pursuant to art. 13 of EU Regulation 2016/679 of 27/04/2016

The processing of personal data communicated by visitors to lilulu by Carolina Zurita Mariani through this site will take place in the following ways.

lilulu by Carolina Zurita Mariani is the Data Controller of the personal data communicated  by visitors to this site.

These data will be used by lilulu by Carolina Zurita Mariani for the purposes for which the person to whom these data refer has given their consent and for the following purposes:

  • collection and storage of your personal data for the purpose of providing the e-commerce services offered (mandatory consent)
  • use of your data for marketing and promotional purposes and for sending our newsletter; (Optional consent)

Anyone who has provided their personal data to lilulu by Carolina Zurita Mariani, authorizing their processing for a specific purpose, will have the right, at any time, to exercise the rights referred to in art. 13 of EU Regulation 2016/679 of 27/04/2016 by contacting

Lilulu by Carolina Zurita Mariani via e-mail to

lilulu by Carolina Zurita Mariani, through this site detects anonymous data and information (browser type, geographical location, date and time) which it processes to obtain the best management and optimization of the site, as well as for statistical purposes and to collect more information on its services. and reservations. This information will in no case be communicated by the owner or its managers to third parties or used to contact site visitors unless they request or consent.

The communication of personal data relating to a minor must be made by a parent or by a person exercising parental authority over the minor.

The Controller of personal data lilulu by Carolina Zurita Mariani 

owner lilulu by Carolina Zurita Mariani, in the person of the Legal Representative

Address Via Fossato Molini, snc - 39012 - MERANO (BZ) 




lilulu by Carolina Zurita Mariani  (hereinafter lilulu) is committed to protecting and respecting the user's privacy and wishes to ensure the protection of the personal data entrusted to it.

Specifically, in order to ensure the correct functioning of the website and the web application (referred to together as the "Website") processed by lilulu, personal data may be collected (hereinafter "Data Personal ").

This Policy is intended to provide information on how Personal Data will be processed in accordance with Italian and European legislation, in particular with the GDPR (General Data Protection Regulation).

The Controller of personal data lilulu by Carolina Zurita Mariani

Owner lilulu by Carolina Zurita Mariani, in the person of the Legal Representative

Address Via Fossato Molini, snc - 39012 - MERANO (BZ) 




The data are processed at the headquarters of the Data Controller.


This site processes data mainly on the basis of user consent.

The granting of consent takes place through the banner placed at the bottom of the page, or through the use or consultation of the site, as a conclusive behaviour.

With the use or consultation of the site, visitors and users approve this privacy statement and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service.

Additional consents relating to the specific purpose of the service are collected through the communication or service request forms.

The provision of data and therefore consent to the collection and processing of data is optional, the User can deny consent, and can revoke a consent already provided at any time (via the banner at the bottom of the page or the browser settings for cookies, or the Contact link).

However, denying consent may make it impossible to provide some services and the browsing experience on the site would be compromised.

The data for the security of the site and for the prevention of abuse and SPAM, as well as the data for the analysis of the site traffic (statistics) in aggregate form, are processed on the basis of the legitimate interest of the Data Controller in protecting the site and of the users themselves. In such cases, the user always has the right to object to the processing of data.


Definition: a Personal Data is any information relating to a natural person, including a visitor to the Website who can be identified directly or indirectly by reference to an identification number.

lilulu collects the Personal Data of individuals. Therefore, lilulu reserves the right to carry out any verification and to immediately cancel any user account and / or cancel any existing order if the minimum age requirement is not met, without this implying any liability on the part of lilulu or an obligation of compensation in favour of the natural person.

When you register and / or create a personal account and / or place an order and / or give express consent, the Site collects the following Data.

Furthermore, the site collects connection data while browsing the website (date, time, computer protocol used by the visitor, pages consulted) for statistical purposes.

The site geolocates the customer via the IP address only when the latter is visiting the Website. This Personal Data is neither stored nor reused subsequently.

The site also collects information in relation to the terminal used to connect to the Website (type of terminal, operating system, browser, service provider, IP address of the terminal, data on the geolocation of the terminal).

