PRIVACY POLICY
Last updated: October 11, 2026
This information describes the ways in which gyfros processes the personal data of users who visit the site https://gyfros.com, purchase a product, create or use an account, access the Owner Area, manage one or more profiles associated with the gyfros tags, use the features of the service, or contact gyfros through the site.
The processing of personal data is carried out in compliance with Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian legislation regarding the protection of personal data.
1. DATA CONTROLLER
The Data Controller is:
gyfros di Giampaolo Carucci
Via di Vagno 13
74018 Palagianello (TA)
Italy
Website: https://gyfros.com
Email: info@gyfros.com
For any request regarding the protection of personal data or the exercise of the rights provided for by the GDPR, you can contact the Data Controller at the e-mail address indicated above.
2. CATEGORIES OF DATA PROCESSED
Depending on the way the user uses the gyfros website and services, the following categories of data may be processed.
2.1 Identification and contact details
They may include, for example:
– name and surname;
– email address;
– phone number, when provided;
– billing address;
– shipping address;
– any additional data provided voluntarily by the user.
2.2 Account data
For the creation and management of the account and the Owner Area, the following data may be processed:
– email address;
– username, where provided by the system;
– credentials and technical information necessary for authentication;
– data related to the account and the associated profiles;
– information necessary for the password setting or resetting procedure;
– associations between accounts, dogs, and gyfros tags.
In case of forgotten password, the user can use the password reset function available on the login page. The system uses the email address associated with the account to send the link necessary to create a new password.
2.3 Order and purchase data
When a purchase is made, the following data may be processed:
– products purchased;
– selected size or variant;
– number and status of the order;
– amounts;
– billing data;
– shipping data;
– information necessary for the management, execution, assistance and documentation of the order;
– information necessary to associate the purchased product with its corresponding profile and tag gyfros.
2.4 Dog-related data
The user can create and update one or more profiles associated with their dogs.
This information may include:
– name of the dog;
– photograph;
– identifying information;
– microchip number, when provided;
– age, sex, size and other characteristics;
– reproductive status;
– health information;
– conditions or pathologies;
– therapies or medications in use;
– allergies;
– prophylaxis;
– notes considered useful by the owner;
– information related to the management of the dog;
– other information voluntarily entered in the profile.
Information regarding the health status of the dog does not, per se, constitute “data relating to the health” of a natural person within the meaning of Article 9 of the GDPR.
However, such information may be linked to the account and the personal data of the owner and is therefore managed within the security measures provided for the service.
2.5 Contact details of the owner, emergency contact or veterinarian
The owner can add the following information to the profile:
– their own contact details;
– the contact details of a second or emergency contact;
– the contact details of a veterinarian or another designated person.
When users enter personal data relating to third parties, they confirm that they are authorized to provide such data for the purposes of the service and undertake, where necessary, to inform those parties about how their data will be used.
2.6 Data submitted through contact forms
The site uses forms created using Contact Form 7.
When a user submits a request, the following can be processed:
– name;
– email address;
– telephone number, if provided;
– content of the message;
– other data voluntarily entered.
Communications are sent to info@gyfros.com.
The forms can be used for requests for information, assistance, or issues related to accounts, orders, profiles, or tags. The normal password retrieval process, however, takes place through the “Forgot password?” function available in the login area.
The user is invited not to enter information in the forms that is not necessary in relation to the request made.
2.7 Technical browsing data
During the use of the site, the computer systems, hosting services and technical tools used may automatically process some data necessary for the internet communication, the functioning and the security of the site.
Such data may include, for example:
– IP address;
– information related to the browser and the device;
– technical information related to the request made;
– date and time of the requests;
– requested pages;
– security and system logs;
– any technical data necessary to prevent abuse or malfunctions.
This information can be used to enable the functioning of the site, ensure the security of the systems, diagnose errors and prevent illegal use.
Further navigation data may be processed, with consent where required, through statistical or marketing tools described in this privacy policy and the Cookie Policy.
2.8 Transactional emails and service communications
gyfros uses the user’s email address to send communications necessary for the management of the account, the purchase, and the service.
Such communications may include, for example:
– communications regarding the creation of the account;
– links or instructions for setting the password;
– confirmations and updates regarding orders;
– communications necessary for the management of the profile and the purchased service;
– messages regarding the resetting of the password;
– functional notifications provided by the service, including any notifications related to the opening of the public profile associated with the tag;
– support or security communications.
