This is a courtesy translation. In case of any discrepancy the Italian version prevails.
Privacy notice
Notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) for visitors to polypetstudio.com and customers of the PolyPet online shop. Last updated: 7 November 2026.
1. Data controller
Mech 3d di Grassi Romana, Via Leopardi, 1a, 24060 Montello (BG), Italy, VAT IT04723360162, email info@polypetstudio.com. We have not appointed a data protection officer (DPO), as our activity does not require one: please send any request to the address above.
2. What data we process, why and on what legal basis
| Data | Why we use it · legal basis · how long we keep it |
|---|---|
| Technical browsing data (IP address, browser, page requested, date and time) | To show the website and protect it from abuse and attacks · legitimate interest (Art. 6(1)(f)) · only as long as strictly necessary for security |
| Emails and messages you send us | To reply to you · pre-contractual steps at your request (Art. 6(1)(b)) · as long as needed to handle the request, at most 24 months if no order follows |
| Order data: name, shipping and billing address, email, phone if you provide it, items purchased | To conclude and perform the contract, ship, handle withdrawal, returns and warranty · performance of the contract (Art. 6(1)(b)) · 10 years for accounting and tax records (Art. 2220 of the Italian Civil Code), the rest for the duration of the legal guarantee (26 months from delivery) |
| Payment data | To collect payment · performance of the contract · we never see or store your card details: they are processed directly by the payment provider you choose (Stripe or PayPal) |
| Legal obligations | Bookkeeping, tax compliance, replies to authorities · legal obligation (Art. 6(1)(c)) · for the periods required by law |
| Newsletter email | To send you search tips and exercises and PolyPet news · consent (Art. 6(1)(a)), which you can withdraw at any time with the link in every email · until withdrawn |
| Email of existing customers | To suggest products similar to those you bought (Art. 130(4) of the Italian Privacy Code) · legitimate interest · until you object, including with one click in the email |
Providing order data is necessary to buy: without it we cannot ship. The newsletter is optional. We do not make automated decisions or create profiles.
3. Who we share data with
Only with those we need to provide the service, acting on our behalf as processors or as independent controllers:
- Cloudflare, Inc.: website delivery and protection, forwarding of emails to info@polypetstudio.com (processor).
- Google Ireland Ltd (Gmail): the mailbox where we receive emails (processor).
- Server provider that will host the online shop, with data stored in the European Union: we will name it here before the shop opens (processor).
- Amazon Web Services EMEA SARL, Amazon SES service with servers in Frankfurt: sending order emails and the newsletter (processor).
- Stripe Payments Europe Ltd and PayPal (Europe) S.à r.l. et Cie, S.C.A.: payments and fraud prevention (independent controllers, with their own notices).
- The carrier delivering your parcel: name, address, phone if provided (independent controller).
- Our accountant and advisers, for bookkeeping and tax compliance, and public authorities where the law requires it.
We do not sell your data and do not use it for third-party advertising.
4. Transfers outside the European Union
Some providers (Cloudflare, Google, Amazon, Stripe, PayPal) belong to groups based in the United States and may process data outside the European Union. Transfers are based on the European Commission’s adequacy decision for companies certified under the EU-U.S. Data Privacy Framework and, in any case, on the standard contractual clauses approved by the Commission.
5. Purchases on Etsy
The “Buy on Etsy” buttons take you to our shop on the Etsy platform, a third-party website with its own privacy notice and cookies. For orders placed on Etsy, Etsy is an independent controller of the data it collects and passes on to us the data needed to prepare and ship the order, which we process as described above for order data.
6. Your rights
You can ask us at any time to access, correct or erase your data, restrict its processing, receive it in a machine-readable format, object to processing based on legitimate interest and withdraw your consent, without affecting what was done before withdrawal (Articles 15–22 GDPR). Write to info@polypetstudio.com: we reply within one month. If you believe your data is not processed lawfully, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of the EU country where you live.
7. Minors
The shop is intended for adults. We do not knowingly collect data from children under 14.
8. Cookies
How we use cookies is explained in the cookie policy.
9. Changes
If our processing changes we update this page and the date at the top. Before the online shop opens we will complete it with the name of the server provider.