Privacy Policy


PELLEGRINI S.p.a., with registered office in Via Mazzini, 43 24034 Cisano Bergamasco (BG), Tax Code: and P .Iva 00224980169  (“ PILGRIMS ” ) is a company that offers the possibility to purchase its products online (hereinafter, "Services").

In carrying out its business, PELLEGRINI processes personal data in compliance with the legislative and contractual provisions in force, with methods based on principles of correctness, lawfulness and transparency, protecting the privacy of the interested party and his rights.


Through this document, PELLEGRINI, as owner of the processing of personal data (hereinafter, "Owner"), intends to make the information pursuant to articles 13 et seq. of EU Regulation 679/2016 (hereinafter, the "Regulation"), with reference to the processing of personal data of users (hereinafter, "User/Users") who consult the site (hereinafter, "Site") .


a) Navigation data: computer systems and the software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI notation (Uniform Resource Identifier) of the requested resources, the time of the request , the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site: except for this eventuality, currently the data on web contacts do not persist for more than seven days. p>

b) Data provided voluntarily by the user to purchase a product on the Site and/or use a Service: finalizing the sale of a product through the Site and/or using the Services , involves the processing of user data, with the sole purpose of offering the Services and fulfilling the related contractual and administrative obligations, including, by way of example, processing the order and payment, sending the purchased product. The data being processed are: name, surname, address, country of residence, email address, telephone number.

c) Data provided voluntarily by the user for sending promotional communications relating to the Services: in the event that the interested party subscribes to the newsletter service or expresses his consent for receiving commercial or marketing communications from the Data Controller, the data will be processed for sending such communications by e-mail or ordinary mail, to the addresses provided by the interested party. The data being processed are: name, e-mail, address.

d) Cookies: for the processing of data using cookies, please read the relevant policy



The collected User data will be processed by the Owner:

  • OPERATION OF THE SITE: to pursue a legitimate interest of the Owner, consisting in guaranteeing the security of the Site and of the information exchanged on it, i.e. the ability of this Site to resist, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted and the security of the related services offered or made accessible. The legal basis of the treatment is the art. 6, par. 1 lit. f) of the Regulation.
  • USE THE SERVICES: to use the Services offered through the Site, by way of example to allow the user to purchase a product, etc. The legal basis of the treatment is the art. 6, par. 1, lit. b) of the Regulation being the treatment necessary for the execution of the contract of which the interested party is a part;
  • SENDING COMMERCIAL\PROMOTIONAL COMMUNICATIONS OWNER: in the event that the interested party has given his explicit consent, to send invitations to organized events by the Owner or for sending promotional communications of the Owner's activity. The legal basis of the treatment is the art. 6, letter. a) of the Regulation, i.e. the consent of the interested party.



For the purposes referred to in art. 2) above, personal data will be processed for the period strictly necessary for the pursuit of the aforementioned objectives and also subsequently, for the fulfillment of legal obligations and/or for purposes of a defensive nature.

The data provided for commercial communications activities, opinion polls and market research will be kept until the request by the interested party to interrupt the activity or for 12 months. 


The processing will be carried out both on paper and electronically, with the aid of modern IT systems and with manual methods, solely by persons for this purpose expressly appointed. The treatment will take place with logic and through forms of organization of the data strictly related to the obligations, tasks or purposes mentioned above. The Data Controller uses technical and organizational measures to protect the data in its possession from manipulation, loss, destruction and against access by unauthorized persons. Security measures are constantly improved according to technological development.


The provision of data referred to in point 1, lett. b) is optional. In case of refusal, however, the User will not be able to purchase on the Site. 

The provision of data referred to in point 1, lett. c) is optional. The user can withdraw his consent at any time and without giving reasons. The easiest way to do this is to click on the "Unsubscribe" link, which can be found in every newsletter or communication received. < /span>The user can alternatively send a communication to the Data Controller at 


The User's personal data will be processed by subjects authorized to carry out these tasks, duly appointed managers or persons in charge of processing, equipped with security measures to guarantee the confidentiality of the interested parties to whom the data refer and to avoid undue access to third parties or unauthorized personnel. If necessary, the data collected may be communicated, within the limits strictly pertinent to the obligations, tasks or purposes referred to in point 2, to public or private entities (insurers, auditing and certification companies, etc.) or to Competent authorities for purposes of prevention, detection or repression of crimes, with observance of the rules governing the matter. No data will be disclosed.

The updated list of all data processors is available at the PELLEGRINI headquarters and can be requested at the following e-mail address: . This list may subsequently be integrated and/or updated as needed.

The processors include Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify" ). We use Shopify's services for the purpose of hosting and displaying our online store. All data collected on the Site is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be transferred to Shopify group companies in Canada and the USA. For more information on Shopify's privacy policy, visit the following website:


Users have the right to know their rights, essentially consisting in the right to receive information from the other contractual party regarding the existence of the processing of their personal data, as well as to access their data, to obtain their rectification, integration, updating, cancellation or blocking. Furthermore, the User will also have the right to obtain a copy of his data, the limitation of the treatment and/or, again, to oppose their treatment, in addition to the right to data portability and to lodge a complaint with the competent supervisory authorities at the conditions and within the limits indicated in art. 13 of the Regulation.

Each data subject is guaranteed the following rights pursuant to articles 15 et seq. of the Regulation:

  • Right to information;
  • Right of access of the data subject;
  • Right of rectification;
  • Right to erasure (right to be forgotten);
  • Right to restriction of processing,
  • Right to data portability;
  • Right to object.

The user can therefore know which personal data are held by the Data Controller, their origin and how they are used, request their updating, rectification or integration as well as, in the cases provided for by the provisions in force, the cancellation, the limitation of the treatment or to oppose their treatment. Each interested party may, if he wishes, request to receive a copy of the personal data held by the Data Controller concerning him in a format readable by electronic devices and, where technically possible, the Data Controller may transfer the data directly to a third party indicated by the Interested.

If the user believes that the processing of his personal data has been carried out unlawfully, he can file a complaint with one of the competent supervisory authorities for compliance with the personal data protection rules. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data (">http://www.garanteprivacy. en/).


To exercise the aforementioned rights, Users can send a communication to the email address  indicating in the subject "Privacy - exercise of rights ".

***   ***   ***

This Privacy policy was published on 07/10/22. Any updates will always be published on this page.