Privacy Policy

Last Updated: 6 October 2026
Effective Date: 6 October 2026

This Privacy Policy explains how personal data is collected, used, stored and disclosed in connection with the EXO X website, products and services, including sales, rentals, demonstrations, customer support and shipping services.

EXO X is operated by:

Vivishare di Monica Visintainer
Via Diaz 6B
38023 Cles (TN)
Italy
VAT Number: IT02750720225
REA: TN-247145
Email: info (at) exo-x.shop
Phone: +39 375 9133152

Vivishare di Monica Visintainer is the Data Controller for the processing activities described in this Privacy Policy, unless otherwise indicated.

This Privacy Policy applies to the website exo-x.shop and to personal data processed in connection with our products and services.

1. Personal Data We Collect

Depending on how you interact with us and which services you request, we may collect and process the following categories of personal data:

• name and surname;

• email address;

• telephone number;

• residential address;

• billing address;

• delivery and collection addresses;

• company information, where applicable;

• tax and invoicing information;

• information relating to orders, quotations and purchases;

• information relating to rental requests, bookings and rental agreements;

• products rented or purchased and relevant service dates;

• payment status and transaction-related information;

• communications exchanged with us by email, telephone, messaging services or other communication channels;

• information required to organise deliveries, collections and returns;

• shipment and tracking information;

• copies of identity documents and the information contained in them, where required for rental identification and verification;

• technical information relating to the use of our website, such as IP address, browser information, device information and cookie identifiers, where applicable.

We only collect personal data that is reasonably necessary for the purposes described in this Privacy Policy.

2. How We Collect Your Personal Data

We may collect personal data:

• when you complete a contact, quotation, rental or booking form;

• when you purchase a product;

• when you request or confirm a rental;

• when you upload documents required for a rental;

• when you contact us by email, telephone, WhatsApp or another communication channel;

• when you interact with our website;

• when you make a payment;

• when we organise a shipment, delivery, collection or return;

• from payment providers, logistics providers or other service providers when necessary to complete a transaction or provide the requested service;

• from publicly available sources where permitted by law.

3. Purposes and Legal Bases for Processing

We process personal data only when there is an appropriate legal basis under applicable data protection law.

Performance of a contract or pre-contractual measures

We process personal data when necessary to:

• respond to requests for quotations or information;

• process orders;

• manage purchases;

• process rental requests and bookings;

• prepare and manage rental agreements;

• verify information necessary for a rental;

• process and verify payments;

• provide customer assistance relating to an order or rental;

• organise delivery, collection and return of products;

• manage shipment tracking;

• manage cancellations, returns, claims and contractual disputes.

The legal basis for these activities is the performance of a contract or taking steps at your request before entering into a contract.

Compliance with legal obligations

We may process personal data when necessary to comply with applicable legal obligations, including:

• tax and accounting obligations;

• invoicing requirements;

• legal record-keeping obligations;

• requests from competent public authorities;

• obligations relating to legal claims and regulatory compliance.

Legitimate interests

Where permitted by law, we may process personal data on the basis of our legitimate interests, including:

• protecting our website, systems and business from fraud or misuse;

• preventing fraudulent rental requests or transactions;

• protecting and enforcing our legal and contractual rights;

• maintaining appropriate business and transaction records;

• improving the security and reliability of our services;

• handling and defending legal claims.

Before relying on legitimate interest, we consider whether our interests are overridden by the rights and freedoms of the individuals concerned.

Consent

Where applicable law requires consent, we will request it separately.

Consent may in particular be used for certain:

• marketing communications;

• promotional communications;

• advertising technologies;

• analytics or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

4. Rental Services and Identity Verification

For some rental services, we may require information and documentation necessary to identify the person entering into the rental agreement and to manage the contractual relationship.

This may include a copy of an identity document.

Identity documents and related personal data are processed only where necessary for purposes such as:

• verifying the identity of the renter;

• completing and managing the rental agreement;

• preventing fraud or misuse of rented equipment;

• protecting our property and contractual rights;

• managing disputes or claims relating to a rental;

• complying with applicable legal obligations.

Identity documentation will not be used for unrelated marketing or advertising purposes.

5. Shipping, Delivery and Collection Services

When products are shipped to a customer, collected from a customer or returned to us, it is necessary to provide certain personal data to logistics providers.

This may include:

• name and surname;

• delivery or collection address;

• telephone number;

• email address;

• shipment details;

• tracking information;

• other information strictly necessary for performing the shipment.

The legal basis for this processing is normally the performance of the purchase or rental contract.

A separate consent is therefore not required when the disclosure of this information is necessary to deliver, collect or return a product requested by the customer.

eBay Delivery / eBay Spedizioni powered by Packlink

For certain shipments we use eBay Delivery / eBay Spedizioni powered by Packlink, a shipping service provided by:

Auctane, S.L.U.
Paseo Imperial 14
28005 Madrid
Spain

Auctane, S.L.U. operates the Packlink shipping platform and facilitates shipments through selected transport companies.

According to Auctane’s privacy information for eBay Delivery, when the service is used by a business user, Auctane acts as a processor of the personal data provided in connection with the shipping service.

Personal data necessary for a shipment may therefore be transmitted to Auctane and subsequently made available to the transport company selected to perform the collection and delivery.

Only information reasonably necessary to organise, perform and monitor the shipment will be provided.

The selected transport company may process personal data in accordance with its own legal obligations and privacy requirements where applicable.

6. How We Share Personal Data

We do not sell personal data.