Such messages are transactional or service-related in nature and do not constitute newsletters or periodic promotional communications.
3. OPERATION OF THE TAG AND THE PUBLIC PROFILE
Each gyfros tag is associated with a specific profile.
Scanning the QR code allows you to open a public page without the need for the person scanning it to install an application or create an account.
The owner determines what information to make available on the public page, within the limits of the functionality offered by the service.
Information that is not filled in or made available by the owner is not displayed in the public profile.
The owner can create, modify and update the profile information through their Owner Area.
4. SCANNING THE QR CODE AND ACCESSING THE PUBLIC PROFILE
In the current configuration of the service, the QR code functionality is not used by gyfros to:
– determine, via GPS, the geographical location of the person scanning the QR code;
– automatically create a personal profile of the person scanning the QR code;
– directly identify the person scanning the QR code solely through the QR code.
Normal technical logs generated by the server and the hosting infrastructure remain possible for operational, security, and abuse prevention purposes.
The public page opened via the QR code is part of the gyfros.com website. Therefore, like the other pages of the site, it may use cookies or statistical and marketing technologies exclusively in accordance with applicable settings and, when requested, based on the consent preferences expressed by the visitor through the cookie banner.
The possible use of analytics or marketing tools on the public page does not constitute a geolocation function of the tag and does not allow gyfros to know, through GPS, the physical location of the dog or the person viewing the profile.
5. PURPOSES OF PROCESSING AND LEGAL BASES
5.1 Management of the account and gyfros services
Purposes:
– create and manage the account;
– allow the setting and resetting of the password;
– associate one or more dogs and tags to the account;
– allow the management of the profiles;
– allow access to the Owner Area;
– allow the use of the service’s features.
Legal basis:
Art. 6, para. 1, letter b) GDPR – execution of a contract or pre-contractual measures requested by the data subject.
5.2 Management of purchases and orders
Purposes:
– acquire and manage orders;
– process purchase requests;
– manage payment, confirmation, assistance and shipping;
– associate the purchased product with the corresponding digital service;
– provide communications related to the order.
Legal basis:
Art. 6, para. 1, letter b) GDPR – execution of the contract.
5.3 Tax, accounting and legal obligations
The data may be processed for:
– tax compliance;
– accounting documentation;
– administrative obligations;
– management of any complaints;
– compliance with obligations stipulated by law.
Legal basis:
Art. 6, para. 1, letter c) GDPR – fulfillment of a legal obligation.
5.4 Management of the dog's profile and the information made available via QR
The data is processed to allow the owner to create, modify and manage the profile associated with the gyfros tag and to make the selected information available via QR code.
Legal basis:
Art. 6, par. 1, letter b) GDPR – execution of the service requested by the user.
5.5 Assistance and communications with the user
The data may be processed to:
– respond to requests submitted through the website;
– provide assistance;
– manage technical reports;
– solve problems related to accounts, profiles, orders or tags.
Legal bases:
Art. 6, para. 1, letter b) GDPR when the communication concerns the service or a contractual relationship;
Art. 6, para. 1, letter f) GDPR when the processing is necessary for the legitimate interest of the Owner to provide assistance, properly manage requests and protect its service.
5.6 Security, prevention of abuse and technical functioning
Technical data may be processed to:
– ensure the security of the website;
– prevent unauthorized access;
– detect anomalous or abusive uses;
– diagnose errors;
– ensure the availability and integrity of the systems.
Legal basis:
Art. 6, para. 1, letter f) GDPR – legitimate interest of the Data Controller in the security and proper functioning of its systems.
5.7 Statistics, analytics and measurement of site usage
With your prior consent, when required by law, gyfros may use statistical tools to understand how the site is used, measure its performance, analyze the pages visited, and improve the service.
Legal basis:
Art. 6, para. 1, letter a) GDPR – consent.
5.8 Marketing, advertising and conversion measurement
With your prior consent, gyfros may use marketing and advertising measurement technologies to evaluate the effectiveness of campaigns, measure certain actions taken on the site, and support advertising or remarketing activities on the platforms used.
Legal basis:
Art. 6, para. 1, letter a) GDPR – consent.
