Privacy policy

Last updated: September 30, 2026

This Privacy Policy explains how StadiumBricks collects, uses and protects personal data when you visit or use the website stadiumbricks.com, including its Italian-language section at stadiumbricks.com/it/, contact StadiumBricks, or purchase products and services through the website.

1. Data Controller

The Data Controller is:

StadiumBricks di Daniel Cadirola
Via Plinio il Vecchio 6
21047 Saronno (VA), Italy
VAT No. IT 04077840132
Email: [email protected]

For any question regarding the processing of personal data or the exercise of your rights, you may contact StadiumBricks using the email address above.

2. Personal Data We Collect

Data provided directly by you

When you contact us, request information, place an order or purchase a product, we may collect information such as:

first and last name;
email address;
telephone number;
billing and shipping address;
information relating to an order or request;
any other information voluntarily included in a message sent to us.

Technical and usage data

When you access the Website, certain technical information may be processed automatically, including:

browser and device information;
operating system;
requested pages and URLs;
date and time of access;
referring page or source;
technical logs necessary for the operation and security of the Website.

Some technical information is necessary for the Website to operate correctly and does not require consent where it is strictly necessary to provide the service requested by the user.

Analytics and behavioural data

Only after you provide consent through the cookie management system, the Website may collect information about how you interact with its pages through Google Analytics 4 and Microsoft Clarity.

This information may include, for example:

pages viewed;
duration and sequence of visits;
clicks and interactions with page elements;
scrolling activity;
approximate geographical area;
browser and device characteristics;
traffic source;
pseudonymous user and session identifiers.

Microsoft Clarity may also generate heatmaps and session replays in order to understand how users interact with the Website.

These technologies are not activated for analytics purposes unless the user has provided the required consent.

3. Purposes and Legal Bases of Processing

Operation, security and maintenance of the Website

Technical data may be processed to provide the Website, maintain its security, detect technical problems and prevent misuse.

The legal basis is the legitimate interest of the Data Controller in maintaining the security and proper functioning of the Website, where applicable, as well as the performance of services explicitly requested by the user.

Strictly necessary cookies and similar technologies are used only where necessary to provide the Website or a service requested by the user.

Responding to requests and communications

Personal data provided when contacting StadiumBricks is processed in order to respond to enquiries, provide requested information and manage communications.

The legal basis is the performance of pre-contractual measures taken at the user's request or, depending on the nature of the communication, the legitimate interest of StadiumBricks in responding to enquiries.

Orders and contractual obligations

Personal data relating to purchases and orders may be processed in order to:

process and fulfil orders;
arrange payment, invoicing and delivery;
provide customer assistance;
comply with contractual obligations.

The legal basis is the performance of a contract or pre-contractual measures requested by the user.

Legal and accounting obligations

Certain data may be retained and processed where required to comply with tax, accounting, administrative or other legal obligations.

The legal basis is compliance with a legal obligation.

Website analytics

With your consent, Google Analytics 4 is used to obtain statistical information regarding use of the Website, including the number of visitors, pages viewed, traffic sources, devices and general navigation patterns.

The legal basis is your consent.

User-experience analysis

With your consent, Microsoft Clarity is used to analyse interactions with the Website through behavioural metrics, heatmaps and session replay functionality in order to understand how visitors use the Website and improve its usability and content.

The legal basis is your consent.

The current configuration of Google Analytics 4 and Microsoft Clarity is used for website analytics and user-experience improvement and not for serving personalised advertisements on StadiumBricks.

4. Google Analytics 4

The Website uses Google Analytics 4, an analytics service provided by Google.

Google Analytics uses first-party cookies and pseudonymous identifiers to distinguish users and sessions and to provide statistical reports concerning Website usage.

The information collected may include device and browser information, pages visited, events and interactions, approximate geographical information and pseudonymous identifiers.

For users located in the European Union, Switzerland and the United Kingdom, Google states that Google Analytics does not log or store individual IP addresses. IP addresses may be used temporarily to derive approximate geographical information before being discarded.

Google Analytics is activated on StadiumBricks only after the user has consented to analytics cookies.