We may disclose personal data to third parties where this is necessary to provide our services, perform a contract, comply with a legal obligation or pursue a legitimate interest described in this Privacy Policy.

Recipients may include:

• payment service providers;

• banks and financial service providers where necessary;

• website hosting and IT service providers;

• cloud storage and data management providers;

• providers of booking and administrative systems;

• communication and email service providers;

• professional advisers, including accountants and legal advisers;

• logistics platforms and shipping intermediaries;

• couriers and transport companies;

• fraud prevention and security service providers;

• public authorities, courts or law enforcement authorities where disclosure is required by law.

Where a service provider processes personal data on our behalf, we require the provider to process the information only in accordance with appropriate instructions and applicable data protection legislation.

Where a third party acts as an independent data controller, its own privacy policy and legal obligations will also apply.

7. Payment Processing

Payments may be processed through third-party payment providers.

Depending on the payment method selected, personal and transaction data necessary to complete the payment may be transmitted directly to the relevant payment provider.

Payment providers may process personal data as independent data controllers or processors depending on the service and circumstances.

Their processing is also governed by their respective privacy policies.

We process payment-related information to the extent necessary to verify payment, manage the relevant order or rental, issue accounting documentation and handle refunds, disputes or payment-related requests.

8. Marketing and Promotional Communications

We may send marketing or promotional communications where permitted by applicable law.

Where consent is legally required, marketing communications will only be sent after consent has been obtained.

You may withdraw your consent or object to receiving direct marketing communications at any time by contacting us at:

Email: info (at) exo-x.shop

Withdrawing consent to marketing does not affect service communications that are necessary to manage an existing order, booking, rental or contractual relationship.

9. International Transfers of Personal Data

Some service providers used by us may process personal data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we take appropriate measures to ensure that the transfer complies with applicable data protection law.

Depending on the destination and provider, such safeguards may include:

• an adequacy decision adopted by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• other legally recognised transfer mechanisms.

10. Retention of Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by law.

Retention periods may vary depending on the type of information and purpose of processing.

In particular:

• quotation and enquiry information is retained for the time reasonably necessary to respond and manage any related commercial relationship;

• purchase and rental information may be retained for the duration of the contractual relationship and afterwards where necessary for accounting, tax, warranty, dispute or legal purposes;

• accounting and invoicing records are retained for the period required by applicable law;

• identity documentation collected for rental verification is retained only for as long as necessary for the rental relationship, fraud prevention, protection of contractual rights, claims or applicable legal obligations;

• shipment information may be retained for the period necessary to manage delivery, collection, tracking, claims and related contractual obligations;

• marketing information is retained until consent is withdrawn or an objection is made, unless another lawful basis applies;

• technical and cookie-related information is retained according to the periods specified in our Cookie Policy and the settings of the relevant technologies.

Personal data may be retained for a longer period where necessary to establish, exercise or defend legal claims or where required by law.

Anonymous or aggregated information that can no longer identify an individual may be retained for longer periods.

11. Your Data Protection Rights

Subject to the conditions established by applicable law, you may have the right to:

• obtain confirmation as to whether we process your personal data;

• access your personal data;

• request correction of inaccurate or incomplete data;

• request deletion of your personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• object at any time to processing for direct marketing purposes;

• receive certain personal data in a structured, commonly used and machine-readable format;

• request transmission of eligible data to another controller where technically feasible;

• withdraw consent at any time where processing is based on consent;

• lodge a complaint with a competent supervisory authority.

To exercise your rights, contact:

Vivishare di Monica Visintainer
Via Diaz 6B
38023 Cles (TN)
Italy
Email: info (at) exo-x.shop

We may need to verify your identity before responding to certain requests.

We will respond in accordance with the deadlines and requirements established by applicable data protection law.

You also have the right to lodge a complaint with the Italian supervisory authority:

Garante per la protezione dei dati personali

You are not required to contact us before exercising your right to complain to the supervisory authority, although we welcome the opportunity to address any concern directly.

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the operation of the website, while others may be used for functionality, analytics, advertising or other purposes.

Where required by law, non-essential cookies and similar tracking technologies are activated only after obtaining the appropriate consent.

Information about:

• the cookies used;

• their purposes;

• their providers;

• their duration;

• how consent can be given, refused or withdrawn

is available in our Cookie Policy and through the cookie preference controls available on our website.

13. Security

We take appropriate technical and organisational measures designed to protect personal data against:

• accidental or unlawful destruction;

• loss;

• alteration;

• unauthorised disclosure;

• unauthorised access;

• misuse.

Access to personal data is limited to persons and service providers who reasonably require access for the purposes described in this Privacy Policy.

No transmission or storage system can guarantee absolute security. We therefore continuously assess and improve our security measures where appropriate.

14. Third-Party Websites and Services

Our website may contain links to third-party websites or services that are not operated by us.

This Privacy Policy does not govern the processing activities of independent third parties.

We recommend reviewing the privacy policy of any third-party website or service before providing personal information to it.

We are not responsible for the privacy practices of websites or services operated independently by third parties.

15. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect:

• changes to our services;

• changes to the technologies or service providers we use;

• changes to our business processes;

• changes to applicable legal or regulatory requirements.

The updated version will be published on this website together with the date of the latest revision.

Where required by law, we will provide additional notice of material changes.

16. Contact

For questions concerning this Privacy Policy or the processing of your personal data, or to exercise your data protection rights, please contact:

Vivishare di Monica Visintainer
Via Diaz 6B
38023 Cles (TN)
Italy

VAT Number: IT02750720225
REA: TN-247145

Email: info (at) exo-x.shop
Phone: +39 375 9133152