The user can refuse or revoke consent through the cookie preferences management system available on the website.
5.9 Transactional emails and communications necessary for the service
The email address can be used to send communications necessary for the creation and management of the account, the management of the order, security, the resetting of the password, and the use of the gyfros features.
Legal basis:
Art. 6, para. 1, letter b) GDPR – execution of the contract or provision of the requested service.
6. PROVISION OF DATA
The provision of the data necessary for the conclusion of a purchase, the creation of an account or the provision of the service is necessary in order to be able to use the related functionalities.
Failure to provide such data may make it impossible:
– complete an order;
– create or manage an account;
– associate a tag;
– use certain features of the profile.
The provision of much of the information relating to the dog is optional.
The owner can decide which information to compile and, within the limits set by the system, which to make publicly available.
Consent for statistical or marketing cookies is optional. Refusing these technologies does not prevent the use of the essential features of the site.
7. VISIBILITY OF THE PUBLIC PROFILE
The public page associated with the QR code is intended to make available the information selected by the owner.
The owner is responsible for the information they choose to make publicly accessible through that page.
gyfros adopts a logic aimed exclusively at displaying the information enabled or published by the user.
The private account information and profile management features are not accessible through the public QR code alone.
8. PAYMENTS
Payments available on the website can be made via:
– PayPal;
– payment cards;
– Google Pay;
– other methods that may be made available through the payment system integrated into the website.
The technical processing of certain payments is carried out through WooPayments and/or the Stripe infrastructure, according to the configuration actually active at the time of purchase.
The data required to process payments is handled by the respective providers.
gyfros receives the information necessary to confirm the outcome of the transaction and manage the order, but does not receive or retain the user’s complete payment card details.
For more information about the processing carried out by the payment providers, please refer to their respective privacy notices.
9. SHIPPING
gyfros uses Packlink to manage shipments.
The data necessary for delivery may be communicated to Packlink and the carriers used through this service, limited to what is necessary for:
– prepare the shipment;
– carry out the delivery;
– manage tracking;
– resolve any issues relating to transportation or delivery.
The legal basis is the execution of the contract pursuant to Article 6, paragraph 1, letter b) of the GDPR.
10. TECHNICAL SERVICE PROVIDERS AND DATA RECIPIENTS
Personal data may be processed, within the limits necessary for the respective activities, by technical and professional service providers used by gyfros.
The categories of recipients and service providers involved may include:
– hosting and technical infrastructure providers;
– email service providers;
– payment service providers;
– shipping service providers;
– analytics and measurement service providers;
– providers of advertising and marketing tools, with prior consent when requested;
– authorized developers, technicians and maintainers;
– providers of information technology services;
– administrative, tax or legal consultants, if necessary;
– public authorities in the cases provided for by law.
The site currently uses, among others, tools and platforms such as:
– SiteGround, for hosting and infrastructure services;
– WordPress, as a website management platform;
– WooCommerce, for e-commerce functionality;
– Elementor, for building and managing pages;
– Contact Form 7, for managing contact forms;
– TranslatePress, for multilingual functionality;
– Complianz, for managing cookie consent and the Cookie Policy;
– WP Consent API, for the technical communication of consent preferences between compatible plugins;
– Google Site Kit, for the integration and management of Google services;
– Google Analytics 4, for statistics and analysis of site usage, with prior consent;
– Google Tag Manager, for the technical management of tags and related tools;
– Google Search Console and PageSpeed Insights, for technical analysis, indexing and site performance;
– Meta for WooCommerce, Meta Pixel and Conversions API, for cataloging, measurement and marketing functionality, within the limits of applicable purposes and consent;
– PayPal and WooPayments/Stripe, for the management and processing of payments;
– Packlink, for the management of shipments.
The inclusion of software or a service in this list does not necessarily mean that the relevant provider independently receives all the personal data processed through the website.
Access to and disclosure of data are limited to what is necessary for the function actually performed and the configuration of the services used.
11. DATA PROCESSORS
Where required by the GDPR, providers that process personal data on behalf of gyfros act as data processors pursuant to Article 28 of the GDPR.
For certain activities, some providers may also act as independent data controllers, in accordance with their respective terms and privacy policies.
gyfros selects appropriate providers and, where required, governs the relevant data processing activities through the contractual instruments required by applicable law.
