Accessibility Screen-Reader Guide, Feedback, and Issue Reporting | New window

PRIVACY POLICY

BBB S.p.A. and B939 SUB HOLDING S.P.A., with registered office in Milan (Italy) – Via Lancetti 28, together with its subsidiary, BOGGI USA ECOMM LLC, with registered office in Wilmington, Delaware (US) – 251 Little Falls Drive, (collectively, “BOGGI”) is committed to protecting the Personal Data (defined below) you share with us. We value the trust you place in us – not only as a customer but as a person. Respecting your privacy is fundamental to who we are as a company. We are committed to transparency. This Privacy Policy explains how we handle your data with the care and integrity you deserve.

You may contact BOGGI at [email protected].

This Notice applies when you:

  1. Visit our website at https://www.boggi.com/en_US/ or any other websites, pages, features, or content that link to this Notice (the “Sites”);
  2. Visit us at any Boggi Milano or Boggi Milano Factory Store (the “Stores”).

If you are a California resident, please click here for our California Privacy Notice at Collection.

1. Who is the Data Controller?

Depending on the purpose of processing BBB S.p.A. and B939 SUB HOLDING S.P.A. (as Joint Data Controllers) or BOGGI USA ECOMM LCC may be the data processor (please find more information regarding this below).

2. What categories of data do we process?

We collect certain personal information about you and how you interact with our Services – whether you’re browsing our website, engaging with our content or shopping in one of our Stores. “Personal information” refers to any information that relates to you, identifies you directly, or could reasonably be used to identify you.

Sources of data:

  • Information you voluntarily provide to us while you are either interacting with our website or visiting our stores;
  • Information we collect from you automatically through cookies;
  • Information we collect from you automatically through CCTV and Wi-Fi when you visit our stores;
  • Information we collect from third parties.

Browsing Data

The computer systems and software procedures used to operate the website acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified physical persons but, by its very nature could, through processing and association with data held by third parties, allow for users to be identified.

This category includes IP addresses (Internet Protocol, a numerical label that uniquely identifies a device called host, which may be a computer or a palmtop or a smartphone, etc., connected to a computer network that uses the Internet Protocol as its network protocol), or the domain names of the computers used by users connecting to the Site, the addresses in URI notation (Uniform Resource Identifier, as a sequence of characters that uniquely identifies a generic resource) of the resources requested, the date and time of the request, the method used in forwarding the request to the server (high-performance computer that in a network provides a service to other connected computers, known as clients), the size of the file (container of digital information) obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), the user’s geographical location and other parameters relating to the user’s operating system and computer environment. Localisation takes place in non-continuous mode when the user enables automatic location detection.

This data is used for the sole purpose of obtaining anonymous statistical information on use of the Site (frequency of access, length of stay, information on the articles displayed, moved to the shopping cart, or added to the wish list) and to check its correct functioning. For more information on the data that is acquired through cookie systems, please visit our Cookie Policy.

Personal Data

The collected Personal Data, depending on the purposes of the processing, may be: first name, last name, social security number, postal and country address, email address, password chosen by you to access your account, phone number, username Instagram, date of birth, gender, signature, Wi-Fi MAC address (unique address assigned to the network cards) of your electronic device (PDA, phone, etc.), a billing address and one or more mailing addresses, and the identification details of one or more of your credit cards.

3. Why do we process your data?

You may find below a list of all the purposes for which we collect your personal information. Select each purpose for more information regarding the legal basis for processing, the nature of the provision of personal data, the data retention period and who is the Data Controller for the specific processing activity.

    • Legal basis: Legitimate interest
    • Data retention: Duration of the browsing session
    • Nature of provision: Necessary
    • Data Controller(s): BBB S.p.A and B939 SUB HOLDING S.P.A.
    • Legal basis: Legitimate interest (technical cookies); consent (non-technical cookies)
    • Data retention: Please refer to the Cookie Policy
    • Nature of provision: Necessary (for technical cookies), Optional (for non-technical cookies)
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A.
    • Legal basis: Legitimate interest
    • Data retention: 1 year
    • Nature of provision: Necessary
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A., together with BOGGI USA ECOMM LLC
    • Legal basis: Performance of a contract / pre-contractual measures
    • Data retention: 6 months
    • Nature of provision: Necessary
    • Data Controller(s): BOGGI USA ECOMM LLC

  • Creating your account, you can also create and share your wish list. Subsequently, you can also proceed through your personal Facebook, Google+ and LinkedIn accounts. By giving authorisation to proceed, the basic information of your profile as well as your email address will be collected through your social media accounts.

