not apply to purchased orders or payments requiring investigation. Necessary order records are kept for fulfilment, delivery, returns and assistance, and subsequently to meet applicable legal obligations or establish, exercise or defend claims. The criteria are the obligations attached to the particular record and the relevant claim or limitation period; information no longer needed for those purposes is removed or anonymised.

Security logs and test archives are separate from request cleanup. Their retention depends on troubleshooting, abuse investigation and the need to verify payment integrity. Backups are retained separately for recovery and follow the hosting service's backup rotation; deletion from the operational database does not immediately remove a backup copy. Contact the seller for details about records or copies relating to you.

Your rights

Subject to applicable conditions, you may request access, correction, deletion, restriction and portability of your data, and object to processing based on legitimate interests. Contact the address above. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or another competent supervisory authority.

Technical storage and external services

The request form uses a session cookie to protect form submissions. Administrator access uses a separate session cookie. The checkout uses browser tab storage to recover the quote when returning from PayPal. The request confirmation keeps its reference in browser history state for the current page; it does not put the shipping address or email in the page URL. Quote and checkout pages also use browser history state to retain the quote link within the current tab. Existing local browser preferences may be read by the homepage. Fonts are hosted on this website. The shop does not install advertising or analytics trackers; external websites such as PayPal and GitHub apply their own policies when you open their links. Blocking necessary cookies or tab storage may prevent submission or recovery of a payment session.