12. DATA TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA
Some suppliers used by gyfros, including technology providers belonging to international groups such as Google and Meta, may have companies, infrastructures or subcontractors located outside the European Economic Area.
When this involves the transfer of personal data to a third country, the transfer is carried out in compliance with Articles 44 et seq. of the GDPR.
Depending on the provider and the destination country, the following safeguards may be used:
– adequacy decisions adopted by the European Commission;
– other applicable adequacy mechanisms;
– standard contractual clauses approved by the European Commission;
– additional guarantees provided for by the applicable regulations.
The user can request more information by contacting info@gyfros.com.
13. DATA RETENTION
Personal data is retained for no longer than necessary for the purposes for which it was collected.
13.1 Account and profile data
Account and profile data is retained for the duration of the service.
The user may request the deletion of their account.
13.2 Data related to orders
Data relating to purchases, invoicing and administrative documentation may be retained for the periods stipulated by applicable fiscal, accounting and civil law regulations.
Deletion of the account does not necessarily result in the immediate deletion of data that must be retained to comply with legal obligations or protect gyfros’s rights.
13.3 Communications and support requests
Communications are kept for the time necessary to manage the request and, when necessary, to document the relationship or protect any rights.
13.4 Technical and log data
Technical logs are kept according to timeframes compatible with the security, maintenance, and operation requirements of the infrastructure, and according to the policies applied by the technical providers used.
13.5 Analytics and marketing data
The data processed through statistical or marketing tools is stored according to the settings configured on the relevant services and according to the retention periods stipulated by the respective providers, without prejudice to the user’s right to revoke their consent for processing based on consent.
14. DELETION OF THE ACCOUNT AND ASSOCIATED PROFILES
The user may request the deletion of their account or associated profiles by writing to:
info@gyfros.com
Before proceeding, gyfros may take reasonable steps to verify the identity of the requester and prevent unauthorized deletions.
The deletion request applies only to data that gyfros is not required to retain under a legal obligation or another valid legal basis.
15. SECURITY
gyfros implements technical and organisational measures reasonably appropriate to the nature of the data processed in order to protect personal data against:
– loss;
– destruction;
– unauthorized access;
– unauthorized disclosure;
– alteration;
– unlawful use.
However, no computer system can guarantee an absolute level of security.
16. COOKIES, SIMILAR TECHNOLOGIES AND MANAGEMENT OF CONSENT
The site uses cookies and similar technologies.
The categories used may include:
– cookies and functional technologies, necessary for the operation of the website and the requested services;
– cookies and statistical technologies, used with prior consent when requested;
– cookies and marketing technologies, used with prior consent.
gyfros uses Complianz as its consent management system.
For integration with Google services, Google Consent Mode and the WP Consent API are also used, allowing compatible components to receive the preferences expressed by the user.
The user can:
– accept the cookies and optional technologies;
– reject them;
– select the individual categories available;
– subsequently modify their preferences through the “Manage consent” function.
Refusing statistical or marketing cookies does not prevent the use of the website’s strictly necessary features.
Detailed information regarding the categories of cookies, the purposes, the services that use them, the duration and the methods for managing consent can be found in the Cookie Policy published on the website.
17. NEWSLETTER AND PROMOTIONAL COMMUNICATIONS
As of the date of updating this information, gyfros does not use a newsletter and does not send periodic promotional emails through the website.
The emails necessary for creating and managing the account, placing orders, resetting the password, security, or the operation of the service are transactional communications and do not constitute direct marketing.
If newsletters, periodic commercial communications or other direct email marketing tools are introduced in the future, this Privacy Policy will be updated and, where required, specific consent will be obtained.
18. ANALYTICS, ADVERTISING AND MEASUREMENT
18.1 Google Analytics 4
The site uses Google Analytics 4 (“GA4”), a service provided by Google, to obtain statistical information about site usage.
GA4 may process, among other things:
– information related to the pages visited and the interactions carried out;
– data related to sessions;
– information about the browser and the device;
– approximate geographic information;
– technical identifiers or pseudonyms associated with Analytics cookies, when allowed.
Google Analytics may use the IP address during the technical collection phase for purposes such as routing and the approximate determination of the geographical area. According to Google’s description of Google Analytics 4, IP addresses are not logged or stored by Analytics for users in the European Union.
