Data controller
The data controller is VYRO by Marco Ricciardulli, based in Milan (MI), Italy, VAT number IT14316671008, email vyro.art@gmail.com. You can write to this address with any question about your data.
What data I collect
- Order data: name, shipping and billing address, email, phone number, items purchased.
- Payment data: handled directly by the payment providers chosen at checkout. I never see or store your full card details.
- Newsletter: your email address, only if you sign up.
- Requests: what you write to me by email or on social media, for example about a commissioned piece.
- Technical browsing data: IP address, browser type and similar data needed to run and secure the site. I do not use profiling or advertising tools.
Why I use it and on what legal basis
- Handling orders, shipping, returns and support: performance of a contract (Art. 6(1)(b) GDPR).
- Tax and accounting obligations: legal obligation (Art. 6(1)(c)).
- Sending the newsletter: your consent (Art. 6(1)(a)), which you can withdraw at any time via the link in every email or by writing to me.
- Answering your requests: pre-contractual steps at your request (Art. 6(1)(b)).
- Running the site securely and preventing abuse: legitimate interest (Art. 6(1)(f)).
I do not make automated decisions or profile you.
Do you have to provide it?
Order data is required: without it I cannot ship your piece or issue tax documents. Joining the newsletter is optional.
How long I keep it
- Order data and tax documents: 10 years, as required by Italian law (Art. 2220 Civil Code).
- Newsletter: until you unsubscribe.
- Requests and conversations: as long as needed to reply, and no more than 24 months unless they become an order.
- Technical browsing data: only as long as strictly necessary, unless needed to investigate abuse.
Who can see your data
Your data is never published or sold. It may be shared, only for the purposes above, with:
- Wix.com, which hosts the site, shop and newsletter, as data processor;
- the payment providers chosen at checkout, as independent controllers;
- the couriers delivering your order;
- my accountant, for tax obligations;
- public authorities, when required by law.
Transfers outside the EU
Some providers, such as Wix, may process data outside the European Economic Area (for example in Israel or the United States). Transfers only take place with the safeguards required by the GDPR: European Commission adequacy decisions (as for Israel and for companies certified under the EU-U.S. Data Privacy Framework) or standard contractual clauses.
Your rights
At any time you can ask me to:
- access your data and get a copy;
- correct or complete it;
- erase it, when I am no longer required by law to keep it;
- restrict its use;
- receive it in a machine-readable format (portability);
- object to processing based on legitimate interest;
- withdraw your newsletter consent, without affecting processing already carried out.
Write to vyro.art@gmail.com: I reply within 30 days. If you believe your data is not handled correctly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority in your country.
Cookies
For cookies and similar technologies, see the cookie policy.