    • Legal basis: Performance of a contract / pre-contractual measures
    • Data retention: For the entire duration of the contractual relationship and for a further 3 years from the last access to the personal page or use of the loyalty programme, without prejudice to any contractual or non-contractual matters that may arise and to any different legal obligations.
    • Nature of provision: Necessary
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A.
    • Legal basis: Performance of a contract / pre-contractual measures
    • Data retention: The data will be retained for a period of 10 years from the date of invoice issuance, without prejudice to any contractual or non-contractual matters that may arise and to any different legal obligations.
    • Nature of provision: Necessary
    • Data Controller(s): BOGGI USA ECOMM LLC
    • Legal basis: Legitimate interest
    • Data retention: For the entire duration of the contractual relationship and for a further 3 years from the last access to the personal page or use of the loyalty programme, without prejudice to any contractual or non-contractual matters that may arise and to any different legal obligations.
    • Nature of provision: Necessary
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A.

  • In order to respond to users’ enquiries and, where requested, provide AI-assisted style suggestions.

    • Legal basis: Performance of a contract / pre-contractual measures
    • Data retention: The data will be retained for the time necessary to handle your requests and for the subsequent time necessary to assess the same chat.
    • Nature of provision: Necessary
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A.

  • Including advertising or direct sales material, conducting market research, commercial and promotional communications and newsletters through automated means (e-mail, SMS, WhatsApp). In order to compare and, where appropriate, improve the results of automated communications, the Joint Controllers use reporting systems. Through such reports, the Joint Controllers may become aware, for example, of: the number of readers, openings, unique clickers and clicks; the devices and operating systems used to read the communication; details of individual users’ activities; details of emails sent, delivered and undelivered, and forwarded emails. All such data are used for the purpose of comparing and, where appropriate, improving the results of the communications.

    • Legal basis: Consent
    • Data retention: The data will be retained for the period during which you actively interact, meaning that you have purchased one or more products at Boggi Group stores in the last three years or have accessed, during the same period, your Boggi Privilege account, or until consent is withdrawn, where earlier.
    • Nature of provision: Optional
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A.

  • Personal data will be entered into corporate databases, CRM systems and/or platforms for the purpose of carrying out analyses and assessments, and classifying data subjects into homogeneous groups based on specific characteristics relevant to the company’s activities, in order to improve service management and send targeted promotional communications.

    • Legal basis: Consent
    • Data retention: The data will be retained for the period during which you actively interact, meaning that you have purchased one or more products at Boggi stores in the last three years or have accessed your Boggi Privilege account during the same period, or until consent is withdrawn, where earlier.
    • Nature of provision: Optional
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A.
    • Legal basis: Legitimate interest
    • Data retention: 10 years, unless objected to, and without prejudice to the time necessary for defence in judicial proceedings.
    • Nature of provision: Optional
    • Data Controller(s): BOGGI USA ECOMM LLC
    • Legal basis: Legitimate interest
    • Data retention: For the time necessary to send your reminder e-mails regarding your abandoned cart.
    • Nature of provision: Mandatory only at the moment of subscription to Boggi Privilege
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A.
    • Legal basis: Performance of a contract / pre-contractual measures
    • Data retention: Until a possible request for removal from the Boggi Privilege program, or after 3 years of no access/use of the account and the associated Boggi Privilege program to which the customer is enrolled, or until the electronic device initially linked to the customer profile is changed.
    • Nature of provision: Necessary
    • Data Controller(s): BBB S.p.A. and B939 SUB HOLDING S.P.A.
    • Legal basis: Legitimate interest
    • Data retention: 72 hours.
    • Nature of provision: Necessary
    • Data Controller(s): BOGGI USA ECOMM LLC

4. Data recipients

Your personal data may be processed on behalf of BOGGI, for the above-mentioned purposes, by other entities acting as data processors, with a contractual obligation to maintain the confidentiality of the personal information shared with them.

The list of Data Processors is available by writing to the contact details indicated above.

5. Transfers of data

Your personal data may be transferred in accordance with applicable legislation to countries outside the USA and the European Economic Area (Switzerland). BOGGI will adopt all the appropriate security measures and safeguards defined by law to ensure that an appropriate level of data protection is provided.

To obtain information on the safeguards relating to the transfer of data, data subjects may write to the contact details indicated above.

6. Methods of processing

Personal data will be processed using traditional manual, electronic and automated methods. It is specified that no fully automated decision-making processes are carried out.

7. Data Subject’s Rights

The data subjects may exercise their rights as provided under Articles 15 et seq. of the GDPR by addressing their request to the contacts provided above.

Data subjects are entitled to request, at any time, access to their personal data, rectification, erasure, or restriction of processing. BOGGI shall communicate any rectifications, erasures, or restrictions made to each recipient to whom the personal data has been disclosed. BOGGI informs the data subjects, upon request, of such recipients.

BOGGI ensures the right to data portability and, in response to requests under this article, will provide data in a structured, commonly used, and machine-readable format.

Data subjects have the right to object at any time to processing based on legitimate interest by writing to the contacts indicated above. In case of objection to processing based on legitimate interest, BOGGI allows data subjects, upon request, to obtain information on the balancing test performed.

Data subjects also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To stop receiving automated direct marketing communications (email, SMS, instant messaging, WhatsApp), data subjects may send an email to [email protected] with the subject “unsubscribe from automated communications” or use our automatic opt-out system for emails.

If data subjects believe that the processing of personal data by BOGGI violates the law, they are free to lodge a complaint with the national supervisory authority.

  • If you are a California resident you have the following rights under the California Consumer Privacy Act (CCPA):

    • Right to Know/Access: You may have the right to obtain a copy, or a list of categories of the personal information that we hold about you, as well as other supplementary information, such as the purposes of processing, and the entities to whom we disclose your personal information.
    • Right to Correct: You may have the right to correct any of your personal information in our records and systems. You may request us to rectify, correct or update any of your personal information held by us that is inaccurate.
    • Right to Delete: Under certain circumstances, you may have the right to request that we delete the personal information that we hold about you. This right is not absolute, and we may refuse your right to delete if it is reasonably necessary for us to provide a service requested by you; to perform a contract between us; to maintain functionality and ensure security of our systems; to enable solely expected internal uses of your personal information; to exercise a right provided by law; or to comply with a legal obligation.
    • Right to Portability: Under certain circumstances, you may have the right to request your personal information in a portable format to facilitate its transfer to another service provider.
    • Right to Appeal: In certain jurisdictions, you may have the right to appeal if we refuse to take action on your rights request. Instructions on how to appeal will be provided to you upon such a denial, but in any event, such instructions will be substantially similar to those provided below for submitting requests.
    • Right to Opt-Out of Sale or Sharing: You may have the right to opt-out of sale of your personal information. We generally do not sell your personal information for profit. In addition, you may also have the right to opt-out of sharing your personal information for behavioral advertising purposes. Like many websites, we use cookies, pixels, and similar technology, and we share certain information, such as your IP address or device identifiers, to certain third-party advertisers in order to improve your user experience and to optimize our marketing activities. You have the right to direct us not to share or use your personal information for targeted advertising purposes.
    • Right Against Discrimination: You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising your privacy rights.
    • Right to Limit Use of Sensitive Information: Boggi USA ECOMM LLC does not use or disclose sensitive personal information for purposes that, under applicable law, require us to offer consumers a “Right to Limit” the use or disclosure of sensitive personal information.
    • Shine the Light: California residents may request information about our compliance with California’s Shine the Light law. We do not share personal information with third parties for their own direct marketing purposes without your consent. To request information regarding our compliance with this law, you may contact us at [email protected].

    To submit a request regarding the exercise of your rights, please contact us at [email protected].

  • Our Services are not directed to children under the age of 18 and we do not knowingly collect personal information from children under the age of 18. If we become aware that we have inadvertently received personal information from a visitor under the age of 18 on our Services, we will delete the information from our records.

    • 9. Contact details

    Any request relating to your Personal Data referred to in this notice and for the exercise of your rights may contact, free of charge, BOGGI, at the addresses indicated in paragraphs 1 and 2.

    10. Changes to this Privacy Policy

    BOGGI reserves the right to amend this Privacy Policy at any time by publishing it on this website. The version published on this website is the one currently in force.

    Latest update: September 4, 2026