Privacy and DPO Contact
Dedicated channel for personal data requests, privacy rights exercise and data protection contacts.
Use this page to exercise the rights provided by the privacy policy, ask for clarifications on the processing of personal data or send a communication intended for the competent privacy referent.
How to contact the privacy channel
You can send a privacy request to info@karmarando.. In the object indicates, when possible, “Privacy request” and describe in a synthetic way what you want to get.
If the data subject provides for a Data Protection Officer (DPO) formally designated, the request is routed to the competent contact person. This page does not declare a formal appointment when such appointment is not documented in the context of the processing concerned.
What requests can you send
In the cases provided for by the GDPR you can ask, among other things:
- access to personal data concerning you;
- inaccurate data correction or incomplete data integration;
- erasure of data when the conditions are met;
- restriction of processing;
- portability of data in the cases provided;
- opposition to certain treatments;
- revoke consent when processing is based on consent;
- information on how your data is processed.
For a complete overview, see thePrivacy and cookies policy.
What to indicate in the request
To help us correctly identify data and reduce integration requests, it only indicates the relevant information, for example:
- name and surname;
- email linked to your account or order, if relevant;
- type of right or information required;
- If necessary, order number only if necessary to identify the treatment concerned.
Avoid attaching identity documents to the first communication if they are not necessary. If you need to reasonably verify the identity to protect your data from unauthorized access, the appropriate methods will be indicated.
Response times
For requests submitted pursuant to Articles 15-22 GDPR, information on actions undertaken is provided without undue delay and, in any case, within a month from receipt of the request.
When necessary for complexity or number of requests, the term may be extended up to two months further in cases permitted by the GDPR. In this case, the data subject is informed of the extension and of the related reasons within the first month.
Identity and Security Verification
Before communicating, modifying or erasing personal data, we may reasonably request information necessary to verify that the request is from the data subject or a legitimate subject.
We do not ask for account passwords, OTP codes, recovery codes or full payment card data to manage a privacy request. Karmarando, do not send such data and contact the privacy channel.
Control authority and other safeguards
If you feel that the processing of your personal data does not comply with applicable legislation, you may lodge a complaint with the competent supervisory authority and use the other remedies provided by law.
The privacy channel is also available to clarify a request before submitting a complaint, without limiting in any way the right to contact directly the competent authority.
Last updated: 4 September 2026.