Last updated: 5 August 2026

​

This Privacy Policy explains how personal data is collected, used, stored and protected when users visit the 3D Aircraft Models website, place an order, create an account, subscribe to the newsletter or contact customer service.

This notice is provided in accordance with Regulation (EU) 2016/679, commonly known as the GDPR, and with applicable Italian data-protection legislation.

​

1. Data controller

The data controller is:

Luckyplane S.n.c. - Viale Francesco Petrarca 37/a - 20078 San Colombano al Lambro (MI), Italy
VAT number and Italian tax code: 10364630961
Certified email address (PEC): luckyplane@pec.it
Email: info@luckyplane.it

​

3D Aircraft Models is a brand of Luckyplane S.n.c.

​

2. Categories of personal data collected

Depending on how the website is used, the following personal data may be collected.

Information provided when making a purchase

• first name and surname;

• billing and delivery addresses;

• email address;

• telephone number, when required for delivery;

• details relating to the order and the products purchased;

• any tax information required for accounting documents;

• communications relating to orders, shipping, returns or customer support.

​

Payment information

Payments are processed by authorised external service providers.

Luckyplane does not directly store full credit or debit card details. However, it may receive information concerning the outcome of a transaction, the payment method used, the amount, the date and any refunds issued.

​

Customer account information

When a user creates an account, the following information may be processed:

• identification and contact details;

• login credentials and information required to manage access;

• order history;

• saved addresses;

• account preferences and settings.

​

Information provided through contact and support requests

When a user contacts us, we may collect:

• name;

• email address;

• order number;

• content of the request;

• photographs, documents or other information submitted to help us deal with the issue.

​

Newsletter information

When a user subscribes to the newsletter, their email address is collected, together with the information needed to document the subscription, the consent provided and any subsequent withdrawal of consent.

​

Technical and browsing information

The following information may be collected automatically while users browse the website:

• IP address;

• device type, browser and operating system;

• pages visited;

• date, time and duration of visits;

• source of website traffic;

• interactions with the website;

• technical identifiers and information collected through cookies or similar technologies.

​

Further information is available in the Cookie Policy.

​

3. Purposes and legal bases of processing

Order and contract management

Personal data is processed in order to:

• process and confirm orders;

• manage payments, invoicing and refunds;

• prepare and ship products;

• provide updates concerning availability and delivery;

• manage returns, withdrawal requests, warranties and complaints.

​

The legal basis is the performance of a contract or the taking of steps requested by the user before entering into a contract.

Providing the personal data required to process an order is mandatory. Without this information, the purchase cannot be completed.

​

Legal and administrative obligations

Personal data may be processed for:

• tax, accounting and administrative obligations;

• retention of invoices and other documents;

• handling requests from public authorities;

• compliance with consumer-protection legislation;

• management of the statutory guarantee.

​

The legal basis is compliance with a legal obligation.

​

Customer support

Personal data is used to answer enquiries, provide support, verify missing or damaged products and manage any disputes.

The legal basis may be the performance of a contract, the taking of pre-contractual steps or the controller’s legitimate interest in providing assistance and protecting its rights.

​

Account creation and management

Personal data is processed to allow users to register, log in and use restricted website functions.

The legal basis is the performance of the service requested by the user.

​

Newsletter and marketing communications

The email address is used to send news, product updates, content and commercial offers only when the user has provided consent, except in any cases otherwise permitted by law.

Consent may be withdrawn at any time by using the unsubscribe link included in the communication or by contacting customer service.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

​

Security and prevention of misuse

Personal data may be processed to:

• protect the website and user accounts;

• prevent fraud, unauthorised access and unlawful use;

• investigate unusual transactions;

• protect the rights of the controller and website users.

​

The legal basis is the controller’s legitimate interest in maintaining website security, preventing fraud and defending its rights.

Statistical analysis

Where installed, tools such as Google Analytics may be used to understand how the website is used, measure traffic and improve its content, navigation and performance.

Where these tools do not fall within the category of strictly necessary or equivalent technical cookies, they are activated only after the user has given consent. The preferences expressed through the consent-management system determine how analytical tags and tools operate.

​

Advertising, measurement and remarketing

Where installed and subject to the user’s consent, Meta Pixel may be used to:

• measure the effectiveness of advertising campaigns;

• attribute visits and conversions;

• create statistical audiences;

• display more relevant advertising;

• carry out remarketing activities.

​

These non-essential tools are not activated before the user has made a choice through the cookie banner or preference panel.

​

4. Cookies and tracking technologies

The website may use:

• technical cookies required for the operation of the website;

• cookies used for security, shopping basket, checkout and authentication functions;

• preference cookies;

• analytics cookies;

• advertising and profiling cookies;

• similar technologies used by external services.

​

Non-essential cookies are managed through a consent-management system that allows users to accept or reject them and to change their preferences at a later date.

