Free shipping on all orders
• Free shipping on all orders • Fast delivery • Made in Italy • Polarized lenses • Secure online payment • Easy returns • • Free shipping on all orders • Fast delivery • Made in Italy • Polarized lenses • Secure online payment • Easy returns
The protection of your personal data is very important to us. We therefore process your data exclusively on the basis of the legal provisions (GDPR, TKG). In this privacy policy, we inform you about the most important aspects of data processing on our website.
If you contact us via form on the website or by email, the data you provide will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent.
Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner stores metadata such as IP addresses, timestamps, browser information, and access logs as part of their hosting service.
This data processing is based on our legitimate interest in a secure and efficient website operation pursuant to Art. 6(1)(f) GDPR.
When you visit this website, server log files are automatically recorded. These include:
This data is not linked to specific individuals and is used for technical and security purposes.
Our website uses cookies, which are small text files stored on your device via your browser. They do not harm your device.
We use cookies to make our website user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit.
You can configure your browser to inform you about the use of cookies and allow them only in specific cases. Disabling cookies may limit the functionality of this website.
With your consent we use Google Analytics 4 (Google Ireland Ltd.) and Hotjar (Hotjar Ltd.) to understand how the website is used, and the Meta Pixel and Meta Conversions API (Meta Platforms Ireland Ltd.) to measure our advertising. For purchases, the Conversions API receives the order value, the products and hashed contact data (e.g. e-mail address) directly from our server. Legal basis: your consent, Art. 6(1)(a) GDPR.
You can withdraw your consent at any time under “Cookie settings” in the footer. Payments are processed by Stripe and PayPal, which use cookies to prevent fraud (Art. 6(1)(b) and (f) GDPR). Details: Cookie Policy.
If you subscribe to our newsletter, we process your email address and optionally other personal details for personalization. Subscription is based on a double opt-in process. You can unsubscribe at any time. Data processing is based on your consent (Art. 6(1)(a) GDPR).
To process payments, we use the following providers:
Provider: Klarna AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
Data such as name, address, payment details, and order information may be transmitted. More information can be found in Klarna’s privacy policy: https://www.klarna.com/en/privacy-policy/.
Provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
We transmit data such as your name, email, payment method, and IP address. More info: https://stripe.com/privacy.
We embed external services and content on our website, such as:
Loading this content may transmit your IP address to the respective providers.
Under the GDPR, you have the following rights:
oMedia doo
Hifzi Bjelevca br. 86
71000 Sarajevo
Bosnia and Herzegovina
Phone: +39 349 3470650
Email: info@navavenice.com
Authorized representative: Dzenan Abaz
We reserve the right to change this privacy policy at any time, especially to comply with new legal requirements or to reflect changes in our services.
1 Controller & Contact
| Controller (Art. 4 (7) GDPR) | NAVA d.o.o. Hifzi Bjelevca 86, 71000 Sarajevo, Bosnia‑Herzegovina |
| Managing Director | Dženan Abaz |
| Italian VAT ID | IT 03177420308 |
| E‑mail | privacy@navavenice.com |
| Tel. | +39 349 347 0650 |
| DSA Contact Point | info@navavenice.com — languages: English / German / Italian |
Data Protection Officer (DPO)
We are currently not legally obliged to appoint a DPO (Art. 37 GDPR). All privacy enquiries should nevertheless be directed to the address above.
2 Hosting & Server Log Files
Our shop is hosted on Hetzner Online GmbH, Germany.
Hetzner processes “access logs” (IP address, timestamp, request URL, HTTP status, user‑agent, referrer) to secure and optimise the infrastructure.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in secure, stable operation).
Logs are deleted after 14 days unless needed as evidence.
3 Data We Process, Purposes & Legal Bases
3.1 Visit to the Website
| Data | Technical identifiers (see § 2) |
| Purpose | Display website, ensure IT security, detect abuse |
| Legal basis | Art. 6 (1)(f) GDPR |
3.2 Contact & Support Requests
| Data | Name, e‑mail, message content, order no. (optional) |
| Purpose | Respond to enquiries, customer care |
| Legal basis | Art. 6 (1)(b) GDPR (pre‑contractual) or Art. 6 (1)(f) GDPR (legitimate interest) |
| Retention | Deleted after 12 months unless legal retention applies |
3.3 Orders & Customer Accounts
| Data | Title, name, delivery & billing address, e‑mail, telephone (optional), ordered items, payment method, IP address, account credentials |
| Purpose | Contract fulfilment, shipping, returns, invoicing |
| Legal basis | Art. 6 (1)(b) GDPR |
| Retention | 10 years (tax/commercial law) |
3.4 Payments
| Provider | Data transmitted | Legal basis |
|---|---|---|
| Stripe Payments Europe Ltd., Ireland | Card token, amount, currency, billing data, device/IP | Art. 6 (1)(b) |
| Klarna AB, Sweden (Pay‑Now / Pay‑Later) | Contact & order data, payment history | Art. 6 (1)(b) + Art. 6 (1)(f) (fraud prevention) |
3.5 Newsletter (Double Opt‑In)
We send product updates, offers and brand stories only with your explicit consent (Art. 6 (1)(a) GDPR).
