PRICES AND PAYMENT METHODS
Prices and Currency
Prices displayed on equipeboutique.eu, as well as the final invoices, are shown in Euro (EUR) for all countries.Equipeboutique.eu invites customers to check with their bank for current exchange rates and any applicable bank fees related to currency conversion.
Accepted Payment Methods
Equipeboutique.eu accepts payments made via the following methods:
- Credit Card
- PayPal
- Klarna
- Apple Pay
- Amazon Pay
- Meta Pay
- Google Pay
Equipeboutique.eu may request transaction verification from the issuing bank for first-time customers.
This process may delay the order processing slightly.
Credit Card
The following major credit and debit card circuits are accepted: Visa, Visa Debit, MasterCard, MasterCard Debit, American Express and Maestro.
All credit card data is processed through Shopify Payments, a secure online banking system that ensures maximum data protection.
PayPal
Customers can choose to pay directly through their PayPal account.
Equipeboutique.eu reserves the right to ship orders only to the address registered on the customer’s PayPal account.
ONLINE FRAUD PREVENTION
RUMBA SRL (the “Company”) manages its online retail activities through its website, offering clothing, footwear, and accessories.
Purchases may be made by creating an account and registering on the website, or proceeding as a guest without registration.
As part of its commitment to security, the Company has implemented procedures to prevent fraud attempts.
In cases where a potential fraud risk is detected during the purchase process (as described in the general terms of sale), RUMBA SRL will initiate identity verification procedures.
Firstly, the email address used by the user will be verified against the addresses of registered customers. Subsequently, RUMBA SRL, through its customer care department, will send a communication (via email) to the customer, requesting a copy of their identity document and a copy of the credit card (displaying only the last four digits).
This request is necessary to verify the identity of the customer and, regarding the four digits of the credit card, to confirm that these digits match those used to place the order. It should be noted that these four digits are the only ones visible to RUMBA SRL within the purchase process via the Shopify e-commerce platform.
It is worth noting that both law enforcement authorities and customers who have been victims of fraud or attempted fraud have often requested the Company to carry out such verifications using the last four digits of the credit card, as this method effectively enables the tracing of fraudulent purchases and the collection of necessary details to file a report with the competent authority.
On the legitimacy of processing copies of identity documents and credit cards showing only the last four digits
In cases of attempted fraud, the Company has the obligation to verify the customer’s identity on the basis of its legitimate interest in protecting itself from unlawful activities, as outlined in the General Terms and Conditions of Sale published online.
This verification is carried out by requesting a copy of the identity document and a copy of the credit card, with only the last four digits visible.
According to the provisions of the Italian Data Protection Authority (Decision of 27 October 2005, No. 1189435), the request for a copy of the identity document is considered justified in the following two cases:
(i) when a regulatory provision explicitly requires the acquisition and retention of a document copy;
(ii) when the data controller must demonstrate that the data subject has been identified using more rigorous methods, due to the specific context or operation being carried out.
In this case, it is considered that the operation in question (i.e. preventing a fraudulent transaction) requires stricter identification procedures and that the request for a document copy is therefore justified, since the collection of personal data is strictly necessary to pursue the stated purposes.
Although the Data Protection Authority has not explicitly ruled on the request for a copy of the credit card (showing only the last four digits), this data is also deemed strictly necessary for the purposes pursued (fraud prevention), and thus no issues are identified regarding its processing.
That being said, the processing must comply with applicable personal data protection laws.
In particular:
- Consumers must be informed about the processing of their personal data;
-Access to such information must be granted only in the presence of fraud-related indications and only to authorized personnel;
-The Company must establish specific data retention periods, and documents must be stored only for the time strictly necessary to fulfil the purposes pursued, after which they must be deleted;
Additionally, considering the nature of the collected data, encryption should be implemented where not already in place.