Privacy policy
Last updated: 1 November 2026
This policy explains what personal data MirrorlessWorld.com processes, why, and what your rights are under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Italian Personal Data Protection Code (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018).
1. Data controller
Andrea Pizzini
via Schaffer 35
39012 Merano (BZ)
Italy
E-mail: admin@mirrorlessworld.com
We have not appointed a Data Protection Officer, as the law does not require one for this site.
2. What we process, why, and on which legal basis
| What | Purpose | Legal basis | How long |
|---|---|---|---|
| Server logs: IP address, date and time, page requested, browser type, referring page | Delivering the website, security, finding errors | Legitimate interest (Art. 6(1)(f) GDPR) in a secure, working site | Kept by our hosting provider for a limited time (normally up to 30 days), then deleted |
| Settings stored in your browser (localStorage): your cookie choice, mm/inch setting, shop country | Remembering your choices | Strictly necessary for the service you ask for (Art. 122 Italian Privacy Code; Art. 6(1)(f) GDPR). These stay on your device and are not sent to us. | Until you clear your browser data; the cookie choice is asked again after 6 months |
| Analytics (only if you click “Accept analytics”): pages viewed, comparisons chosen, approximate location (country/city), device and browser type, a random visitor ID | Counting visits and understanding which comparisons are useful, to improve the site | Your consent (Art. 6(1)(a) GDPR; Art. 122 Italian Privacy Code) | Google Analytics: 14 months. Clicky: per Clicky's data retention (raw data at most 12 months). You can withdraw at any time. |
| New-gear e-mail alerts (only if you sign up): your e-mail address, the cameras/lenses/brands/systems you chose, how often, the date and IP address of the sign-up and of the confirmation, and how many alerts we sent | Sending the alerts you asked for; proving that you agreed (double opt-in) | Your consent (Art. 6(1)(a) GDPR); the sign-up record: legal obligation to be able to prove consent (Art. 7(1) GDPR) | Until you unsubscribe: unsubscribing deletes everything at once. Sign-ups that are never confirmed are deleted after 30 days. |
| E-mails you send us | Answering you | Legitimate interest in replying (Art. 6(1)(f) GDPR) | As long as needed to deal with your request, at most 2 years |
We do not use your data for advertising, we do not sell it, we do not build profiles, and we make no automated decisions about you (Art. 22 GDPR).
3. Cookies and similar technologies
Without your consent this site sets no cookies and loads no tracking scripts. It only stores the technical settings listed above in your browser.
If you click “Accept analytics”, two analytics services are loaded:
- Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). Cookies:
_ga,_ga_*(up to 2 years). Google Signals and advertising features are switched off; GA4 does not log or store IP addresses. We have accepted Google's data processing terms. Google privacy policy - Clicky (Roxr Software Ltd., Portland, Oregon, USA), used in privacy mode (visitors are not individually tracked across visits). Clicky privacy policy
You can change or withdraw your choice at any time with Cookie settings (also at the bottom of every page). Withdrawing deletes the analytics cookies; it does not affect what was processed before.
4. Who receives data (processors) and transfers outside the EU
- Hosting and e-mail sending: GoDaddy (GoDaddy Operating Company, LLC, USA, and its affiliates), which stores the website, the database and the server logs and sends the alert e-mails, acting on our instructions under its data processing agreement.
- Analytics (only with your consent): Google and Clicky, see section 3.
- Poly Haven (polyhaven.com): only if you choose the “Liberty veranda” scene, your browser downloads free 3D scenery files directly from Poly Haven's servers, which then see your IP address.
Some of these providers are based in the USA or may process data there. Transfers rely on the EU–US Data Privacy Framework (adequacy decision of 10 July 2023) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (Art. 46 GDPR). Everything else (the 3D engine, fonts, product photos) is served from our own server; no data goes to Google Fonts or content delivery networks.
5. Links to shops (affiliate links)
The “Check prices” buttons link to online shops (for example Amazon, B&H Photo, Adorama, Fotokoch, Foto Erhardt, Calumet). These are affiliate links: if you buy something after clicking, the shop may pay us a commission, at no extra cost to you. As an Amazon Associate I earn from qualifying purchases. No data is sent to a shop until you click a link. Once you are on the shop's website, the shop is responsible for its own cookies and data processing, including recording that you came from our site; please see its privacy policy.
To suggest shops in your country we use the country your browser reports (language and time zone); we do not look up your IP address with an outside service.
6. Your rights
You have the right to:
- get access to your data and a copy of it (Art. 15 GDPR);
- have it corrected (Art. 16) or deleted (Art. 17);
- restrict its processing (Art. 18) and receive it in a portable format (Art. 20);
- object at any time to processing based on our legitimate interest (Art. 21);
- withdraw your consent at any time, without affecting what was done before (Art. 7(3)). For e-mail alerts use the link in every e-mail; for analytics use “Cookie settings”.
To use these rights, e-mail admin@mirrorlessworld.com. We answer within one month. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. In Italy that is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it.
7. Is providing data required?
No. You can use the size comparison without giving any personal data and without accepting analytics. An e-mail address is needed only if you want alerts.
8. Children
The e-mail alerts are not meant for children under 14 (Art. 2-quinquies Italian Privacy Code); we do not knowingly collect their data.
9. Security
The site is served only over HTTPS. Links in our e-mails are random tokens that are stored only as a hash, and access to the database is restricted.
10. Changes
We will update this policy when the site or the law changes; the date at the top shows the current version.