PRIVACY POLICY

 Last Updated: June 2026

1. Data Controller

Pursuant to Regulation (EU) 2016/679 ("GDPR"), the Data Controller of the personal data collected through the website www.evol-italy.com is:

MAG Distribuzione S.r.l. (EVOL Italy)
Via delle Querce, 3
87012 Castrovillari (CS) – Italy
VAT No. and Tax Code: 03187690783
Email: info@evol-italy.com

2. Types of Data Collected

The website may collect the following categories of personal data:

Data Provided Voluntarily by Users

• First and last name;
• Email address;
• Telephone number;
• Billing and shipping address;
• Tax Code and/or VAT number;
• Information required to process orders;
• Information submitted through the contact form.

Data Collected Automatically

While browsing the website, the following information may be collected:

• IP address;
• Browser and device information;
• Operating system;
• Pages visited;
• Date and time of requests;
• Cookies and similar technologies.

3. Purposes of Processing

Personal data are processed for the following purposes:

Order Management and Online Sales

• User registration;
• Purchase management;
• Payment processing;
• Product shipment;
• Customer support;
• Management of returns and complaints.

Legal and Regulatory Compliance

• Tax obligations;
• Accounting obligations;
• Administrative requirements imposed by law.

Handling Inquiries

• Responding to requests submitted through the contact form;
• Providing commercial and technical support.

Marketing and Newsletters

Subject to the data subject's consent, the Data Controller may send:

• Newsletters;
• Commercial communications;
• Information regarding products, promotions, and initiatives.

Consent may be withdrawn at any time by using the unsubscribe link included in communications or by contacting info@evol-italy.com.

4. Legal Basis for Processing

The processing of personal data is based on:

• Performance of a contract or pre-contractual measures;
• Compliance with legal obligations;
• The legitimate interests of the Data Controller;
• The data subject's explicit consent, where required.

5. Processing Methods

Personal data are processed using paper-based, electronic, and telematic tools, adopting appropriate security measures to prevent loss, unlawful use, unauthorized access, or disclosure.

6. Online Payments

Payments made through the website are processed by specialized third-party payment service providers. The Data Controller does not collect or store complete payment card details.

The information necessary to complete the transaction is transmitted directly to the payment service providers, including:

• PayPal.

Users are encouraged to review the privacy policies of the respective providers.

7. Newsletters and Email Marketing

The website uses the Brevo platform to manage newsletters and commercial communications. The user's email address and any additional information provided will be processed exclusively for sending the requested communications and will be retained until consent is withdrawn.

8. Analytics and Statistics

The website uses Google Analytics and similar tools to collect aggregated statistical data and analyze website usage. Such tools are used in accordance with the preferences expressed by users through the website's cookie consent management system.

9. Disclosure of Personal Data

Personal data may be disclosed to:

• IT service and hosting providers;
• Couriers and shipping companies;
• Tax and accounting consultants;
• Payment service providers;
• Email marketing service providers;
• Public authorities when required by law.

Personal data will not be disclosed publicly or sold to third parties.

10. Transfer of Data Outside the EU

Some service providers used by the website may process personal data outside the European Economic Area (EEA).

In such cases, data transfers will be carried out in compliance with Articles 44 et seq. of the GDPR and through appropriate safeguards required by applicable legislation.

11. Data Retention Period

Personal data will be retained for the time necessary to achieve the purposes described above and, in any case:

• Order-related data: 10 years;
• Invoicing and accounting data: 10 years;
• Data collected through the contact form: up to 24 months;
• Data processed for marketing purposes: until consent is withdrawn.

12. Data Subject Rights

Users may exercise at any time the rights provided for under Articles 15–22 of the GDPR, including:

• Right of access;
• Right to rectification;
• Right to erasure ("right to be forgotten");
• Right to restriction of processing;
• Right to data portability;
• Right to object to processing;
• Right to withdraw consent.

Requests may be submitted to: info@evol-italy.com.

13. Complaint to the Supervisory Authority

If a user believes that the processing of their personal data violates applicable data protection laws, they have the right to lodge a complaint with the competent Data Protection Supervisory Authority.

14. Changes to This Privacy Policy

This Privacy Policy may be updated at any time. Any changes will be published on this page, indicating the date of the latest update.