When ordering a product on the Website, the banking service providers with which the Company has concluded contractual agreements collect and process Personal Data including payment methods (credit card number, expiration date, visual cryptogram, which is not is preserved, etc.).

The payment procedures are protected and the bank details that could be provided to lilulu do not allow the latter to carry out banking transactions.

In line with the information provided at the time of the collection of Personal Data, some data are mandatory and some are optional.

Guarantees have been adopted to ensure a sufficient level of protection of Personal Data.Purpose of the processing

The processing of the data collected by the site, in addition to the purposes connected, instrumental and necessary for the provision of the service, is aimed at the following purposes:

- Statistics

Collection of data and information in an exclusively aggregated and anonymous form in order to verify the correct functioning of the site.

None of this information is related to the natural person-User of the site, and does not allow identification in any way. Consent is not required.


- Security

Collection of data and information in order to protect the security of the site (spam filters, firewalls, virus detection) and of the Users and to prevent or unmask fraud or abuse to the detriment of the website.

The data are recorded automatically and may possibly also include personal data (IP address) that could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful activities. or constituting a crime.

These data are never used for the identification or profiling of the User and are periodically deleted. Consent is not required.

- Other activities

Communicate the data to third parties who perform functions necessary or instrumental to the operation of the service (eg. Comment box), and to allow third parties to carry out technical, logistical and other activities on our behalf.

Suppliers have access only to personal data that are necessary to carry out their duties, and undertake not to use the data for other purposes, and are required to process personal data in accordance with current regulations.

- Consultancy and professional assignments

In case of spontaneous sending of data in order to seek professional advice or for a professional assignment, the data will be used for the sole purpose of evaluating the assignment and for the eventual fulfilment of the same. In such cases, specific information will be provided.

Data retention period

The data collected by the site during its operation are kept for the time strictly necessary to carry out the specified activities.

Upon expiry, the data will be deleted or anonymised, unless there are other purposes for their conservation.

The data (IP address) used for site security purposes (blocking attempts to damage the site) are kept for 30 days.

Data for analytics (statistics) purposes are stored in aggregate form for 24 months.


Transfer of collected data to third parties

The data collected by the site is generally not provided to third parties, except in specific cases: legitimate request by the judicial authority and only in the cases provided for by law; if it is necessary for the provision of a specific service requested by the User; for carrying out security checks or site optimization.

Transfer of data to non-EU countries

This site may share some of the data collected with services located outside the European Union area.

In particular with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service.

The transfer is authorized on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data, in particular decision 1250/2016 (Privacy Shield - here the information page of the Italian Guarantor), for which no further consent is required.

The companies mentioned above guarantee their adherence to the Privacy Shield.


In accordance with the European Regulation on the Protection of Personal Data, the user has the right to access their Personal Data, oppose the processing, rectify, cancel, withdraw consent or limit the processing of their Personal Data, request the portability of their personal data. Personal Data and giving post mortem instructions. If applicable, a copy of the identity card may be required.

At any time, the user has the right to lodge a complaint with the Guarantor for the protection of personal data,

Pursuant to Italian legislation and the GDPR, lilulu complies with the regulations in force relating to each commercial solicitation channel.

Some services on the Website may not be available in the event of incomplete information or opposition to the collection, for example: ordering of products, participation in a prize game or promotional operation, etc., ..

You can exercise your rights by writing to the following address:



This site uses cookies, text files that are recorded on the user's terminal or that allow access to information on the user's terminal.

Cookies allow information on visitor preferences to be stored, they are used in order to verify the correct functioning of the site and to improve its functionality by customizing the content of the pages based on the type of browser used, or to simplify navigation by automating procedures (eg . Login, site language), and finally for the analysis of the use of the site by visitors.

This site uses the following categories of cookies:

- technical cookies, used for the sole purpose of transmitting an electronic communication, to ensure the correct display of the site and navigation within it. In addition, they allow you to distinguish between the various connected users in order to provide a requested service to the right user (Login), and for site security reasons. Some of these cookies are deleted when the browser is closed (session cookies), others have a longer duration (such as the cookie necessary to keep the user's consent in relation to the use of cookies, which lasts 1 year). Consent is not required for these cookies;


- analysis cookies, used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site. They are assimilated to technical cookies if the service is anonymized.