You may unsubscribe at any time via the link in every e‑mail.
3.6 Web Analytics & Marketing
| Category | Tools | Purpose | Legal basis |
|---|---|---|---|
| Statistics | Google Analytics 4, Hotjar | Audience measurement, UX optimisation | Consent Art. 6 (1)(a) |
| Marketing | Meta Pixel, Meta Conversions API, WooCommerce Order Attribution | Personalised ads & conversion tracking | Consent Art. 6 (1)(a) |
| Functional / External Media | YouTube, Vimeo, Google Maps, Instagram, Facebook plugins | Embedded content, spam defence | Consent Art. 6 (1)(a) or Art. 6 (1)(f) (security) |
No non‑essential cookies are set and no non‑essential services are loaded until you grant consent through our cookie banner.
You can change or withdraw consent at any time under “Cookie settings” in the footer.
4 Cookies & Similar Technologies
We categorise cookies as follows:
Essential – required for core functions (WooCommerce, Stripe, Klarna, PayPal, Polylang).
Statistics – help us understand site usage (Google Analytics, Hotjar).
Marketing – enable interest‑based advertising (Meta Pixel, Meta Conversions API).
External Media – display third‑party content (YouTube, Vimeo, Instagram, Google Maps, Facebook).
A full list (name, purpose, lifespan, provider) is available in our Cookie Policy.
5 Third‑Country Transfers
Some providers (e.g. Google, Meta, Stripe, PayPal) are located in the USA or other non‑EU states.
Transfers rely on:
the EU‑US Data Privacy Framework (if the provider is certified), or
the Standard Contractual Clauses (SCC) of the European Commission (Art. 46 GDPR), plus supplemental measures.
Copies of the SCC can be requested via info@navavenice.com.
6 Recipients & Processors
We share data only when necessary:
IT & hosting: Hetzner Online GmbH (processor)
Payment providers: Stripe, Klarna (separate controllers)
Logistics: DHL, UPS, Post AT, Poste Italiane (address & contact)
Marketing/analytics providers listed in § 3.6 (processors or independent controllers)
Professional advisers & authorities where legally required (Art. 6 (1)(c) GDPR)
All processors are bound by Art. 28 GDPR agreements.
7 Retention Periods
We store personal data only as long as required:
| Purpose | Retention |
|---|---|
| Contract & accounting | 10 years (Austrian BAO § 132, German AO §§ 147 ff., Italian DPR 600/1973) |
| Customer service correspondence | ≤ 12 months after last interaction |
| Marketing consents | Until withdrawal + 3 years (accountability) |
| Analytics data | 14 months (GA4 default) |
| Server logs | 14 days |
8 Your Rights (Art. 12–22 GDPR)
Access to your stored data
Rectification of inaccurate data
Erasure (“Right to be forgotten”)
Restriction of processing
Data portability
Objection to processing based on Art. 6 (1)(f) or to direct marketing
Withdrawal of consent at any time (affects future processing only)
Complaint to a supervisory authority – e.g.
Germany: Berliner Beauftragte für Datenschutz, Alt‑Moabit 59‑61, 10555 Berlin
Austria: Datenschutzbehörde, Barichgasse 40‑42, 1030 Wien
Italy: Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Roma
9 Automated Decision‑Making
We do not use automated decisions or profiling that produce legal effects pursuant to Art. 22 GDPR.
10 Data Security
All data in transit is protected by TLS 1.3 / SSL encryption. We apply state‑of‑the‑art organisational and technical measures (ISO 27001‑aligned) to prevent loss, misuse or unauthorised access.
11 Children
Our shop is not directed at persons under 16 years. We do not knowingly collect children’s data without parental consent (Art. 8 GDPR).
12 Online Dispute Resolution & Complaints
The EU ODR platform: https://ec.europa.eu/consumers/odr.
We are neither obliged nor willing to take part in consumer arbitration (§ 36 VSBG).
13 Changes to this Policy
We may update this Privacy Policy to reflect legal or operational changes. The current version is always available at navavenice.com/privacy.
If changes materially affect your rights, we will notify you via e‑mail or on our website.
