Information regarding the processing of personal data carried out through the Igeia e-commerce site ("Site") pursuant to art. 13 of Regulation (EU) 2016/679 ("GDPR").

1. DATA CONTROLLER

The data controller is Traininpink RR DMCC, a company incorporated under the laws of the United Arab Emirates, with a secondary office in Via Mauro Macchi 27, 20124 Milan (Italy), CF 11920410963, email hello@igeia.shop (hereinafter, the “Data Controller”).
The “Igeia” brand and the related Website are managed by the Owner.

2. PERSONAL DATA COLLECTED

·       Personal and contact information (name, surname, shipping/billing address, email, telephone number);

·       Purchase data (products ordered, amount, payment method, order status);

·       Payment data (tokenizations/last card digits; complete card data is managed exclusively by the payment provider);

·       Browsing data (IP address, logs, user agent, cookies);

·       Marketing preferences and data relating to interactions with newsletters or promotional communications;

·       Any data provided voluntarily in customer service requests.

3. PURPOSE AND LEGAL BASIS

Purpose	Legal basis	Conferral
Conclude and execute the online sales contract, process orders, and customer service	Art. 6 §1 b) GDPR – performance of a contract	Necessary
Tax, accounting and legal obligations	Art. 6 §1 c) GDPR – legal obligation	Necessary
Technical management of the site, fraud prevention, protection of rights	Art. 6 §1 f) GDPR – legitimate interest	Necessary
Sending newsletters/promotions on similar products (“soft spam”)	Art. 6 §1 f) GDPR; art. 130 co.4 Privacy Code	Optional – right to object
Personalized marketing and profiling (upon consent via banner/box)	Art. 6 §1 a) GDPR – consent	Optional
Response to requests sent via form or email	Art. 6 §1 b) GDPR	Necessary

4. PROCESSING METHODS AND SECURITY

The data is processed using IT tools and procedures designed to ensure its security and confidentiality in accordance with Art. 32 of the GDPR. The Data Controller implements proportionate technical and organizational measures, including encryption in transit, pseudonymization of payment tokens, and role-based access.

5. STORAGE PERIOD

Data category	Period
Purchase and billing data	10 years from accounting registration (art. 2220 cc)
Data required for account/order management	24 months from the last interaction with the Site (subject to renewals)
“Soft spam” marketing data	24 months from the last interaction or until the user objects
Profiling data (consent)	12 months or until consent is revoked
Technical and intrusion logs	12 months

6. RECIPIENTS AND TRANSFERS

·       payment service providers (e.g. Stripe, PayPal);

·       couriers and logistics operators for delivery purposes;

·       Site hosting and maintenance provider;

·       tax/legal advisors;

·       email marketing and customer support platforms.

Where necessary, these entities are designated as data processors pursuant to Art. 28 GDPR. Some providers may be located outside the EEA (e.g., UAE, India, USA); in this case, the transfer occurs on the basis of Standard Contractual Clauses approved by the EU Commission or other appropriate safeguards.

7. RIGHTS OF THE INTERESTED PARTY

You may exercise the rights provided for in Articles 15-22 of the GDPR (access, rectification, erasure, restriction, portability, objection, and withdrawal of consent) at any time by writing to hello@igeia.shop. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. COOKIE POLICY

The Site uses its own and third-party technical, analytical, and profiling cookies. For more information or to change your consent, please refer to the dedicated Cookie Policy and the preference management banner.

9. MINORS

The Site and its services are not intended for minors under 18 years of age; the Data Controller does not voluntarily collect data relating to minors.

10. CHANGES

The Data Controller reserves the right to update this policy at any time. The current version is published on the Website with the last update date.

Last updated: May 18, 2025.