Privacy policy


Last updated: 2 October 2026

This Privacy Policy describes how AEFFE Lab S.r.l., acting as the Data Controller, collects and processes the personal data of users who visit and use visionofsuper.com (the “Site”) and who make purchases through the Site.

This Privacy Policy is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable data protection legislation.

1. DATA CONTROLLER

The Data Controller of personal data is:

AEFFE Lab S.r.l.
Via Capestrano, 10
66100 Chieti (CH)
Italy
VAT No. 02479750693

For any request concerning the processing of personal data or the exercise of your rights, you may contact the Data Controller at:

visionofsuper@aeffelab.com

or through the Contact Form available on the Site.

2. WHAT PERSONAL DATA WE COLLECT

When you use the Site, we may collect and process the following categories of personal data:

Identification and Contact Data

This may include, by way of example:

  • first and last name;

  • billing and shipping address;

  • email address;

  • telephone number;

  • any other information provided by the user when making a purchase or communicating with Customer Service.

Order and Purchase Data

When you place an order, we may process information relating to:

  • Products purchased;

  • order number and order details;

  • shipping and billing address;

  • order amount;

  • order and delivery status;

  • return or exchange requests;

  • communications relating to the order.

Payment Data

Payments made through the Site are processed through Shopify Payments and the payment methods available at checkout.

The Data Controller does not directly access or store full payment card details. Such data is processed by the relevant payment service providers in accordance with their respective privacy policies.

Account Data

If you create an account on the Site, we may process the data necessary to create and manage your account, as well as information relating to orders associated with your account.

Data Provided Through Forms and Communications

We may process information voluntarily provided by users through:

  • the Contact Form;

  • the Return Request Form;

  • exchange requests;

  • customer support requests;

  • any other communications sent to the Data Controller.

3. PURPOSES OF PROCESSING

Personal data may be processed for the following purposes:

A. Order and Purchase Management

For the purpose of:

  • receiving and managing orders;

  • processing payments;

  • managing invoicing and tax documentation;

  • arranging the preparation and shipment of orders;

  • communicating with users regarding their orders;

  • managing returns, exchanges, refunds and customer support requests.

The legal basis is the performance of the contract or the taking of pre-contractual steps at the request of the data subject and, where applicable, compliance with legal obligations.

B. Shipping and Logistics Management

The data necessary to deliver an order may be shared with parties responsible for logistics and shipping, including the warehouse responsible for preparing orders and the relevant carriers.

The legal basis is the performance of the contract.

C. Management of Returns and Exchanges

Order and Product data may be processed to manage requests for returns, exchanges and refunds and to carry out the relevant checks.

The legal basis is the performance of the contract and, where applicable, compliance with legal obligations.

D. Customer Support and Communications

Personal data may be used to respond to requests submitted by users through the Site or other customer support channels and to provide assistance relating to purchases.

The legal basis is the performance of the contract, compliance with legal obligations or the legitimate interest of the Data Controller, depending on the nature of the request.

E. Compliance with Legal Obligations

Personal data may be processed to comply with applicable legal obligations, including tax, accounting and administrative obligations and requirements concerning the retention of purchase-related documentation.

The legal basis is compliance with a legal obligation.

F. Security, Fraud Prevention and Protection of Rights

Personal data may be processed to ensure the security of the Site, prevent fraudulent or unlawful activities, identify any anomalies in transactions and protect the rights of the Data Controller.

The legal basis is the legitimate interest of the Data Controller and, where applicable, compliance with legal obligations.

G. Site Analytics and Improvement

Where consent is required, we may use analytics tools, including Google Analytics, to understand how users interact with the Site, analyse page performance and improve the browsing experience.

Where processing requires consent, the legal basis is the consent of the data subject.

H. Marketing and Advertising

Where consent is required, we may use tools provided by Google Ads and Meta to measure advertising campaigns, assess the effectiveness of advertisements and, where supported by the tools used and permitted by applicable law, display personalised advertising communications or content.

Where required, the legal basis is the consent of the data subject.

Consent may be withdrawn at any time through the settings available in the cookie preference management system or through the methods indicated in this Privacy Policy.

4. COOKIES AND TRACKING TECHNOLOGIES

The Site uses cookies and other technical tools necessary for its proper operation and, where consent is required, analytics and marketing tools.

In particular, the Site may use tools provided by:

  • Shopify, for the operation of the platform and management of the online store;

  • Google Analytics, for analytics and statistical purposes;

  • Google Ads, for measurement and marketing purposes;

  • Meta, for measurement and marketing purposes.

Analytics and marketing tools that are not necessary for the operation of the Site are used in accordance with the preferences expressed by the user and, where required by applicable law, only with the user's prior consent.

For further information about the cookies used and to modify your preferences, you may consult the Cookie Banner and the related preference management panel available on the Site.

5. DATA RECIPIENTS

Personal data may be disclosed, to the extent necessary for the purposes described above, to the following categories of recipients:

  • Shopify and its service providers;

  • payment service providers;

  • parties responsible for warehouse management and order preparation;

  • carriers and logistics providers;

  • IT and technology service providers;

  • customer support and communication service providers;

  • analytics service providers, including Google;

  • advertising and marketing service providers, including Google and Meta;

  • consultants and professional advisers of the Data Controller;

  • public authorities and parties t