Privacy Policy
Last updated: 6/3/2026
1. Data Controller
The data controller is Gianluca Riva Milano, with registered office in Milan, Italy. The Controller guarantees compliance with personal data protection regulations by providing the following information regarding the processing of data communicated or collected during navigation on this site.
2. Processed Data
- Navigation data: Computer systems acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses).
- Voluntarily provided data: The optional, explicit, and voluntary sending of emails or filling out forms entails the subsequent acquisition of the sender's address and any other data entered.
3. Purposes of Processing
Data is processed for the following purposes:
- Management of orders, payments, and shipments.
- Fulfillment of tax and legal obligations.
- Sending promotional communications (newsletters), only with explicit consent.
- Anonymous statistical analysis on site usage.
4. Legal Basis
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. For marketing activities, the legal basis is the consent of the data subject.
5. Retention Period
Data will be kept for the time strictly necessary to achieve the purposes for which it was collected. Data relating to purchases will be kept for 10 years in compliance with tax obligations.
6. Data Recipients
Personal data may be shared with:
- Couriers and freight forwarders for product delivery.
- Banking institutions for payment management.
- IT service providers and marketing platforms (e.g., email providers).
- Legal and tax consultants.
7. Data Transfer Outside EU
Some third-party service providers may be located outside the European Economic Area. In such cases, the transfer will take place on the basis of Standard Contractual Clauses approved by the European Commission.
8. Rights of the Data Subject
Under the GDPR, the user has the right to ask the Controller for: access to data, rectification, erasure of the same, limitation of processing, or to object to processing. Requests should be addressed via email to the dedicated address.
9. Changes
The Controller reserves the right to make changes to this Privacy Policy at any time by notifying users on this page. Therefore, please consult this page regularly.
To exercise your rights or contact the DPO: privacy@gianlucariva.com