More information regarding the cookies used by Google Analytics is provided in the Cookie Policy.

5. Microsoft Clarity

The Website uses Microsoft Clarity, a behavioural analytics service provided by Microsoft.

Clarity helps StadiumBricks understand how visitors interact with the Website by collecting behavioural metrics and producing features such as:

heatmaps;
click and scroll information;
navigation statistics;
session replays.

Clarity may use first-party and third-party cookies and pseudonymous identifiers to associate page views and interactions with a user or session.

The purpose of this processing is to improve the usability, structure and content of StadiumBricks.

Microsoft Clarity is activated only after the user has provided the relevant consent.

Microsoft states that Clarity uses mechanisms designed to mask sensitive content and form fields in session recordings. StadiumBricks does not intentionally use Clarity to collect the content users type into contact, payment or other sensitive fields.

6. Cookie Consent Management

StadiumBricks uses the open-source tarteaucitron.js consent management system.

When you first visit the Website, non-essential analytics and behavioural tracking services are disabled by default.

You can:

accept all optional cookies;
refuse optional cookies;
select individual services;
modify or withdraw your consent at any time.

Your choice is stored by means of a technical cookie used exclusively to remember your privacy preferences.

You can reopen the consent management panel at any time by selecting Cookie settings in the Website footer.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Further information is available in the Cookie Policy.

7. Recipients of Personal Data

Personal data may be processed, where necessary, by parties providing services to StadiumBricks, including:

website hosting and technical service providers;
email and communication providers;
payment service providers;
shipping and delivery providers;
accounting, administrative or professional advisers;
Google, in connection with Google Analytics 4;
Microsoft, in connection with Microsoft Clarity.

Such parties process personal data only to the extent necessary for the relevant service and in accordance with applicable data protection requirements.

Personal data may also be disclosed to public authorities where required by law.

8. International Data Transfers

Some service providers used by StadiumBricks, including Google and Microsoft, operate international infrastructure and personal data may therefore be processed outside the European Economic Area.

Where personal data is transferred outside the EEA, appropriate safeguards required by applicable data protection law are used.

Google and Microsoft state that they participate in the EU-U.S. Data Privacy Framework for transfers covered by that framework and may also rely, where applicable, on adequacy decisions, Standard Contractual Clauses or other recognised transfer mechanisms.

9. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected and, where applicable, for the periods required by law.

In particular:

data relating to enquiries is retained for the time reasonably necessary to respond and manage any subsequent communication;
contractual and accounting information may be retained for the periods required by applicable civil, tax and accounting legislation;
analytics data is retained in accordance with the settings and retention periods applied within Google Analytics;
Microsoft Clarity currently retains session playback data for a limited period and aggregated behavioural data for longer periods according to Microsoft's service retention rules.

The retention settings and policies of external service providers may change over time.

10. Your Rights

Under the General Data Protection Regulation (EU) 2016/679, where applicable, you have the right to:

obtain confirmation as to whether your personal data is being processed;
request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of personal data where the legal requirements are met;
request restriction of processing;
object to processing based on legitimate interests;
receive personal data in a structured, commonly used and machine-readable format where the right to data portability applies;
withdraw consent at any time where processing is based on consent;
lodge a complaint with the competent supervisory authority.

In Italy, the competent supervisory authority is the Garante per la protezione dei dati personali.

Requests concerning your rights may be sent to: [email protected]

11. Security

StadiumBricks adopts reasonable technical and organisational measures intended to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

However, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure.

12. Third-Party Websites

The Website may contain links to websites or services operated by third parties.

StadiumBricks is not responsible for the privacy practices, content or data processing activities of external websites. Users are encouraged to review the privacy information provided by those websites.

13. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time, including when services, technologies or legal requirements change.

The latest version will always be published on this page and the date shown at the top will be updated accordingly.

14. Contact

For any question concerning this Privacy Policy or the processing of personal data, please contact:

StadiumBricks di Daniel Cadirola
Via Plinio il Vecchio 6
21047 Saronno (VA), Italy
Email: [email protected]