Privacy Policy

Effective date: April 21, 2025

This Privacy Policy describes how Catuogno Giuseppina (hereinafter "the Owner", "we" or "our"), with registered office in Via Staffetta 203, 80014 Giugliano in Campania (NA), Italy, VAT number 09244021219, collects, uses and shares the personal data of users of the website https://www.sexyshopxxx.com/it/ (hereinafter the "Site") in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian legislation on the protection of personal data.

Data Controller

Catuogno Giuseppina Via Staffetta 203, 80014 Giugliano in Campania (NA), Italy VAT number 09244021219 Email: arteca01@gmail.com

Types of Data Collected

The Data Controller may collect the following categories of personal data through the Site:

• Contact data: Name, surname, email address, shipping and billing address, voluntarily provided by users through contact forms, account registration or during the purchase process.

• Order data: Information on products purchased, date and time of order, order amount, purchase history, purchase preferences.

• Payment data: Information necessary for processing payments (for example, credit card details or other payment methods), managed directly by payment service providers and not stored directly by the Data Controller.

• Browsing data: IP address, browser type, operating system, pages visited, time spent on the Site, clickstream data, login data, viewing preferences. This data is collected through cookies and similar technologies (see our separate Cookie Policy).

• Data provided voluntarily by the user: Information provided through reviews, comments, participation in surveys, interactions with customer service or other communications with the Data Controller.

• Account data: Username and password created to access reserved areas of the Site, saved preferences.

• Data relating to preferences and interests: Information on the categories of products viewed, added to the cart or purchased, used to personalize the user experience and marketing communications (with consent).

Purpose of Data Processing

The personal data collected by the Data Controller through the Site are processed for the following purposes:

• Provision of the Site's services: To allow navigation, access to reserved areas, management of the user account, viewing of content. The legal basis for this processing is the execution of a contract or pre-contractual measures adopted at the user's request.

• Execution of the contract and management of orders: To process orders, ship products, manage payments, provide customer support and manage any complaints relating to purchases made through the Site. The legal basis for this processing is the execution of a contract to which the interested party is a party.

• Legal obligations: To fulfill the obligations established by laws, regulations or community regulations (for example, tax and accounting obligations). The legal basis for this processing is the fulfillment of a legal obligation to which the data controller is subject.

• Direct marketing (with consent): Subject to the explicit consent of the user, to send commercial and promotional communications relating to products (including products for adults) and services offered by the Data Controller via email, newsletter or other communication channels. The user has the right to withdraw his/her consent at any time.

• Improvement of services and analysis (legitimate interest): To analyze the preferences and behavior of users on the Site, improve the products and services offered, personalize the user experience, optimize the Site, conduct statistical analysis in anonymous or pseudonymized form and prevent abuse. The legal basis for this processing is the legitimate interest of the Data Controller to improve its offer and the user experience.

• Management of requests and communications: To respond to requests for information, assistance or complaints sent by users via contact forms, email or other communication channels on the Site. The legal basis for this processing depends on the nature of the request (execution of a contract, fulfillment of a legal obligation or legitimate interest).

• Fraud prevention (legitimate interest): To prevent and identify fraudulent activities or abuse in the use of the Site and in the processing of orders. The legal basis for this processing is the legitimate interest of the Data Controller to protect its business and users.

• Personalization of the user experience (with consent or legitimate interest): With the user's consent or based on the legitimate interest of providing relevant content, to personalize the contents of the Site, offers and communications based on preferences and purchase history.

Methods of Processing

The processing of personal data takes place using IT and/or telematic tools, with organizational and logical methods strictly related to the purposes indicated. The Owner adopts adequate security measures to protect personal data from loss, theft, unauthorized access, disclosure, alteration or destruction, with particular attention to the sensitive nature of the products offered.

Data Retention

Personal data is retained for the period of time strictly necessary to pursue the purposes for which it was collected and in compliance with applicable legal obligations. In particular:

• Account data is retained for the entire duration of the user's registration on the Site and, subsequently, for a period no longer than necessary to manage any requests or disputes.

• Order data is retained for the time necessary to execute the contract and, subsequently, to comply with tax and accounting obligations (generally 10 years).

• Contact data for direct marketing purposes is retained until the user withdraws consent.

• Browsing data is retained for periods defined in our Cookie Policy.

• Data provided voluntarily by the user is retained for the time necessary to manage the request or interaction.

Communication and Sharing of Data

The personal data of the users of the Site may be communicated to:

• Service providers: Companies that provide logistics, shipping, payment, hosting of the Site, IT maintenance, marketing, data analysis, customer support and other services necessary for the operation of the Site and the execution of contracts, who act as data controllers on behalf of the Data Controller.

• Competent authorities: Public entities or judicial authorities when required by law or to prevent or prosecute illegal activities.

• Professional consultants: Accountants, lawyers or other consultants who assist the Data Controller in fulfilling legal obligations or in defending their rights.

The Data Controller does not transfer personal data outside the European Economic Area (EEA) without adequate guarantees (for example, standard contractual clauses approved by the European Commission).

Data Subject Rights

You have the following rights in relation to your personal data:

• Right of access: Obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, receive information relating to the processing.

• Right to rectification: Obtain the rectification of inaccurate or incomplete personal data.

• Right to erasure (“right to be forgotten”): Obtain the erasure of your personal data in certain circumstances (for example, when they are no longer necessary for the purposes for which they were collected).

• Right to restriction of processing: Obtain restriction of processing in certain circumstances (for example, when you contest the accuracy of the data).

• Right to data portability: Receive the personal data you have provided to us in a structured, commonly used and machine-readable format and transmit that data to another controller.

• Right to object: To object to the processing of your personal data in certain circumstances (for example, for direct marketing purposes or for reasons related to your particular situation).

• Right to withdraw consent: To withdraw your consent to the processing at any time, if the processing is based on consent.

• Right to lodge a complaint with the supervisory authority: To lodge a complaint with the Data Protection Authority if you believe that the processing of your personal data infringes applicable law.

How to Exercise Your Rights

To exercise your rights, users can contact the Data Controller using the email address provided in the "Data Controller" section of this Privacy Policy: [email address removed].

Cookie Policy

The Site uses cookies and similar technologies to collect information about visitors and improve their browsing experience. For more information on the use of cookies, please consult our [INSERT HERE THE LINK TO THE COOKIE POLICY OF THE SITE WWW.SEXYSHOPXXX.COM].

Changes to this Privacy Policy

The Owner reserves the right to make changes to this Privacy Policy at any time. The changes will be published on this page and the effective date will be updated. Users are invited to consult the Privacy Policy regularly to be informed of any changes.