Privacy policy
Last updated: 20 September 2026
Notice provided pursuant to arts. 13 and 14 of Regulation (EU) 2016/679 (GDPR) to anyone who visits the site, makes a purchase or takes part in the referral programme.
1. Data controller
Redisup Srl, [da completare], VAT no. [da completare]. For anything concerning your data: info@redisup.it.
2. What data we process
- Data you give us: name, email, phone number, delivery address, order notes; password (stored only in non-reversible encrypted form) or Google identifier if you sign in with Google.
- Order data: products purchased, amounts, payment method and payment status. We do not process full card details: Stripe handles them.
- Referral programme: personal code, who invited you, clicks on your link, commissions; for payouts also your codice fiscale (Italian tax code), VAT number if any, residential address and IBAN.
- Technical data: IP address, server logs, technical cookies (see Cookie policy).
3. Why we process it and on what basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Managing orders, deliveries, returns and customer support | Performance of the contract (art. 6.1.b) | 10 years from the order (civil-law and tax obligations) |
| Creating and managing your account | Performance of the contract | Until the account is deleted |
| Referral programme: attributing orders, calculating and paying commissions, issuing receipts | Performance of the contract and tax obligations (art. 6.1.b and 6.1.c) | 10 years from the last payment |
| Invoicing and accounting requirements | Legal obligation (art. 6.1.c) | 10 years |
| Newsletter and offers by email | Consent (art. 6.1.a), which can be withdrawn at any time | Until withdrawn |
| Security, prevention of fraud and abuse | Legitimate interest (art. 6.1.f) | Logs: up to 12 months |
| Statistics and marketing through cookies | Consent given through the cookie banner | See Cookie policy |
Providing the data marked as mandatory is necessary to complete the purchase: without it we cannot fulfil the order.
4. Referral network: what other users see
The person who invited you (and the person who invited them) sees in their own area only your first name and the initial of your surname, the number of your orders and the commission arising from them. They do not see your email, address, phone number or the details of what you buy.
5. Who we share data with
Only with parties that help us provide the service, appointed as data processors where necessary:
- Google Cloud / Firebase (Google Ireland Ltd): site hosting, database in EU data centres (Netherlands), sign-in with Google;
- Stripe Payments Europe Ltd: card and PayPal payments;
- Couriers: name, address and phone number for delivery;
- tax and legal advisers, banks, public authorities when the law requires it.
We do not sell your data. Some providers may process data outside the European Economic Area: in that case the transfer takes place on the basis of adequacy decisions (e.g. the EU-US Data Privacy Framework) or standard contractual clauses.
6. Your rights
You can ask us at any time to access your data, rectify it, erase it, restrict its processing, receive it in a structured format (portability), object to processing based on legitimate interest and withdraw any consent you have given. Write to info@redisup.it: we reply within 30 days. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it).
7. Minors
The site is not intended for persons under 18 and we do not knowingly collect their data.
8. Automated decisions
We do not take decisions based solely on automated processing that produce legal effects on you. The calculation of commissions is automatic, but it can be verified and challenged by writing to us.
9. Updates
We may change this notice: the date at the top shows the latest revision. In the event of significant changes we will notify you by email or with a notice on the site.