Privacy Policy

Courtesy translation. The Italian version of this document is legally authoritative: in case of any divergence, the Italian text prevails until the translation is validated.

1. Data controller

The data controller is VRSC GROUP SRL UNIPERSONALE, Via Mario Rapisardi 2, 90144 Palermo (PA), Italia. VRSC GROUP SRL UNIPERSONALE — P.IVA/C.F. 07387590826 — REA PA-455588. For any request regarding your data you can write to info@lookonyou.com or by certified e-mail (PEC) to vrscgroupsrl@legalmail.it.

2. What data we collect

• Registration and account data: name, e-mail, password (in encrypted form).
• Order and shipping data: addresses, contact details, order content, purchase history.
• Payment data: handled by Stripe; we do not store card numbers on our systems.
• Browsing and device data: cookies and technical/measurement identifiers (see Cookie Policy).
• Communications: messages sent to support, reviews, newsletter subscription.

3. Purposes and legal bases

• Performance of the contract (art. 6.1.b GDPR): order management, payments, shipping, returns, support.
• Legal obligations (art. 6.1.c): invoicing, accounting, tax and anti-fraud compliance.
• Legitimate interest (art. 6.1.f): website security, fraud prevention, service improvement.
• Consent (art. 6.1.a): marketing, newsletter, profiling and non-technical cookies. Consent can be withdrawn at any time.

4. Data recipients

Your data may be disclosed, to the extent necessary, to:

• the third-party seller of the order, limited only to the data necessary to ship and fulfil your order (as data processor pursuant to art. 28 GDPR, with an obligation of confidentiality and a prohibition on further uses);
• Stripe, for payment processing;
• couriers and logistics operators, for delivery and returns;
• providers of measurement/marketing tools (e.g. Google, Meta) activated only on the basis of your consent (Consent Mode v2);
• authorities and supervisory bodies, where required by law.

5. Transfers outside the EU

Some providers may process data outside the European Economic Area. In such cases the transfer takes place on the basis of adequacy decisions or standard contractual clauses approved by the European Commission, with appropriate safeguards.

6. Retention

• Order and tax data: 10 years, by legal obligation.
• Account data: for the duration of the relationship and until you request its deletion.
• Abandoned carts: 30 days.
• Access logs: 12 months.

7. Your rights

You can exercise at any time the rights provided for by arts. 15-22 GDPR: access, rectification, erasure ("right to be forgotten"), restriction, portability and objection. Exercising the right to be forgotten entails the anonymisation of your data in orders, without prejudice to the data we are required to retain by tax obligation. To exercise your rights write to info@lookonyou.com.

8. Complaint to the Authority

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante, www.garanteprivacy.it) should you believe that the processing infringes the applicable rules.

9. Amendments

This policy may be updated; the version in force is always published on this page with its date. You can manage your consents at any time from the Privacy Centre of your personal area.

Cookie Policy →