Privacy and cookie notice
1. Data controller
The controller of personal data is IVIS di Viychuk Ivan, sole proprietorship, VAT number 09730160968, with registered office at Via Fratelli Rosselli 25, 20098 San Giuliano Milanese (MI), Italy. You can contact the controller for any request about your personal data by writing to privacy@ivis.it. Data collected through the website is processed in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
2. Data collected
We collect the data you provide when registering, ordering, managing a return/warranty claim or requesting support: name, address, email, phone and delivery details. Payment data (card numbers, etc.) never passes through or is stored on our servers: it is handled directly by our payment service provider (see section 5).
3. Purposes and legal basis
Data is used to: (a) fulfil orders, manage deliveries, returns and warranty claims and provide support — legal basis: performance of a contract (GDPR art. 6.1.b); (b) comply with tax and accounting obligations (e.g. issuing invoices) — legal basis: legal obligation (GDPR art. 6.1.c); (c), with your consent, send you marketing communications or enable analytics/marketing cookies — legal basis: consent (GDPR art. 6.1.a), which you can withdraw at any time without affecting the lawfulness of processing already carried out. We do not share your data with third parties for marketing purposes, unless you have given explicit consent to marketing cookies (see section 6): in that case some browsing data may be shared with the providers listed there.
4. Retention period
Order and tax-document data (invoices) is kept for 10 years from issuance, as required by Italian civil and tax law on accounting record retention. Account data (name, contact details, addresses) is kept for as long as the account is active and deleted or anonymised within 24 months of its closure, except where data must be retained for legal obligations. Data collected on the basis of consent (e.g. marketing) is kept until consent is withdrawn.
5. Data recipients
Your data may be shared with: payment service providers (e.g. Stripe) to process payments; couriers and logistics partners to deliver orders; IT and hosting providers who process data on our behalf as data processors (GDPR art. 28); public authorities, where required by law. We do not sell your data to third parties.
6. Cookies
We use technical cookies required for the site to work. No analytics or marketing cookies are currently active: the only data we collect relates to orders placed (see sections 2 and 3). If we activate analytics or marketing cookies in the future, we will ask for your consent via the cookie banner and list the providers involved on this page (for analytics we plan to use Google Analytics 4 and/or Google Tag Manager, Google Ireland Limited). You can manage your preferences at any time from the cookie banner.
7. Your rights
You may at any time request access, rectification, erasure, restriction of processing, objection or portability of your data by writing to privacy@ivis.it. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).