Legal

Privacy Policy

Version 1.0 · Last updated 10 October 2026

IDNTY® designs apparel as engineered systems. We apply the same precision to personal data: we collect as little as possible, use it only for clear purposes and protect it. This policy explains what happens to your data when you visit idnty.eu or idnty.tech, write to us, or work with us as a client, supplier or partner.

1. Controller

The controller responsible for processing within the meaning of the EU General Data Protection Regulation (GDPR) is:

For any privacy matter, write to pr@idnty.tech with the subject “Privacy”.

2. Summary

• No cookies, no analytics, no advertising pixels, no social media plug-ins.
• No external fonts, scripts or content delivery networks — the websites are fully self-hosted.
• We process your data only to answer you, to work with you, and to meet legal obligations.
• We never sell or rent personal data.

3. Visiting the websites

Each time a page is requested, our hosting provider automatically records technical data in server log files: IP address, date and time, requested page, referring page, browser type and operating system, and the amount of data transferred. This is necessary to deliver the website and to detect and defend against attacks and misuse.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in a secure and functioning website. Retention: log files are deleted or anonymised by the hosting provider after a short period, normally within 30 days, unless needed to investigate a specific security incident.

4. Cookies and tracking

The websites do not set cookies and do not use analytics or tracking technologies. No information is stored on or read from your device for marketing or profiling. Should this ever change, we will update this policy and ask for your consent where the law requires it.

5. Contact form and email

When you use the contact form or write to us, we process the data you provide — name, email address and message, and optionally company and country — together with the selected inquiry type. The form forwards your message by email to the IDNTY® mailbox responsible for that topic (supply@, pr@ or vip@idnty.tech). For protection against spam and abuse, the server also processes your IP address and the time of submission and keeps a short-lived technical record to limit repeated submissions.

Legal basis: Art. 6(1)(b) GDPR where your inquiry concerns a possible contract (for example a commission or a supply relationship); otherwise Art. 6(1)(f) GDPR — our legitimate interest in answering inquiries. Retention: we keep correspondence as long as needed to deal with your request and any resulting relationship; inquiries that lead nowhere are deleted no later than 24 months after the last contact.

6. Bespoke and one-of-one commissions

To create an individual piece we may need additional data, such as delivery and billing details, body measurements, fit notes, photographs taken for fitting purposes and your design preferences. We use this data only to design, produce, deliver and service your piece.

Legal basis: Art. 6(1)(b) GDPR — performance of the contract. If you share information about health or physical conditions so that a piece can be adapted to you, we process it only with your explicit consent (Art. 9(2)(a) GDPR), which you may withdraw at any time. Retention: measurements and fit data are kept for as long as you want us to be able to make or alter pieces for you; invoices and accounting records are kept for the period required by tax and commercial law.

7. Suppliers, manufacturers and partners

In business relationships we process the contact details of the people we work with (name, company, position, business email and phone) and the content of our communication. Technical documents you send us, such as data sheets, test reports and samples information, are handled confidentially and used only to evaluate and carry out the cooperation.

Legal basis: Art. 6(1)(b) and (f) GDPR. Retention: for the duration of the relationship and thereafter as required by statutory retention periods.

8. Products with NFC components

Some IDNTY® products may contain an NFC element that links to product information, authenticity verification or care instructions. Reading the tag with your phone does not transmit personal data to us by itself. If a linked service ever requires registration or collects data, it will be described in a separate notice before you use it.

9. Recipients

Within IDNTY®, only the people who need your data for the purposes above have access to it. We also use carefully selected service providers acting on our instructions under data processing agreements (Art. 28 GDPR): web hosting, email hosting and, where needed, IT support. For commissions and orders, data may be shared with couriers, payment providers, tax advisers and accountants to the extent necessary. We disclose data to authorities only where we are legally obliged to do so.

10. Transfers outside the EU/EEA

We aim to keep personal data within the European Union or the European Economic Area. If a transfer to a third country becomes necessary — for example when you are located outside the EU, or when a service provider operates there — it will only take place on the basis of an adequacy decision of the European Commission or appropriate safeguards such as the EU Standard Contractual Clauses (Art. 44 et seq. GDPR).

11. Security

The websites are delivered over encrypted connections (HTTPS). We use technical and organisational measures appropriate to the risk, including access restrictions, up-to-date software and spam protection, and we review them regularly.

12. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have data erased (Art. 17) or its processing restricted (Art. 18);
• receive your data in a portable format (Art. 20);
• object at any time to processing based on our legitimate interests (Art. 21);
• withdraw any consent you have given, with effect for the future (Art. 7(3));
• lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement (Art. 77). In Slovenia, the competent authority is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), www.ip-rs.si.

To exercise your rights, contact us at pr@idnty.tech. We may ask you to verify your identity before responding.

13. No automated decisions

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

14. Minors

Our websites and services are not directed at children under 16. We do not knowingly collect their data.

15. Changes

We will update this policy when our services or legal requirements change — for example when online sales open. The current version is always available on this page, with the date of the last update shown at the top.