Privacy Policy

The Pinguino Guy

Last updated: 16.10.2026

This Privacy Policy explains how The Pinguino Guy ("we", "us", "our") collects, uses, stores and protects the personal data of visitors and customers ("you") of the website https://thepiuminoguy.com/ (the "Website"), in accordance with Regulation (EU) 2016/679 (the "GDPR") and applicable Italian data protection law (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018).

1. Data Controller

The data controller responsible for your personal data is:

TPG di Rivetti Lorenzo - Via A. Giordani 14, Pisogne BS - P.IVA. 04822650984 - CF. RVTLNZ99S04B157R - SDI: M5UXCR1 - pec: thepiuminoguy@pec.it

2. What personal data we collect

Depending on how you use the Website, we may collect the following categories of data:

Data you provide directly

• Identification and contact data: first name, last name, email address, telephone number, billing and shipping address.
• Account data: username, password (stored in encrypted form), order history and preferences.
• Order and transaction data: products purchased, order value, payment method used. Full card details are processed directly by our payment providers and are not stored on our systems.
• Communications: the content of messages you send us through contact forms, email or customer service.

Data collected automatically

• Technical and navigation data: IP address, browser type, device type, operating system, pages viewed, date and time of access, referring website.
• Cookies and similar technologies: see our separate [Cookie Policy] for full details.

We do not knowingly collect data from anyone under the age of [INSERT AGE, e.g. 16]. If you believe a minor has provided us with data, please contact us so we can remove it.

3. Why we process your data and legal bases

Purpose	Legal basis (GDPR Art. 6)
To process and fulfil your orders, manage delivery and returns	Performance of a contract
To create and manage your customer account	Performance of a contract
To provide customer support and respond to enquiries	Performance of a contract / legitimate interest
To comply with legal, tax and accounting obligations	Legal obligation
To send marketing communications and newsletters	Consent (which you may withdraw at any time)
To improve the Website, prevent fraud and ensure security	Legitimate interest
To use analytics and profiling cookies	Consent

Where we rely on legitimate interest, we have assessed that our interest does not override your rights and freedoms. You may object to such processing at any time (see Section 8).

4. Who we share your data with

We may share your personal data with the following categories of recipients, who act as data processors or independent controllers where applicable:

• Payment service providers to process payments securely.
• Shipping and logistics providers to deliver your orders.
• Website hosting and IT service providers.
• Email and marketing platform providers.
• Analytics providers.
• Professional advisors (accountants, lawyers) and public authorities where required by law.

We do not sell your personal data to third parties.

5. International data transfers

Some of our providers may process data outside the European Economic Area (EEA). Where this happens, we ensure an adequate level of protection through one of the safeguards permitted by the GDPR, such as an adequacy decision of the European Commission or Standard Contractual Clauses. You may request a copy of the relevant safeguards by contacting us.

6. How long we keep your data

We retain your personal data only for as long as necessary for the purposes described above:

• Order and transaction data: for the period required by tax and accounting law (currently 10 years in Italy).
• Account data: for as long as your account remains active, and for a reasonable period afterwards.
• Marketing data: until you withdraw consent or object.
• Navigation data and cookies: for the periods set out in the Cookie Policy.

When data is no longer needed, it is deleted or anonymised.

7. How we protect your data

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. These include encryption of sensitive data, access controls, secure hosting and regular security reviews. No transmission over the internet can be guaranteed to be completely secure, but we work to protect your data at all times.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Request restriction of processing.
• Object to processing based on legitimate interest or for direct marketing.
• Request data portability (receive your data in a structured, machine readable format).
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at shop@thepiuminoguy.com. We will respond within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), www.garanteprivacy.it, or with the supervisory authority of your country of residence.

9. Cookies

The Website uses cookies and similar technologies. For full details on the cookies we use and how to manage them, please read our Cookie Policy.

10. Automated decision-making

We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated "Last updated" date. Where changes are significant, we will inform you through appropriate channels.

12. Contact

For any question regarding this Privacy Policy or the processing of your personal data, please contact:

TPG di Rivetti Lorenzo - Via A. Giordani 14, Pisogne BG - P.IVA. 04822650984 - CF. RVTLNZ99S04B157R - SDI: M5UXCR1 - pec: thepiuminoguy@pec.it