Detailed information on individual tools, their purposes and their duration will be provided in the Cookie Policy and in the cookie-preference panel.

​

5. Processing methods and security

Personal data is processed electronically and, where necessary, manually.

Luckyplane adopts reasonable technical and organisational measures to protect personal data against:

• loss;

• unauthorised access;

• disclosure;

• alteration;

• destruction;

• unlawful use or use incompatible with the stated purposes.

​

No information system can guarantee absolute security. Users should therefore use secure passwords and should never send login credentials or payment information by email.

​

6. Recipients of personal data

Personal data may be disclosed, only where necessary, to the following categories of recipients:

• authorised Luckyplane staff and collaborators;

• Wix and providers of hosting, e-commerce and website-management services;

• payment-service providers;

• banks and financial networks;

• couriers, logistics operators and postal services;

• manufacturers, distributors and partners responsible for sourcing or direct shipping;

• newsletter and email-communication providers;

• technical-support and cybersecurity providers;

• tax, accounting, legal and administrative advisers;

• Google, Meta or other analytics and advertising providers, where their services are installed and authorised;

• public authorities and other parties to whom disclosure is required by law.

​

When a product is shipped directly by a manufacturer, distributor or partner, only the information necessary to prepare and deliver the order will be disclosed.

Where required by law, parties processing personal data on behalf of Luckyplane are appointed as data processors.

​

7. Transfers of personal data outside the European Economic Area

Some technology providers may process or store personal data outside the European Economic Area.

Where this occurs, the transfer is carried out using one of the safeguards permitted by the GDPR, including:

• adequacy decisions adopted by the European Commission;

• standard contractual clauses;

• other safeguards recognised by applicable legislation;

• any additional measures required for the specific transfer.

​

Users may request information about the safeguards applied by contacting the data controller.

​

8. Retention periods

Personal data is retained for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.

In particular:

• information relating to orders, invoices, payments and accounting documents is retained for the period required by tax and civil law, normally 10 years;

• information required to manage warranties, returns and disputes is retained for the time necessary to manage the relationship and protect legal rights;

• customer-support requests are retained for as long as necessary to handle them and subsequently for a period compatible with possible disputes;

• account information is retained until the user requests deletion, except for data that must be retained to comply with legal obligations or protect legal rights;

• newsletter information is retained until consent is withdrawn or the user unsubscribes;

• technical, analytics and cookie-related data is retained for the periods stated in the Cookie Policy or determined by the relevant service providers;

• information used for fraud prevention or legal claims is retained for as long as necessary to protect the relevant rights.

​

At the end of the applicable retention period, personal data is deleted, anonymised or retained only where required by law.

​

9. Children’s data

The website and the products offered for sale are not specifically intended for children.

Purchases must be made by adults or under the responsibility of an adult.

Luckyplane does not knowingly collect children’s personal data for marketing purposes without the consent required by law. Where personal data is found to have been collected improperly, appropriate measures will be taken to delete it.

​

10. Automated decision-making

Luckyplane does not make decisions based solely on automated processing that produce legal effects or similarly significant effects for users.

Providers of instalment-payment services or other financial operators may carry out their own automated checks when deciding whether to approve a service. These assessments are performed independently by the relevant providers in accordance with their own privacy notices and terms.

​

11. Data-subject rights

Where provided by the GDPR, users may exercise the following rights:

• obtain confirmation as to whether personal data concerning them is being processed;

• access their personal data;

• request correction or updating of inaccurate data;

• request deletion of personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• receive personal data in a structured, commonly used and machine-readable format, where applicable;

• withdraw consent at any time;

• lodge a complaint with the competent supervisory authority;

• not be subject, where applicable, to decisions based solely on automated processing.

​

The exercise of these rights may be subject to limitations provided by law, for example where retaining personal data is necessary to comply with legal or accounting obligations or to establish, exercise or defend legal claims.

​

12. How to exercise your rights

Requests may be sent to: info@luckyplane.it or by certified email to: luckyplane@pec.it

The request must contain enough information to identify the person making it. Where there are reasonable doubts concerning the requester’s identity, additional information may be requested.

Requests will be handled within the time limits established by the GDPR.

​

13. Complaints to a supervisory authority

Users have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, or with the competent supervisory authority in the European country where they live, work or believe that an infringement has occurred.

The right to bring proceedings before the competent courts remains unaffected.

​

14. Third-party links and services

The website may contain links to websites, social-media platforms, payment services or other resources operated by third parties.

Luckyplane does not control how these parties process personal data after users access their services. Users should consult the relevant third-party privacy notices.

​

15. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect:

• changes in applicable legislation;

• changes to the services used;

• new sales or shipping methods;

• the installation or removal of technical, analytics or advertising tools;

• organisational changes.

​

The updated version will be published on this page together with the revision date.

​

Material changes may also be communicated through the website or through other available contact details.