This notice explains how PrestaBiz processes the personal data of users who visit the website, request information, purchase services or interact with the online features available.

Personal data protection is an important part of how we work. We collect only the information needed to provide the requested services, manage communications, improve the browsing experience and comply with applicable legal requirements.

Data controller

The data controller is the party that manages the PrestaBiz website and determines the purposes and means of personal data processing. For privacy requests, data protection questions or the exercise of user rights, users may use the contact details provided in the website contact section.

Personal data processed

Depending on the features used, different categories of data may be processed during browsing or service use:

  • Browsing data: IP address, technical device information, browser used, pages visited, date and time of access and other data automatically generated by IT systems.
  • Data voluntarily provided: name, surname, email address, phone number, company name, messages sent through contact forms or support requests.
  • Order data: information needed to manage purchases, invoicing, payments, support and service communications related to the requested services.
  • Project technical data: information provided by the user to receive support on PrestaShop websites, modules, hosting, configurations, migrations or integrations.
  • Data collected through cookies: browsing preferences, technical settings, aggregated statistics and any data connected to analytics tools or third-party services, according to the preferences expressed by the user.

Purposes of processing

Personal data is processed for purposes connected to the management of the website and the services offered by PrestaBiz, including:

  • enabling browsing and proper website operation;
  • replying to information, quote or support requests;
  • managing orders, payments, invoicing and service communications;
  • providing consulting, development, maintenance, migration, hosting and technical support for PrestaShop;
  • improving website content, services, performance and security;
  • complying with tax, administrative, accounting and legal obligations;
  • sending commercial or informational communications only when permitted or requested by the user;
  • preventing improper use of the website and protecting systems, data and technical infrastructure.

Legal basis for processing

Data may be processed on the basis of the performance of a contract or pre-contractual measures, compliance with legal obligations, the user’s consent or the controller’s legitimate interest, when applicable and compatible with the rights and freedoms of the data subject.

Processing methods and security

Data is processed using IT and organizational tools appropriate to the purposes indicated. PrestaBiz adopts technical and management measures aimed at limiting unauthorized access, loss, alteration, disclosure or improper use of information.

Access to data is limited to authorized parties and providers involved in the management of the website, technical services, hosting, payments, invoicing or communications, in accordance with the relevant roles and responsibilities.

Disclosure of data to third parties

Personal data may be disclosed to technical providers, consultants, payment platforms, hosting services, support tools, invoicing systems, carriers or other parties necessary to provide the requested services. Personal data is not sold to third parties.

Some services may be provided by external parties acting as processors, independent controllers or technical providers. In such cases, processing takes place according to their respective notices and only within the limits necessary to provide the service.

Data transfers

If certain technical services or external platforms involve processing outside the European Economic Area, PrestaBiz undertakes to use tools and providers that offer appropriate safeguards, as required by applicable law.

Retention period

Personal data is kept for the time necessary to achieve the purposes for which it was collected. Data relating to orders, invoices and administrative documentation may be kept for the periods required by tax and accounting obligations. Data collected for contact or support purposes is kept for the time needed to manage the request and any related follow-up activities.

User rights

Users may request, where applicable, access to their personal data, rectification, erasure, restriction of processing, objection to processing and data portability. Where processing is based on consent, the user may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent using the contact details available in the website contact section. Users may also contact the competent supervisory authority if they believe that data processing does not comply with applicable data protection law.

Cookies and tracking technologies

The website may use cookies and similar technologies to ensure proper page operation, remember preferences, improve performance, collect aggregated statistics or integrate external services.

Cookies are small files stored on the user’s device during browsing. Some cookies are necessary for the technical operation of the website, while others may be used for analytics, additional features or personalized communications, only where applicable and according to the preferences expressed by the user.

Technical cookies

Technical cookies are necessary to enable browsing, maintain the session, manage the cart, remember essential preferences, protect the website and provide the requested services. These cookies do not require user consent because they are necessary for the website to function.

Analytics cookies

Analytics cookies may be used to understand how users interact with the website, which pages are visited and which content is most useful. Where possible, this data is collected in aggregated form or with measures that reduce user identifiability.

Third-party cookies

The website may integrate external services such as payment tools, maps, videos, anti-spam systems, statistics, chat, social networks or marketing platforms. These services may set cookies or collect data according to their own privacy and cookie notices.

Cookie preference management

Users may manage cookie preferences through the consent banner or preference panel, where available, or through browser settings. Disabling some cookies may limit certain website features.

Preferences expressed by the user may be changed at any time through the tools made available by the website or by deleting cookies from the browser.

Updates to this notice

This notice may be updated over time to reflect legal, technical or organizational changes. The version published on this page is the currently applicable version.