Privacy policy

Last updated: 6 November 2026

This Privacy Policy explains how Fifty Percent Group Srl, trading as VVENA ("VVENA", "we", "us"), collects and uses personal data when you visit vvena.it, buy from us, receive our emails or contact us. It is provided under Articles 13 and 14 of the EU General Data Protection Regulation 2016/679 ("GDPR") and Italian data protection law.

1. Who is responsible for your data

The data controller is:
Fifty Percent Group Srl
Via Don Bosco 11, 20139 Milano (MI), Italy
VAT number and tax code: IT14728410961
Email: care@vvena.it
Certified email (PEC): fiftypercentgroup@pec.it

For any question about this policy or your data, write to care@vvena.it.

2. The data we collect

  • Contact and order details: name, email address, phone number, billing and shipping address, the pieces you order, ring size, order history, returns and refunds.
  • Tax details needed to issue an invoice, where you request one, such as a VAT number or tax code.
  • Payment information: payments are handled by our payment providers. We do not see or store your full card details. We receive only confirmation of payment and limited details, such as the payment method and the last digits of the card.
  • Account information, if you create an account: login email, saved addresses and preferences.
  • Communications: messages you send us by email, on social media or through our forms, and our replies.
  • Browsing and device data: IP address, browser and device type, pages viewed, pieces viewed or added to the cart, and how you reached our site. Part of this is collected through cookies and similar technologies, described in section 7.
  • Email engagement data: whether our emails are delivered, opened and clicked.

We do not ask for special categories of personal data. Our services are not intended for anyone under 18.

3. Why we use your data and on what legal basis

  • To process and deliver your order, handle payment, shipping, returns, the right of withdrawal and the legal guarantee, and manage your account. Legal basis: performance of a contract with you (Art. 6(1)(b) GDPR).
  • To send service emails about your order, such as order confirmation, shipping updates and care guidance for your piece. Legal basis: performance of a contract.
  • To answer your questions and provide customer care. Legal basis: performance of a contract, or our legitimate interest in responding to you (Art. 6(1)(b) and (f)).
  • To meet our legal obligations, such as accounting, invoicing, tax records and responding to lawful requests from authorities. Legal basis: legal obligation (Art. 6(1)(c)).
  • To send marketing emails, such as our seasonal letters or a reminder if you leave pieces in your checkout, where you have agreed to receive them. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time. If you have bought from us, we may also write to you about pieces similar to those you purchased, as allowed by Article 130(4) of the Italian Privacy Code. You can object at any time, free of charge, through the link in every email.
  • To understand how our site is used and to show you relevant advertising on platforms such as Instagram, Facebook and Google, and measure its results. Legal basis: your consent, given through our cookie banner (Art. 6(1)(a)).
  • To keep our site secure and prevent fraud and misuse. Legal basis: our legitimate interest (Art. 6(1)(f)).

The data needed to place an order is required to complete it. Everything else is optional.

4. Advertising and measurement

Only with your consent, we use:

  • Meta Pixel and Conversions API (Meta Platforms Ireland Limited), to measure our ads on Facebook and Instagram and to show our ads to people who have visited our site. When you view a piece, add it to your cart or complete a purchase, these events may be sent to Meta both from your browser and from our store's servers, together with details such as your email, phone number or address in hashed (encrypted) form, so that Meta can match them to an account. For the collection and transmission of this data, we and Meta act as joint controllers. Meta's own processing is described in its Privacy Policy.
  • Google Analytics, Google Ads and Google Merchant Center (Google Ireland Limited), to understand how visitors use our site, measure our ads and show our pieces on Google. We use Google Consent Mode, so Google tags follow the choices you make in our cookie banner. Google Analytics data is kept for 14 months.
  • Audiences: we may create groups of past visitors or customers so that our ads reach them, or people with similar interests. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

5. Who we share your data with

We share data only with providers that help us run VVENA. They act on our instructions under contracts that require them to protect it (data processors), unless stated otherwise.

  • Shopify (Shopify International Limited, Ireland): our e-commerce platform and hosting. See also section 10.
  • Payment providers shown at checkout, such as Shopify Payments and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg), to process payments and prevent fraud. They act as independent controllers for their own legal obligations, and PayPal processes your data under its own Privacy Statement.
  • Couriers, such as DHL Express for the United Kingdom and Switzerland, to deliver your order. We share only the details needed for delivery.
  • Klaviyo (Klaviyo, Inc.), to send service and marketing emails.
  • Consentmo, to collect and record your cookie choices.
  • Meta and Google, as described in section 4.
  • Invoicing and accounting: our electronic invoicing software (Fatture in Cloud, by TeamSystem), the apps that connect it to our store, and our accountant.
  • Professional advisers and public authorities, where required by law or to protect our rights.

We do not sell your personal data.

6. Transfers outside the European Economic Area

Some providers, such as Google, Meta and Klaviyo, may process data in the United States. Where this happens, transfers rely on the EU-US Data Privacy Framework for certified companies and on the European Commission's Standard Contractual Clauses, with additional safeguards where needed.

7. Cookies

We use technical cookies that are necessary for the site to work, for example to keep pieces in your cart and complete checkout. These do not require consent.

Analytics and marketing cookies, and similar technologies such as pixels, are used only if you accept them in our cookie banner. You can accept all, reject all or choose by category, and you can change your choice at any time through the cookie settings on our site. Rejecting them does not affect your ability to shop. The categories of cookies we use, their purpose and duration are shown in the cookie settings on our site.

8. How long we keep your data

  • Order, invoicing and accounting records: 10 years, as required by Italian law.
  • Account data: until you close your account.
  • Customer care messages: up to 24 months after your last contact, unless needed longer for a claim.
  • Marketing data: until you unsubscribe or withdraw your consent. We periodically remove contacts who have not engaged with our emails for a long time.
  • Google Analytics data: 14 months.
  • Cookie choices: as shown in the cookie settings on our site.

We may keep data longer where needed to establish, exercise or defend legal claims.

9. Your rights

Under the GDPR you have the right to:

  • access your data and receive a copy of it;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict how we use it;
  • receive it in a portable format;
  • object to processing based on our legitimate interest, and object at any time to direct marketing;
  • withdraw your consent at any time, without affecting processing carried out before.

To exercise these rights, write to care@vvena.it. We reply within one month and may ask you to confirm your identity.

If you believe your data is not handled lawfully, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.

10. Shopify

Our store runs on Shopify. To provide and improve its services, and for features such as fraud prevention and Shop Pay, Shopify may also process personal data as an independent controller, including data about your interactions with other Shopify stores. You can read how Shopify uses personal data in the Shopify Consumer Privacy Policy and exercise your rights through the Shopify Privacy Portal.

11. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. No system is completely secure, so please avoid sending sensitive information to us by unprotected channels.

12. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with its date. Where changes are significant, we will let you know by email or on the site.