Privacy Policy & Data Protection Notice
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) – Last updated: 2026
Welcome to polar.it (the “Site”), the official e-commerce store for Polar sunglasses and optical eyewear. Protecting your privacy and ensuring the security of your personal data is our utmost priority. This privacy notice explains what personal information we collect, why and how we process it, and how you can exercise your legal rights under European data protection laws.
1. Data Controller
Registered Office:Via Lorenzo Mascheroni 14, 20145 Milano (MI), Italia
P.IVA / VAT: IT00816700256 – R.E.A. Milano: MI-2780877
Email for Privacy Rights & Data Protection:revert@revert.it
2. Categories of Personal Data Collected
- Purchase and Order Data:Name, surname, shipping and billing address, email address, phone number, payment method details (processed securely by certified payment gateways like Shopify Payments, Stripe, PayPal; we never store your full credit card number).
- Customer Account Data:Login credentials (email, encrypted password), order history, wishlist and saved addresses.
- Technical and Browsing Data:Device characteristics, browser user agent, operating system, and masked IP address (anonymized to the last octet for privacy minimization) to ensure security and prevent fraudulent transactions.
- Cookies & Consent Record (Proof of Consent):Unique pseudonymous consent identifiers (UUID), timestamps, and category choices (Analytics, Marketing, Preferences) stored to legally verify consent compliance under Art. 7 GDPR.
- Newsletter & Marketing Communications:Email address provided willingly for discount codes, promotions, and new collection launches via Mailchimp/Shopify Email.
3. Purposes and Legal Bases of Processing
| Processing Purpose | Legal Basis (GDPR) |
|---|---|
| Order processing, eyewear fulfillment, shipping and customer support | Performance of a contract (Art. 6.1.b) |
| Tax compliance, invoicing, and accounting records | Legal obligation (Art. 6.1.c) |
| Store security, fraud prevention, bot defense (Cloudflare) | Legitimate interest (Art. 6.1.f) |
| Anonymous statistical traffic measurement (Google Analytics 4 with masked IP, Shopify Analytics) | Consent (Art. 6.1.a & ePrivacy) |
| Personalized advertising & retargeting (Meta Pixel, Google Ads) | Explicit consent (Art. 6.1.a) |
| Promotional newsletters and exclusive discount codes | Consent (opt-in) with 1-click unsubscribe |
4. Data Recipients and International Transfers
Your data is strictly shared with selected partners necessary for providing our services: Shopify Inc. (e-commerce platform hosting), logistics couriers for delivery, payment processors, and certified technical service providers. Whenever data is processed outside the European Economic Area (EEA), transfers rely on European Commission Adequacy Decisions or Standard Contractual Clauses (SCC) ensuring equivalent GDPR protection.
5. Data Retention Periods
- Orders & Accounting:10 years from the date of purchase (mandatory legal requirement).
- Customer Account:Active until you request deletion.
- Newsletter & Marketing:Until consent revocation or unsubscription via the link in any email.
- Cookie Consents:12 months for granted consents, 6 months for rejections, or until local deletion.
6. Your GDPR Rights & The Right to Erasure / to Be Forgotten (Art. 15–22 GDPR)
As a data subject, you have the following rights guaranteed by Regulation (EU) 2016/679:
Right of Access (Art. 15)
Obtain confirmation of whether your data is being processed and receive a clear copy of it.
Right to Rectification (Art. 16)
Correct inaccurate details or complete incomplete information about you.
Right to Erasure / To Be Forgotten (Art. 17)
Request the total, permanent erasure of your personal data when no longer needed or if consent is withdrawn.
Right to Restriction (Art. 18)
Temporarily pause data processing under specific conditions established by law.
Right to Data Portability (Art. 20)
Receive your data in a structured, commonly used and machine-readable format.
Right to Object & Revoke (Art. 7 & 21)
Object to marketing processing or revoke previously granted consents with immediate effect.
Online Request Form: Personal Data & Right to Erasure / to Be Forgotten
Use this form to request access, rectification, or complete deletion of your account and personal data. Your request will be sent directly to our Privacy Team at revert@revert.it.
Your request will be handled free of charge and processed within 30 days as mandated by Article 12(3) GDPR. You also have the right to lodge a formal complaint with the Italian Data Protection Authority (www.garanteprivacy.it).