Privacy and Cookie Notice

This notice explains what personal data we collect when you visit www.premier.it or buy from us, why we process it, on what legal basis, for how long we keep it and what rights you have, under Articles 13 and 14 of Regulation (EU) 2016/679 («GDPR») and the Italian Personal Data Protection Code (Legislative Decree 196/2003). For cookies and similar tools please also read the Cookie Policy.

1. Data controller

The data controller is Premier Helmets P.M.R. S.r.l. («P.M.R.»), registered office Via della Formica 216, 55100 Lucca (LU), Italy; administrative and sales offices, logistics centre and warehouse at Località Zinepri – Zona Industriale s.n.c., 55027 Gallicano (LU) – VAT no. and tax code 01743830463 – registered with the Lucca Chamber of Commerce no. LU-168078.
Contacts: email info@premier.it – certified email (PEC) p.m.r.srl@pec.it – phone +39 0583 730310.

2. Data we collect

• Order and account data: first and last name, shipping and billing addresses, email address, phone number, any company invoicing details (company name, VAT number, recipient code or PEC) and order history. For dealers with a professional account, also the details of their business.
• Payment data: handled directly by the payment service providers; we do not see or store card numbers.
• Contact and support data: the messages you send us by email or through the forms on the site (contact, warranty registration, request to become a dealer or distributor).
• Browsing data: IP address, browser type and pages visited, recorded by the site's systems also for security reasons; cookies and similar tools, as described in section 5 and in the Cookie Policy.

We do not process special categories of personal data (Art. 9 GDPR).

3. Why we process data, on what legal basis and for how long

• Managing orders, payments, deliveries, returns, warranty and after-sales support; creating and managing your account. Legal basis: performance of a contract and pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). Retention: for the duration of the relationship and then for the periods required by law below; account data until you ask for deletion.
• Issuing invoices and meeting tax and accounting obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR). Retention: 10 years from the date of the last entry, as required for accounting records and documents (Art. 2220 of the Italian Civil Code).
• Registering the warranty of helmets (2 or 5 years). When you fill in the registration form you give us the purchase and helmet details. Legal basis: performance of the contract and warranty obligations (Art. 6(1)(b) GDPR). Retention: for the duration of the warranty and then for the limitation periods.
• Answering your contact and support requests. Legal basis: performance of a contract or pre-contractual steps, or our legitimate interest in replying to people who write to us (Art. 6(1)(b) and (f) GDPR). Retention: for as long as needed to handle the request and any follow-up.
• Assessing requests from people who want to become a dealer or distributor. In the form you give us your details and those of your business; we use them to contact you and assess the collaboration and, if you choose, to send you the press kit. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). Retention: up to 24 months from the last contact, if no business relationship starts.
• Sending the newsletter and promotional communications. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the link in every email or by writing to us. Retention: until you withdraw consent. Emails are sent with the Kit service: Kit can detect whether an email is opened and which links are clicked, so we know how many readers opened each mailing and which content is of interest; if you do not want to be measured, write to us and you can keep receiving the newsletter as a plain message.
• Statistics on the use of the site with cookies (Google Analytics 4). Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). Retention: cookies last as long as indicated by each provider or until you withdraw consent; the data collected is kept by Google under its own notice.
• Personalised advertising and campaign measurement (Google Ads, Meta pixel and Conversions API, LinkedIn Insight Tag). Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). Retention: cookies until they expire or you withdraw consent; data received by Google, Meta and LinkedIn under their own notices.
• Site security and prevention of abuse and fraud. Including protecting forms with Google reCAPTCHA. Legal basis: our legitimate interest in protecting the site (Art. 6(1)(f) GDPR); you may object at any time. Retention: technical server logs for as long as needed for security.
• Storing and documenting your cookie choices. Legal basis: the obligation to be able to demonstrate consent (Art. 7(1) and Art. 6(1)(c) GDPR). Retention: your choice stays in your browser for 180 days, then we ask you again; the record of choices for as long as needed to prove them.
• Protecting our rights in case of disputes. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: for the limitation periods and the duration of any dispute.

Order data is necessary to complete the purchase; consent to the newsletter, to statistics and to marketing is optional and refusing it has no effect on your purchase.

4. Who we share data with

We do not sell your data. We share it only with those we need for the purposes above:

• couriers and logistics partners (BRT, TNT), for delivery;
• payment service providers: PayPal (also for card payments); for bank transfer or cash on delivery, your bank and the courier;
• technical providers: OVHcloud (site hosting), PrestaShop (the shop platform and its connected services), Aruba (backups), the provider of our business management software, Kit (newsletter delivery), Google reCAPTCHA (protecting forms from spam), Google Maps (dealer map) and Google Fonts (typefaces);
• Trustpilot, to invite you to review your purchase, when the service is active;
• Google, Meta and LinkedIn, for the statistics and advertising described in section 5 and only with your consent;
• advisers and authorities, when required by law.

Providers that process data on our behalf act as data processors (Art. 28 GDPR); Google, Meta, LinkedIn, payment providers and couriers may also process data as independent controllers, under their own notices.

5. Cookies and tracking tools

On your first visit a banner lets you accept, reject or choose categories of cookies. Without your consent we only use technical cookies: no statistics or marketing cookies. You can change your choice at any time with the «Cookie preferences» button (gear icon), always available on the site; withdrawal does not affect the lawfulness of processing carried out before. The list of cookies, providers and durations is in the Cookie Policy.

