Privacy Policy

Information under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") for users of the dealer portal tekdogwear.com and of the related order application. Version 1.1 of 15 September 2026.

1. Controller

TEK DOGWEAR S.R.L., Via Caravaggio 2/B, 20832 Desio (MB), Italy, VAT number IT14805410967, email administration@tekdogwear.com, certified email tek-srl@pec.it (the "Controller").

2. Data we process

The Portal is reserved to businesses. Company data (name, VAT number, addresses, recipient code) are not personal data. This notice covers the data of the individuals acting on behalf of the business: name, email, telephone number, role and login data; browsing data (IP address, device identifiers, access logs); data on orders placed; and the data recorded when terms are accepted or orders are signed electronically (name, role, email, date and time, IP address and browser). Bank transfer receipts uploaded by the Dealer may contain personal data. For sole traders, identification and tax data are also personal data.

3. Purposes and legal bases

  • Handling access requests and accounts: checking requirements, creating and managing access. Legal basis: pre-contractual measures and performance of the contract (Art. 6.1.b GDPR).
  • Handling orders: review, proposals and electronic signature, confirmation, payment, shipping, invoicing, consignment reporting, support, returns and complaints. Legal basis: performance of the contract (Art. 6.1.b).
  • Legal obligations: tax, accounting, electronic invoicing and record-keeping. Legal basis: legal obligation (Art. 6.1.c).
  • Evidence of acceptance and signature, and protection of the Controller's rights in and out of court. Legal basis: legitimate interest (Art. 6.1.f).
  • Security of the Portal: preventing unauthorised access and fraud, technical logs. Legal basis: legitimate interest (Art. 6.1.f).
  • Commercial communications on new collections, campaigns and reserved conditions, by email. Legal basis: consent (Art. 6.1.a), which can be withdrawn at any time through the link in each message or by writing to the Controller. Consent is never pre-selected.

4. Whether providing data is mandatory

The data requested for registration and orders are necessary to access the Portal and perform the contract; without them the account cannot be opened and orders cannot be processed. Providing data for commercial communications is optional.

5. Recipients and processors

Data are processed by authorised staff of the Controller and by external providers appointed as processors under Article 28 GDPR, including:

  • Shopify International Ltd. (Ireland) — Portal platform, hosting and order management;
  • Netlify, Inc. (United States) — hosting of the order application used for account approval, order review, electronic signature and payment receipts;
  • Supabase, Inc. — database of the order application, hosted in the European Union (Frankfurt, Germany);
  • Google Ireland Ltd. — business email;
  • Aruba S.p.A. — certified email (PEC);
  • TeamSystem S.p.A. — Fatture in Cloud — electronic invoicing, accounting and warehouse;
  • GetSync — transfer of orders from the Portal to the accounting system;
  • ShippyPro S.r.l. and the appointed carriers (DHL Express) — shipping and tracking;
  • banks, tax and legal advisers, for legal obligations.

Data may be disclosed to public authorities where required by law. Data are not published.

6. Transfers outside the EU

Where a provider processes data outside the European Economic Area (in particular Netlify, Inc. in the United States), the transfer is based on an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework where the provider is certified, or on the Standard Contractual Clauses under Articles 45 and 46 GDPR.

7. Retention

  • account data: for the duration of the relationship and 24 months after it ends;
  • order data, signature and acceptance records, payment receipts and tax documents: 10 years from the end of the financial year, under Article 2220 of the Italian Civil Code and tax rules;
  • technical and security logs: 12 months;
  • data for commercial communications: until consent is withdrawn and in any case no longer than 24 months after the last interaction;
  • access requests not approved: 6 months.

8. Your rights

Data subjects may exercise at any time the rights under Articles 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent, by writing to administration@tekdogwear.com. They may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

9. Cookies

The Portal uses technical cookies required for it to work and, with consent, analytics cookies. Full details are in the Cookie Policy.

10. Updates

This notice may be updated; the version in force is always published on the Portal with its revision date.