Privacy policy

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 31 October 2026

1. Data controller

The data controller is Gorilla Socks Italy S.r.l., Via Enrico Besana 3, 20122 Milan (MI), Italy, VAT no. 08795611212, REA MI-2783077. Contact: info@gorilla-socks.com; PEC legal@pec.gorilla-socks.it. No Data Protection Officer (DPO) has been appointed as it is not mandatory under Article 37 GDPR.

2. What data we process

Identification and contact data: first and last name, email, phone, billing and shipping addresses.
Order and payment data: products purchased, amounts, payment method and payment confirmation. Full card details are processed directly by payment providers and are not stored by us.
Account data: credentials, preferences, order history.
Browsing and device data: IP address, browser, operating system, pages visited, online identifiers, also collected through cookies and similar technologies (see the Cookie Policy).
Communications: messages sent to customer support, by email or through the site chat, and reviews.

3. Purposes and legal bases

Managing orders, payments, shipping, returns and support. Legal basis: performance of a contract (Art. 6.1.b GDPR). Providing the data is necessary: without it we cannot fulfil your order.
Tax, accounting and legal obligations. Legal basis: legal obligation (Art. 6.1.c).
Site security, fraud prevention and protection of our rights. Legal basis: legitimate interest (Art. 6.1.f).
Newsletters and promotional communications by email or SMS (via Mailchimp). Legal basis: consent (Art. 6.1.a). If you have bought from us, we may send you offers for similar products (Art. 130(4) of the Italian Privacy Code), and you may object at any time.
Statistical analysis, marketing, personalised advertising and remarketing through third-party pixels and cookies (Google, Meta, TikTok, Pinterest). Legal basis: consent (Art. 6.1.a GDPR and Art. 122 of the Italian Privacy Code), given through the cookie banner.
Collecting reviews (Trustpilot): we may invite you to review your purchase. Legal basis: legitimate interest in collecting feedback (Art. 6.1.f); you may object at any time.

4. Who we share data with

Data is processed by authorised Gorilla Socks staff and by providers acting as processors or independent controllers: Shopify (e-commerce platform, hosting, checkout, Shop Pay, site chat); payment service providers; couriers and logistics operators (GLS); Mailchimp (email marketing); Google (Analytics, Ads, Merchant Center), Meta (Facebook and Instagram), TikTok, Pinterest (analytics and advertising); Trustpilot (reviews); tax, legal and IT advisers; public authorities where required by law. Data is not disseminated or sold.

5. Transfers outside the EU

Some providers are based or have infrastructure outside the EU, in particular in the United States and Canada. Transfers take place on the basis of a European Commission adequacy decision (for example the EU-US Data Privacy Framework for certified providers) or the Standard Contractual Clauses (Art. 46 GDPR).

6. How long we keep data

Order and billing data: 10 years from the end of the relationship, for civil and tax obligations.
Account data: while the account is active, then up to 24 months from last activity.
Newsletters and marketing: until consent is withdrawn or you object.
Communications with support: up to 24 months from closing the request, unless there is a dispute.
Cookies and online identifiers: according to the durations shown in the Cookie Policy.

7. Your rights

You may at any time ask us for access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection to processing (21), including for direct marketing, and withdraw consent without affecting the lawfulness of processing already carried out. Write to info@gorilla-socks.com or to the PEC legal@pec.gorilla-socks.it; we reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of your country.

8. Automated decisions and minors

We do not make decisions based solely on automated processing that produce legal effects on you. Personalised advertising takes place only with your consent. The site is not intended for children under 14; if you are under 14, a parent or guardian must be involved in any purchase.

9. Changes

We may update this notice; the version in force is always the one published here, with the date of the latest update.