1) Data Controller
The Controller of personal data is:
ADIVO S.r.l.
Registered office: Via Croce Malloni, 93 — 84015 Nocera Superiore (SA), Italy
VAT number / Tax code: 06269550650
REA: SA — 510299 (CCIAA Salerno)
Email: info@adivo.it
Certified email (PEC): adivo@pec.it
2) DPO (Data Protection Officer)
ADIVO S.r.l. has not appointed a DPO (Data Protection Officer), as the conditions requiring such an appointment under Regulation (EU) 2016/679 (GDPR) do not apply.
3) Types of data processed
Depending on the services used on the website, the following may be processed:
- Browsing data: IP address, browser and device information, technical logs and data relating to interaction with the website.
- Data voluntarily provided by the user: first name, surname, email, telephone number and message contents, for example through contact forms or support requests.
- Order data: products purchased, quantities, prices, order notes, shipping and billing addresses and order history.
- Data needed for invoicing: for example a tax code and/or VAT number, where required to issue a tax document.
- Payment data: electronic payments are handled by third-party providers, Stripe and PayPal. ADIVO S.r.l. does not receive or store complete payment card details.
4) Purposes, legal bases and retention
A) Order fulfilment and provision of products/services (WooCommerce)
- Purpose: managing the cart, checkout, orders, operational communications, customer support and returns/refunds.
- Legal basis: performance of a contract and/or pre-contractual measures.
- Retention: for the time needed to manage the order and support, and subsequently in accordance with the periods required to protect civil-law rights and applicable obligations.
B) Accounting and tax compliance
- Purpose: invoicing and compliance with legal requirements.
- Legal basis: legal obligation.
- Retention: in accordance with applicable law.
C) Handling contact/support enquiries
- Purpose: responding to user enquiries for information, quotations or support.
- Legal basis: pre-contractual measures and/or the Controller's legitimate interest in handling enquiries.
- Retention: typically 12–24 months, unless a longer period is needed, for example for disputes.
D) Newsletter (managed internally)
- Purpose: sending informational and promotional communications about products, news and initiatives.
- Legal basis: the user's consent.
- Retention: until consent is withdrawn or the user unsubscribes.
Unsubscribing / withdrawing newsletter consent: users may request removal from the newsletter and withdraw consent at any time by emailing info@adivo.it.
E) Traffic statistics (Google Analytics)
- Purpose: measuring traffic and improving the website and its content.
- Legal basis: consent, where tracking uses cookies/identifiers.
- Retention: according to the service settings and website configuration.
F) Advertising and conversion measurement (Google Ads)
- Purpose: measuring conversions, optimising advertising campaigns and, where enabled, remarketing.
- Legal basis: consent, where cookies/identifiers are used.
- Retention: according to the service settings and website configuration.
5) Processing methods and security
Data is processed using IT tools and appropriate technical and organisational measures to reduce the risks of data loss, unlawful or improper use and unauthorised access.
6) Provision of data
- Providing data for purchasing and managing an order is necessary. Without it, the order cannot be completed.
- Providing data for the newsletter is optional.
- Providing data for analytics/marketing cookies is optional and can be managed through the banner preferences.
7) Data recipients (parties that may process data)
Data may be disclosed or made accessible to parties supporting the provision of services, including:
- Hosting and infrastructure: Hostinger (website hosting).
- E-commerce platform: WooCommerce (WordPress).
- Payments: Stripe, PayPal.
- Shipping / labels: Packlink and, where applicable, the carrier selected for delivery, for example BRT.
- Analytics and advertising: Google Analytics, Google Ads.
- Authorised persons: the Controller's authorised staff and collaborators.
Where applicable, third parties process data as Data Processors or independent Controllers, under their respective terms.
8) Transfers to countries outside the EU
Some providers, such as Google, PayPal and Stripe, may involve transfers of data to countries outside the European Economic Area. These transfers take place in compliance with the GDPR using appropriate safeguards, such as Standard Contractual Clauses and/or other recognised mechanisms.
9) Cookies and consent management (iubenda)
The website uses:
- necessary technical cookies for operation
- subject to consent: statistical cookies (Google Analytics) and marketing cookies (Google Ads)
Cookies and consent preferences are managed through iubenda.
For more details about the cookies used and to manage preferences, consult the Cookie Policy (iubenda) and use the consent management panel (banner).
10) Data subject rights
Users may exercise the rights provided for by Articles 15–22 of the GDPR, including:
- access to data
- rectification
- erasure
- restriction of processing
- objection
- portability, where applicable
- withdrawal of consent, where processing is based on consent
Send requests to info@adivo.it or adivo@pec.it.
Users also have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali, the Italian Data Protection Authority.
11) Updates
This privacy notice may be updated. The latest version is always published on this page.
Last updated: 18/02/2026