The Italian Data Protection Authority (Garante per la protezione dei dati personali), an independent administrative authority established by the so-called privacy law (Law No. 675 of 31 December 1996), regulated subsequently by the Personal Data Protection Code (Legislative Decree No. 196 of 30 June 2003) as amended by Legislative Decree No. 101 of 10 August 2018, which also established that the Italian DPA is the supervisory authority responsible for monitoring application of the General Data Protection Regulation (pursuant to Article 51 of Regulation No. 2016/679) in accordance with the EU ruling.
In no case your data will be used for a different purpose than to execute your purchase order and in no case they will be provided to any other entity.