On the gyfros website, the use of Analytics for visitors subject to the consent system is governed by Google Consent Mode, the WP Consent API, and Complianz.
The processing for statistical purposes takes place based on the user’s consent when required.
18.2 Google Site Kit and Google Tag Manager
The site uses Google Site Kit to integrate and manage certain Google services linked to the site.
Google Tag Manager is also used for the technical management of tags and related tools.
Google Tag Manager primarily serves as a tag management and distribution tool. Any data processing performed by the tools loaded through the system depends on the individual services activated and the corresponding consent settings.
18.3 Meta Pixel, Meta for WooCommerce, and the Conversions API
The site uses the Meta for WooCommerce integration linked to the Meta services.
The integration includes the Meta Pixel and can use the Conversions API to transmit to Meta events related to site usage and conversions, also through server-side communication.
Depending on the actions performed and the active configuration, the events may include, for example:
– page view;
– product view;
– adding a product to the cart;
– initiation of checkout;
– purchase;
– other interactions useful for measuring campaigns.
The data associated with these events may include technical information about the browser or device, visited URLs, Meta technical identifiers or cookies, event information, and conversion data within the limits necessary for measurement and configuration of the integration.
gyfros does not use the Meta Pixel to collect complete payment card details.
The use of Meta Pixel and the related marketing tools is subject to consent when required by applicable regulations.
The information may be processed by Meta Platforms Ireland Limited and/or by other companies of the Meta group in accordance with their respective terms and privacy policies.
18.4 Withdrawal of consent
The user can refuse or revoke at any time the consent regarding the Statistical and Marketing categories using the consent management function available on the website.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
19. AUTOMATED DECISION-MAKING
gyfros currently does not use personal data to make decisions based solely on automated processing that produce legal effects or have a similarly significant impact on the data subject pursuant to Article 22 of the GDPR.
The use of statistical or advertising tools provided by third parties does not involve gyfros making automated individual decisions concerning the user within the meaning of Article 22 of the GDPR.
20. RIGHTS OF THE DATA SUBJECT
In the circumstances and within the limits provided by the GDPR, the data subject may exercise the following rights:
– the right to access their personal data;
– the right to have inaccurate personal data rectified;
– the right to have incomplete data completed;
– the right to erasure of personal data (“right to be forgotten”), where applicable;
– the right to restriction of processing;
– the right to object to processing, where applicable;
– the right to data portability, where applicable;
– the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
– the right not to be subject, in the circumstances provided by law, to decisions based solely on automated processing;
To exercise their rights, the data subject may write to:
info@gyfros.com
gyfros may request the information reasonably necessary to verify the identity of the requester.
21. RIGHT TO LODGE A COMPLAINT
Anyone who believes that the processing of their personal data infringes applicable data protection law has the right to lodge a complaint with the competent supervisory authority.
In Italy, the competent supervisory authority is:
Italian Data Protection Authority (Garante per la protezione dei dati personali)
https://www.garanteprivacy.it
This is without prejudice to the right to seek any other remedy available under applicable law.
22. THIRD-PARTY DATA PROVIDED BY THE USER
When the user enters personal data relating to other individuals in their profile, this may include, for example:
– an emergency contact;
– a veterinarian;
– another designated contact.
The user must ensure that they are legally entitled to provide such data to gyfros and, where applicable, to make it available through the public profile.
The user is also responsible for the accuracy of the information provided.
23. MINORS
gyfros services are primarily intended for individuals who have the legal capacity to purchase products and manage an account.
If personal data relating to minors is processed, the specific provisions established by applicable law will apply.
24. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated as a result of:
– changes in applicable law;
– changes in the services offered;
– introduction of new features;
– use of new suppliers;
– introduction or modification of analytics, advertising or marketing tools;
– changes to the technical architecture of the website.
The updated version will be published on this page together with the date of the latest revision.
In the event of significant changes, gyfros may also use any additional communication methods considered appropriate.
25. CONTACT DETAILS
For questions concerning this Privacy Policy or the processing of personal data:
gyfros di Giampaolo Carucci
Via di Vagno 13
74018 Palagianello (TA)
Italy
Email: info@gyfros.com
Website: https://gyfros.com