• Necessary (always on): technical PrestaShop cookies for the session, the cart and account login, and the ecm_cookie_consent cookie, which remembers your choice for 180 days.
• Statistics (only with your consent): Google Analytics 4, for statistics on visits.
• Marketing (only with your consent): Google Ads and Google remarketing; Meta pixel, for campaigns on Facebook and Instagram; Meta Conversions API; LinkedIn Insight Tag, to measure campaigns on LinkedIn.

Measurement without Google cookies. If you have not given consent, or have refused it, Google's tools do not read or write cookies on your device and do not receive advertising identifiers. Google may only receive anonymous technical signals, used for statistics and estimates in aggregate form («Consent Mode»). Legal basis: our legitimate interest in measuring the performance of the site and campaigns in aggregate form (Art. 6(1)(f) GDPR); you may object at any time by writing to us.

Meta Conversions API. Only if you have consented to marketing cookies, when you add a product to the cart or complete a purchase our server sends Meta the event, with the content and value of the cart or order, and the data needed to attribute it to our campaigns: email address, phone number and customer ID in non-readable form (SHA-256 hash), IP address, browser data, page address and Meta cookie identifiers (_fbp and _fbc). Without your consent we send nothing. For collecting and transmitting this data we are joint controllers with Meta Platforms Ireland Limited (Art. 26 GDPR, under the agreement made available by Meta); later processing is Meta's responsibility, as described in its notice: https://www.facebook.com/privacy/policy/. Customers with a professional account (dealers) are excluded from this transmission.

Google Ads enhanced conversions. Only if you have consented to marketing cookies, after a purchase we send Google, in non-readable form (SHA-256 hash), your email address, phone number, first and last name, together with the billing postcode and country, to attribute the purchase to our campaigns. Without your consent we do not send this data. Customers with a professional account (dealers) are excluded.

Google Maps. The page showing dealers and pick-up points uses Google Maps, which receives your IP address and browser data.

6. Transfers of data outside the European Union

Google, Meta, LinkedIn and Kit may also process data in the United States. The transfer is based on the European Commission's adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework (Art. 45 GDPR), to which the US providers have adhered, or on the standard contractual clauses approved by the Commission (Art. 46 GDPR). If other providers transfer data outside the European Union, they must do so with the safeguards required by Articles 44 to 49 GDPR, indicated in their notices.

7. Data security

We adopt technical and organisational security measures to protect personal data from unauthorised access, loss or destruction. Payment data is processed over secure connections and is not stored on our servers.

8. Your rights

At any time you may ask for access to your data, rectification, erasure, restriction of processing and portability of the data you gave us (Arts. 15-20 GDPR); you may object to processing based on legitimate interest and, always, to marketing (Art. 21 GDPR); you may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR).

To exercise your rights write to info@premier.it or to the PEC p.m.r.srl@pec.it: we will reply without undue delay and at the latest within one month, extendable in the cases provided by Art. 12 GDPR.

If you believe that the processing of your data violates the GDPR, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU Member State where you habitually reside, work or where the alleged infringement occurred (Art. 77 GDPR).

9. Changes to this notice

We may update this notice because of legal changes or changes to our services; the current version is always published on this page, with the date of the last update.

Last updated: 30 October 2026.

Cookie Policy

1. What cookies are

Cookies are small text files the site saves on your device to remember information (your cart, your cookie choice) or to measure how the site is used. By «similar tools» we mean technologies with the same purpose, such as tracking pixels and browser identifiers.

2. How you can choose

On your first visit a banner lets you reject, customise or accept non-necessary cookies. «Reject» and «Accept all» carry the same weight. Without your consent we only use technical cookies. You can change your mind at any time with the «Cookie preferences» button (gear icon, bottom left), always available on the site: withdrawing consent is as easy as giving it. Your choice stays in your browser for 180 days, then we ask you again; we also record it on our systems (with your IP address in encrypted form) to be able to show that the choice was yours.

You can also block or delete cookies in your browser settings: some functions, such as the cart, may then stop working.

3. Necessary cookies (always on)

They are needed for the site to work and do not require your consent.

4. Statistics cookies (only with your consent)

5. Marketing cookies (only with your consent)

6. Other third-party services that may receive your IP address

Some services are needed for the site's functions and receive your IP address and browser data when you load the page that uses them, even without profiling cookies:

• Google Maps, on the page of dealers and pick-up points;
• Google Fonts, for typefaces;
• Google reCAPTCHA, in forms, to protect them from spam;
• PayPal, in the cart and at payment.

The names and durations of third-party cookies are those declared by the providers and may change: for details please see their notices (Google: https://policies.google.com/technologies/cookies; Meta: https://www.facebook.com/privacy/policy/; LinkedIn: https://www.linkedin.com/legal/cookie-policy; PayPal: https://www.paypal.com/it/webapps/mpp/ua/cookie-full).

7. Measurement without Google cookies

If you have not given consent, or have refused it, Google's tools do not read or write cookies on your device and do not receive advertising identifiers. Google may only receive anonymous technical signals, which it uses for statistics and estimates in aggregate form («Consent Mode»).

8. Updates

If we change cookies or providers we update this page and, when needed, ask for your choice again. Last updated: 30 October 2026.