Privacy Policy

1. Introduction

This Privacy Policy describes how the personal data of users who visit and use the website https://atryk.com/ (“Website”) is processed, in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection laws.

2. Data Controller

The Data Controller is:

Atryk – Ziken Labs SRLS
Email: zikenlabs@gmail.com

For any request regarding the processing of personal data or the exercise of data protection rights, users may contact the Data Controller using the email address indicated above.

3. Personal Data Processed

While browsing the Website, certain technical data may be collected automatically, including:

IP address or technical data derived from it;
browser and device type;
operating system;
pages visited;
date, time and duration of the visit;
technical information relating to interactions with the Website.

The Website may also process data voluntarily provided by users through contact forms or other contact details available on the Website, such as name, email address, subject and message content.
In the event of a purchase, the Website may also process the data necessary to manage the order, including:

first and last name;
email address and contact details;
billing and shipping address;
products purchased and information relating to the order;
information necessary to manage payments, deliveries, returns and refunds.

Payment-related information may be processed directly by the payment service providers used by the Website, in accordance with their respective privacy policies.

4. Purposes and Legal Bases for Processing

Personal data may be processed for the following purposes:

ensuring the proper functioning, security and maintenance of the Website;
preventing misuse, anomalies or potentially harmful activities;
obtaining statistical information on the use of the Website and improving its content and performance;
managing and responding to requests submitted by users;
managing orders, payments, shipments, returns, refunds and customer support;
complying with administrative, tax, accounting and legal obligations related to purchases made through the Website.

Depending on the circumstances, the processing is based on:

the performance of a contract or pre-contractual measures requested by the user;
compliance with legal obligations;
the legitimate interest of the Data Controller in ensuring the proper functioning and security of the Website;
the user’s consent, where required by applicable law.

5. Data Retention

Personal data is retained only for the period necessary to achieve the purposes for which it was collected.
Data relating to orders and transactions may be retained for the period required by applicable tax, accounting and administrative regulations.
Data relating to requests submitted by users is retained for the time necessary to manage such requests and any subsequent customer relationship.
Technical and statistical data is retained according to the configurations and retention periods provided by the services used by the Website and, in any case, in accordance with the principles of necessity and proportionality.

6. Disclosure of Personal Data

Personal data may be processed or disclosed, where necessary, to third parties providing services required for the operation of the Website, including:

hosting and IT service providers;
e-commerce platform and related technical service providers;
payment service providers;
couriers and delivery service providers;
analytics and security service providers;
administrative, tax or professional advisers, where necessary.

Where applicable, these parties may act as data processors on behalf of the Data Controller or as independent
data controllers.
Personal data is not sold or transferred to third parties for commercial purposes.
Where certain service providers involve the transfer of personal data outside the European Economic Area, such transfers will be carried out in accordance with the safeguards required by the GDPR.

7. User Rights

Under the GDPR, users may exercise, where applicable, the following rights:

access to their personal data;
rectification of inaccurate personal data;
erasure of personal data;
restriction of processing;
objection to processing;
data portability;
withdrawal of consent previously given, without affecting the lawfulness of processing carried out before such withdrawal.

Requests may be sent to the email address of the Data Controller indicated in this Privacy Policy.
Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) if they believe that the processing of their personal data is in breach of applicable data protection laws.

8. Changes to this Privacy Policy

The Data Controller may periodically update this Privacy Policy to reflect changes in applicable laws, technologies or services used by the Website.
Any changes will be published on this page together with the relevant update date.
Last updated: 2 September 2026.