- profiling and marketing cookies, used exclusively by third parties other than the owner of this site to collect information on the behaviour of users while browsing, and on interests and consumption habits, also in order to provide personalized advertising.

 By clicking OK on the banner present at the first access to the site or browsing the site, the visitor expressly consents to the use of cookies and similar technologies, and in particular to the registration of these cookies on his terminal for the purposes indicated above, or to access through cookies to information on your terminal.


Disabling cookies

The user can refuse the use of cookies and at any time can revoke a consent already provided. Since cookies are connected to the browser used, they CAN BE DISABLED DIRECTLY FROM THE BROWSER, thus refusing / withdrawing consent to the use of cookies, or via the banner at the bottom of the page.

DISABLING COOKIES COULD PREVENT THE CORRECT USE OF SOME FUNCTIONS OF THE SITE, in particular the services provided by third parties may not be accessible, and therefore may not be viewable:

- YouTube videos or other video sharing services;

- the social buttons of social networks;

- Google maps.


Third party cookies

This site also acts as an intermediary for third-party cookies (such as buttons for social networks), used to provide additional services and features to visitors and to simplify the use of the site itself, or to provide personalized advertising.

This site has no control over their cookies entirely managed by third parties and does not have access to the information collected through these cookies. The information on the use of these cookies and their purposes, as well as on how to disable them, are provided directly by third parties on the pages indicated below.

It is recalled that generally the tracking of users does not involve identification of the same, unless the User is already registered for the service and is not also already logged in, in which case it is understood that the User has already expressed his consent directly to the third party when registering for the related service (eg Facebook).


This site uses cookies from the following third parties.

- Google Ireland ltd

For information on the use of data and their processing by Google Ireland ltd, it is recommended to read the privacy policy of Google and the methods of use of data by Google when using partner sites or apps.

- Google Analytics: used to analyze the use of the site by users, compile reports on site activity and user behavior, check how often users visit the site, how the site is tracked and which pages are visited most frequently . The information is combined with information collected from other sites in order to create a comparative picture of the use of the site compared to other sites of the same category.

Collected data: browser ID, date and time of interaction with the site, page of origin, IP address. Place of data processing: European Union as the anonymization of the service is active. The data collected do not allow the personal identification of users, and are not crossed with other information relating to the same person.

They are treated in aggregate and anonymized form (truncated to the last octet). According to a specific agreement (DPA), Google Inc. (data controller) is prohibited from crossing such data with those obtained from other services.

Further information on Google Analytics cookies can be found on the Google Analytics Cookie Usage on Websites page.

The user can selectively disable (opt-out) the collection of data by Google Analytics by installing the appropriate component provided by Google on their browser (opt out).

- Youtube: platform, owned by Google, for sharing videos. Cookies are set when accessing the page containing the embed, and when the video is started, and do not allow the identification of the User unless he is already logged into the Google profile. For the videos on the site, the "advanced privacy (no cookie)" option has been activated which ensures that YouTube does not store information about visitors unless they voluntarily reproduce the video.

Collected data: number and behaviour of users of the service, IP address, information linking visits to the site to the Google account for users already logged in, preferences for viewing videos. Place of data processing: USA.


Social Network Plugin

This site also incorporates plugins and / or buttons in order to allow easy sharing of content on your favourite social networks.

When you visit a page of our website that contains a plugin, your browser connects directly to the servers of the social network from which the plugin is loaded, which server can track your visit to our website and, if necessary, associate it. to your social media account, in particular if you are logged in at the time of the visit or if you have recently surfed on one of the websites containing social plugins.

If you do not want the social network to record data relating to your visit to our website, you must log out of your social network account and, probably, delete the cookies that the social network has installed in your browser.

On this site - plugins are installed with advanced privacy protection functions for Users, which do not send cookies or access cookies on the User's browser when the page is opened but only after clicking on the plugin.

The collection and use of information by such third parties are governed by their respective privacy policies to which please refer.

- Facebook

- Instagram

- LinkedIn

For more information, please consult the European text on cookies: