Privacy policy
PRIVACY POLICY
Last updated: August 27, 2026
This Privacy Policy describes how PINGTOUGEFERRARA SRL collects, uses, stores, and discloses the personal data of users who visit the website www.theone.moda, create an account, make a purchase, request assistance, subscribe to the newsletter, or use other services available on the site.
Personal data is processed in compliance with Regulation (EU) 2016/679 ("GDPR"), Legislative Decree No. 196 of June 30, 2003, as amended by Legislative Decree No. 101/2018 ("Privacy Code"), as well as other applicable Italian and European provisions.
1. DATA CONTROLLER
The data controller of the personal data collected through the website is:
PINGTOUGEFERRARA SRL
Registered office: Via Diamantina 32, Ferrara (FE), Italy
VAT number: 02116900388
Trade name used on the website: TheOne
Email: info@theone.moda
Phone: 0532 684041
PINGTOUGEFERRARA SRL is the sole entity responsible for online sales, payments, invoicing, order management, and customer service related to the website www.theone.moda.
The Sarzana store, managed by PINGTOUGE SRL, is a separate entity and is not involved in the management of online sales made on this website.
2. CATEGORIES OF PERSONAL DATA PROCESSED
2.1 Identification and contact data
We may process: first name and surname; residential, shipping, and billing address; Email address; telephone number; company name (if applicable); tax code and VAT number; recipient code or certified email address, when required for invoicing.
2.2 Order and transaction data
We may process: purchased or returned products; order number and date; amounts paid; selected payment method; information relating to shipments, deliveries, returns, exchanges, and refunds; communications relating to the order; purchase history; any disputes or requests for assistance.
Complete payment card details are not normally stored directly by PINGTOUGEFERRARA SRL, but are processed by authorized payment service providers.
2.3 Customer account data
When you create an account, we may process your account credentials and identifiers, saved addresses, preferences, order history, products added to your cart or wish list, and return and refund requests.
Passwords are managed through secure systems and cannot be accessed in plain text by PINGTOUGEFERRARA SRL.
2.4 Technical and navigation data
During navigation, the following may be collected: IP address; device type; operating system; browser type and version; language and approximate geographic region; date and time of access; pages visited; products viewed; actions performed on the site; online identifiers; data relating to cookies, pixels, and similar technologies; and information necessary to ensure the security and proper functioning of the site.
2.5 Data provided to customer service
When you contact us by email, telephone, WhatsApp, contact form, social networks, or other channels, we may process your contact details, the content of your request, photographs or videos of products, documents relating to orders, shipments, returns, or payments, and communications with you.
We encourage you not to provide unnecessary personal data, health data, identity documents, or information regarding third parties, except when strictly necessary for processing your request.
2.6 Data relating to newsletters and commercial communications
When you sign up for the newsletter or give consent to marketing, we may process: email address; telephone number, if provided; date, time, and method of obtaining consent; marketing preferences; interactions with communications sent; withdrawal of consent and requests to unsubscribe.
3. PURPOSES AND LEGAL BASIS OF DATA PROCESSING
3.1 Order and sales contract management
The data is processed to receive and confirm orders, process payments, prepare and ship products, provide delivery updates, manage returns, exchanges, refunds, and warranties, and respond to purchase-related inquiries.
The legal basis is the performance of the contract or pre-contractual measures requested by the data subject, pursuant to Art. 6, paragraph 1, letter b) of the GDPR.
Providing the data required for the order is mandatory. Without this data, it will not be possible to complete or execute the purchase.
3.2 Fulfillment of tax, accounting, and legal obligations
The data may be processed for issuing and maintaining invoices, accounting records, tax compliance, managing requests from authorities, and compliance with legal obligations.
The legal basis is the fulfillment of a legal obligation, pursuant to Art. 6, paragraph 1, letter b) of the GDPR. 1, letter c) of the GDPR.
3.3 Customer Service and Complaint Management
The data is used to respond to inquiries, requests for information, complaints, disputes, and communications relating to products or services.
The legal basis may be the performance of the contract or pre-contractual measures, compliance with a legal obligation, or the legitimate interest of the Data Controller in providing assistance and protecting its rights, pursuant to Art. 6, paragraph 1, letter f) of the GDPR.
3.4 Fraud Prevention and Security
The data may be processed to identify suspicious transactions, prevent fraud, unauthorized access, and abuse, protect the website, accounts, and IT systems, and establish, exercise, or defend legal claims in or out of court.
The legal basis is the Data Controller's legitimate interest in protecting its business, its customers, and its systems, pursuant to Art. 6, paragraph 1, letter f) of the GDPR.
3.5 Newsletter and direct marketing
With your consent, we may send communications regarding new products, promotions, sales, commercial offers, product availability, initiatives, and news from TheOne.
The legal basis is the data subject's consent, pursuant to Art. 6, paragraph 1, letter a) of the GDPR and Art. 130 of the Privacy Code.
Consent is optional and may be revoked at any time by using the "Unsubscribe" link in emails or by writing to info@theone.moda. The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.
In cases permitted by law, we may send communications regarding products similar to those already purchased using the email address provided during the purchase, unless the data subject objects. You may object to this free of charge at any time.
3.6 Analytics, Personalization, and Advertising
With your consent, we may use cookies, pixels, and similar technologies to analyze site usage, measure advertising campaign performance, understand user interests, personalize content and ads, display ads on Google, Facebook, Instagram, and other platforms, create advertising segments or similar audiences, and limit the repetition of ads.
The legal basis is your consent, pursuant to Art. 6, paragraph 1, letter a) of the GDPR and Art. 122 of the Italian Privacy Code. Consent may be refused or revoked at any time through the Cookie Preferences panel available on the site. Cookies and other non-essential tools must not be activated before obtaining consent.
3.7 Abandoned Cart Recovery
When permitted by the site settings and in compliance with applicable law, we may use the data provided during the purchase process to remind you of products left in your cart.
Promotional communications related to abandoned carts are sent only when there is an appropriate legal basis, taking into account the preferences and consents expressed by the user.
4. TRACKING PIXELS IN EMAILS
Some electronic communications may contain technologies such as pixels, web beacons, or tracked links that, depending on the settings used, allow us to detect when a message was opened, the date and time of opening, the links selected, technical information about the device, IP address or approximate geographic location, and interactions with products and offers.
These tools may be used to measure the effectiveness and correct delivery of communications in aggregate form or, with specific consent where required, to analyze the recipient's individual behavior and personalize commercial messages.
Tracking pixels are used in compliance with Articles 15 and 16 of the GDPR. 5, 7, 12, 13, and 25 of the GDPR, Articles 122 and 130 of the Privacy Code, and the Guidelines of the Italian Data Protection Authority of April 17, 2026.
When processing requires consent, the user has the right to withdraw consent to tracking, request to continue receiving communications without tracking markers, when technically available, or unsubscribe from commercial communications entirely.
Relevant requests can be made via the link included in communications or by writing to info@theone.moda.
5. COOKIES AND SIMILAR TECHNOLOGIES
The site uses technical cookies necessary for its operation and, with your consent, analytics, advertising, and profiling cookies.
Technical cookies may be used without your consent when strictly necessary to view the site, use the shopping cart, make payments, maintain a session, manage preferences, and ensure site security.
Further information on cookies, providers, their purpose, and duration is available in the Cookie Policy and in the preferences management panel on the site.
Rejecting non-essential cookies does not prevent you from purchasing or using the site's essential functions.
6. PARTIES TO WHOM DATA MAY BE DISCLOSED
Personal data may be disclosed, to the extent necessary, to the following categories of recipients:
- Shopify, as an e-commerce platform and technical infrastructure provider;
- hosting, IT security, and cloud service providers;
- payment providers, banks, and card networks;
- PayPal, Klarna, Satispay, Shop Pay, Apple Pay, Google Pay, and other payment methods actually selected by the user;
- couriers and logistics operators, including BRT and DHL;
- email, newsletter, and business automation service providers;
- Google, Meta, and other analytics or advertising service providers, only to the extent permitted and based on your cookie preferences;
- application providers installed on the Shopify store;
- accounting, tax, legal, and IT consultants;
- fraud prevention and security companies;
- public authorities, law enforcement agencies, or competent bodies when required by law.
Suppliers who process data on behalf of PINGTOUGEFERRARA SRL are designated, where necessary, as Data Processors pursuant to Article 28 of the GDPR.
Some suppliers, particularly payment processors, advertising platforms, and couriers, may process certain data as independent Data Controllers, according to their respective policies.
PINGTOUGEFERRARA SRL does not sell customer personal data to third parties.
7. SHOPIFY
The online store is hosted on the Shopify platform.
Shopify processes information relating to access and use of the site to provide, protect, and improve its services. The data entered by users may be transmitted to Shopify and its suppliers, including to countries other than the user's country of residence.
For more information on Shopify's data processing, please consult the official privacy policy available at www.shopify.com/legal/privacy.
8. DATA TRANSFER OUTSIDE THE EUROPEAN ECONOMIC AREA
Some providers used for the operation of the site, payments, communications, analytics, or advertising may be based or use infrastructure located outside the European Economic Area.
When data is transferred to third countries, the transfer is carried out in compliance with Articles 44 et seq. of the GDPR, using one or more of the following safeguards: adequacy decision by the European Commission; Standard Contractual Clauses approved by the European Commission; additional technical and organizational measures; or other transfer tools permitted by the GDPR.
The data subject may request information on the safeguards adopted by writing to info@theone.moda.
9. RETENTION PERIODS
Personal data is retained only for the time necessary for the purposes for which it was collected, without prejudice to any legal obligations.
Indicatively:
- data relating to orders, invoices, and accounting documents: up to 10 years, unless longer periods are required by law or necessary for disputes;
- data relating to returns, refunds, complaints, and customer support: for the time necessary to process the case and subsequently for the period necessary to protect rights;
- account data: until the account is deleted or after a prolonged period of inactivity, except for data required by law;
- data used for marketing: until consent is revoked or the right to object is exercised, with periodic checks on the validity and timeliness of the data;
- consents and revocations: for the period necessary to demonstrate compliance with legal obligations;
- technical and security data: for a period proportionate to security and fraud prevention requirements;
- data collected via cookies: for the duration indicated in the Cookies panel or in the Cookie Policy.
At the end of the retention period, the data is deleted, anonymized, or archived only when required by law.
10. DATA SECURITY
PINGTOUGEFERRARA SRL adopts appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized access, unlawful disclosure, and improper use.
However, no electronic transmission or storage system can guarantee absolute security. Users are required to protect their credentials and not share them with third parties.
11. RIGHTS OF THE DATA SUBJECT
In the cases provided for by the GDPR, the data subject may exercise the following rights:
- obtain confirmation as to whether or not personal data concerning him or her exists;
- access his or her data and receive a copy thereof;
- obtain the rectification of inaccurate data;
- obtain the completion of incomplete data;
- request the erasure of data;
- request the restriction of processing;
- object to processing based on legitimate interest;
- object at any time to direct marketing, including profiling related to marketing;
- receive data in a structured, commonly used, and machine-readable format;
- request the transmission of data to another controller, where applicable;
- withdraw consent at any time;
- not to be subject to a decision based solely on automated processing that produces legal effects concerning the data subject or significantly affects him or her, in the cases provided for by Article 22 of the GDPR.
Requests can be sent to info@theone.moda.
Before responding, the Data Controller may request information reasonably necessary to verify the requester's identity and prevent unauthorized access. The request will be processed within the timeframes set forth in Article 12 of the GDPR.
12. COMPLAINTS TO THE AUTHORITY
A data subject who believes that the processing of their data violates applicable law has the right to lodge a complaint with:
Italian Data Protection Authority
Piazza Venezia 11, 00187 Rome
Website: www.garanteprivacy.it
The data subject's right to appeal to the competent judicial authority remains unaffected.
13. MINORS
The site also sells products intended for children, but the online sales service is intended for adults acting directly or as parents, guardians, or legal representatives.
PINGTOUGEFERRARA SRL does not intend to knowingly collect personal data directly from children under 14 without the authorization of their parent or guardian.
If a parent or guardian believes that a minor has provided personal data without authorization, they can request its deletion by writing to info@theone.moda.
14. AUTOMATED DECISIONS AND PROFILING
The site may use automated systems to recommend products, personalize the browsing experience, select advertisements, analyze fraud risk, and protect payments and accounts.
Unless otherwise communicated, PINGTOUGEFERRARA SRL does not adopt decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject pursuant to Article 22 of the GDPR.
Commercial or advertising profiling activities that require consent are carried out only after obtaining such consent.
15. LINKS TO EXTERNAL SITES AND PLATFORMS
The site may contain links to sites, social networks, payment systems, or services operated by third parties.
When users access these services, data processing is also governed by the privacy policies of their respective providers. PINGTOUGEFERRARA SRL is not responsible for any processing performed independently by external sites or services.
16. CHANGES TO THE POLICY
This Policy may be amended due to regulatory compliance, instructions from authorities, changes to the services offered, the introduction or removal of providers, and changes in data processing methods.
The updated version will be published on this page, indicating the date of the last update. When the changes are material or require new consent, users will be informed through appropriate means.
17. CONTACTS
For questions, requests, or clarifications regarding the processing of personal data, please contact:
PINGTOUGEFERRARA SRL
Via Diamantina 32, Ferrara (FE), Italy
VAT Number: 02116900388
Email: info@theone.moda
Phone: 0532 684041
