Privacy policy
Privacy Policy
Last updated: 08/27/2026
This policy explains what personal data we collect when you visit airsoftmania.eu, place an order or contact us, why we collect it, on what legal basis, who we share it with, and what rights you have.
1. Who is responsible for your data
The data controller is:
VIKKIN S.R.L.S.
Contrada Ulmi 703, Frazione San Ciro-Ulmi-Filci, 91018 Salemi (TP), Italy
VAT number IT02846720817 — REA TP-201122
Email: help@airsoftmania.eu — PEC: vikkin@pec.it
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. For any question about this policy, write to help@airsoftmania.eu.
2. What we collect and why
| Data | Purpose | Legal basis | Retention |
| Name, billing and shipping address, email, telephone | Processing and delivering your order, handling returns and warranty claims | Performance of a contract — Art. 6(1)(b) GDPR | 10 years from the transaction, as required by Italian tax and accounting law |
| Order and invoice data, VAT data | Issuing invoices, accounting, VAT reporting including the EU One Stop Shop | Legal obligation — Art. 6(1)(c) GDPR | 10 years |
| Payment confirmation and partial card data | Collecting payment and preventing fraud. We never see or store your full card number | Contract — Art. 6(1)(b); legal obligation — Art. 6(1)(c) | 10 years for the transaction record |
| Account credentials, order history | Operating your customer account | Contract — Art. 6(1)(b) | Until you delete your account, then 10 years for order records only |
| Content of emails, chat and support tickets | Answering your enquiries and resolving complaints | Contract — Art. 6(1)(b); legitimate interest in responding to enquiries — Art. 6(1)(f) | 24 months from closure of the ticket |
| Email address for newsletters and back-in-stock alerts | Sending marketing communications and product alerts you asked for | Consent — Art. 6(1)(a); for existing customers, soft opt-in on similar products — Art. 130(4) Italian Privacy Code | Until you withdraw consent or unsubscribe, then 24 months in a suppression list |
| Product reviews you submit | Publishing reviews on product pages | Consent — Art. 6(1)(a) | Until you ask for removal |
| IP address, device and browser data, pages viewed, server and security logs | Keeping the site available and secure, blocking abusive automated traffic | Legitimate interest in the security of the service — Art. 6(1)(f) | 12 months |
| Analytics and advertising identifiers set by cookies | Measuring how the site is used and showing relevant advertising | Consent — Art. 6(1)(a), given through the cookie banner | As set out in the cookie banner; consent is renewed at least every 6 months |
| Proof of entitlement to hold an airsoft replica, where the law of the destination country requires one (in the Netherlands: NABV or ACA membership card, or an ontheffing) | Checking, before dispatch, that the replica is going to someone entitled to hold it | Legitimate interest in not supplying goods to a person who may not lawfully hold them — Art. 6(1)(f) | Deleted once the order has been dispatched; we keep only a note that the check was passed |
Providing the data marked as necessary for an order is a contractual requirement: without it we cannot conclude or perform the sale. All other data is optional.
3. Who we share your data with
We share your personal data only with the categories of recipients listed below, and only to the extent necessary. Recipients acting on our instructions are appointed as processors under Article 28 GDPR.
- Customer care and logistics coordination provider. Customer enquiries and shipment monitoring are handled on our behalf by Unity sp. z o.o., established in Poland, acting as our data processor under a written agreement. Its staff access your name, contact details, addresses, order and shipment data, and the content of your communications with support, on a least-privilege basis and solely to provide those services. They cannot issue refunds, change prices or export customer lists. All data is processed within the European Economic Area.
- Suppliers who dispatch the goods. Where an item is dispatched directly to you from one of our suppliers' warehouses in the European Union, we transmit your name, shipping address and telephone number so that the parcel can be prepared and handed to the carrier.
- Carriers. GLS and UPS, and the shipping platform we use to create labels and track parcels, receive your name, address, telephone number and email in order to deliver your order and keep you informed.
- Payment providers. Shopify Payments, PayPal, Klarna and, for certain markets, local payment providers. They act as independent controllers for the payment transaction and apply their own privacy policies.
- Platform and hosting. Shopify, which operates the store, and our content delivery and security provider, which filters abusive traffic before it reaches the site.
- Email, review and returns tools. The services we use to send transactional and marketing email, collect product reviews and manage the returns portal.
- Professional advisers and authorities. Our accountant, and tax, judicial or supervisory authorities where we are legally required to disclose data.
We do not sell your personal data and we do not disclose it for third parties' own marketing purposes.
4. Transfers outside the European Economic Area
Our processing takes place within the EEA. Some of our providers, in particular Shopify, may process data in third countries. Where that happens, transfers are covered by an adequacy decision of the European Commission or by the Standard Contractual Clauses adopted by the Commission, together with the additional safeguards required. You may request a copy of the safeguards in place by writing to help@airsoftmania.eu.
5. Cookies
We use technical cookies that are strictly necessary for the site to work — keeping your cart, your session and your language — which do not require consent. We also use analytics and marketing cookies, which are set only after you consent through the banner. You can change or withdraw your choices at any time through the cookie settings link in the footer. Refusing non-essential cookies does not prevent you from browsing or ordering.
6. Automated decision-making
Payment and fraud-prevention tools apply automated risk scoring to orders. An order flagged as high risk is reviewed by a person before any decision is taken; no legally significant decision about you is taken by automated means alone.
7. Your rights
Under Articles 15 to 22 GDPR you have the right to:
- obtain confirmation of whether we process your data, and a copy of it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased, where one of the grounds in Article 17 applies;
- have processing restricted, where one of the grounds in Article 18 applies;
- receive the data you gave us in a structured, machine-readable format and have it transmitted to another controller;
- object at any time to processing based on our legitimate interest, and to object at any time and without giving reasons to processing for direct marketing;
- withdraw any consent you have given, at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, write to help@airsoftmania.eu. We reply within one month, extendable by two further months for complex requests, and we will tell you if an extension applies. We may ask you for information needed to confirm your identity.
8. Complaints
If you believe we are processing your data unlawfully you may lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome, Italy — garanteprivacy.it), or with the supervisory authority of the EU country where you live or work. A list is available at edpb.europa.eu.
9. Children
This store is not directed at children. We do not knowingly collect data from anyone under 16. Certain products may only be sold to adults, or to persons meeting the age and licensing requirements applicable in their country. If you believe a child has provided us with personal data, write to help@airsoftmania.eu and we will delete it.
10. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, multi-factor authentication on administrative accounts, named individual accounts with least-privilege permissions, access logging and regular backups. No system can be guaranteed to be entirely secure; please do not send us confidential information through insecure channels.
11. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The current version is always published on this page with its date. Where changes are material we will inform you by email or through a notice on the site.