Privacy Policy

Human Raw is a brand in its start-up phase and has not yet been incorporated as a company. The data controller is:

• [To be completed: full name of the controller or company name]
• [To be completed: controller's address / registered office]
• [To be completed: VAT number (when available)]
• Email: humanraw.brand@gmail.com

No Data Protection Officer (DPO) has been appointed.

The website is hosted by Hostinger. As with any website, the hosting server may automatically record some technical data about each request in its access logs, including:

• the IP address of your device;
• date and time of the request;
• the resource or address (URL) requested;
• other technical information about the request.

In addition, to show the site in the right language, the server reads the preferred language set in your browser and, if present, the language preference cookie. This information is used only to choose between Italian and English and is not stored by the website.

Purpose: making the website available, keeping it working and secure, and detecting errors or abuse. Legal basis: the controller's legitimate interest in running the website securely (Art. 6(1)(f) GDPR).

Retention: logs are kept by Hostinger for [To be completed: log retention period stated by Hostinger].

We do not use these data to identify you, build profiles or for marketing purposes.

The website stores only two technical items on your device: your chosen language (cookie hr_locale) and the contents of your cart (browser local storage, key hr_cart_v1). The cart contains only the product code, size and quantity: no name, email, address or payment data.

The cart stays in your browser and is not saved on our servers. When you press the button to continue your purchase, the website sends only product, size and quantity to the server, to find the matching Vinted page; these data are not stored.

Details are in the Cookie Policy.

The website has no contact forms: it only shows our address humanraw.brand@gmail.com. If you choose to write to us, we process your email address, any name you provide and the content of your message, only to reply and handle your request.

Legal basis: pre-contractual steps taken at your request, if your message concerns a purchase (Art. 6(1)(b) GDPR); otherwise, our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR).

The mailbox is a Gmail account, so messages are handled through Google's email service, under Google's terms and privacy policy. We keep messages for as long as needed to handle your request and any related follow-up.

Please do not send unnecessary data, especially sensitive data (for example about your health).

Purchases are completed exclusively on Vinted. On the website you can choose the product and size and manage your cart; when you continue, you are taken to the product page on Vinted, just like following an ordinary link.

The website does not collect, and does not pass on to Vinted, personal data such as your name, email, shipping address or payment details. As with any link, your browser sends Vinted the usual technical browsing data (for example your IP address and the referring site).

Payment, shipping and order handling take place on Vinted, which processes data as an independent controller under its own terms and privacy policy.

The website contains plain links to our Instagram and TikTok profiles. There is no embedded content, share button, pixel or social widget: until you click these links, the website shares nothing with these platforms. If you open them, data processing is governed by the policies of Instagram (Meta) and TikTok.

• We do not use analytics, advertising pixels or profiling tools.
• We do not use third-party cookies.
• There is no active newsletter, registration, account or login.
• We do not collect payment data, card numbers, shipping addresses or Vinted order data through the website.
• We do not sell or hand over personal data to third parties and make no automated decisions about you.

Hostinger processes browsing data on our behalf as the hosting provider, under its Data Processing Addendum. Data-centre country: [To be completed: country of the Hostinger data centre].

Emails are handled through Gmail (Google), which may also process data outside the European Economic Area, with the safeguards described in its privacy policy.

Data may be disclosed to authorities only where required by law.

Within the limits of the GDPR (Arts. 15–22) you may request access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest.

To exercise your rights, write to humanraw.brand@gmail.com.

You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

We will update this policy if the way the website works changes, for example when new services are introduced. The date of the last update is shown at the top.