0
MIOBUK

Privacy Statement

Protecting your privacy and your personal data is a priority for us. At MIOBUK, we regard trust as the foundation of every relationship with our customers. We are therefore committed to processing personal data with transparency, fairness and responsibility, in full compliance with Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian legislation.

This Privacy Notice explains what personal data we collect, the purposes for which and the ways in which we process it, the parties with whom it may be shared, and the rights you can exercise in relation to your personal data.

1. Data controller

The data controller is:

Ghost Collection S.r.l.
16 Via F. Baracca
24060 San Paolo d’Argon (BG) — Italy
VAT No.: 04898270162
Email: support@miobuk.it
Certified email address (P.E.C.): ghostcollectionsrl@legalmail.it

2. What personal data we collect

Depending on how you use our websites and the services you request, we may collect and process the following categories of personal data.

Identification and contact details

  • first name and surname;
  • billing address;
  • delivery address;
  • Country of residence or destination;
  • telephone number, where required;
  • email address.

Order data

  • products purchased;
  • order history;
  • amounts paid;
  • information regarding the payment method used;
  • communications and enquiries addressed to Customer Services;
  • information regarding returns, exchanges or complaints.

Technical navigation data

Whilst browsing our websites, certain data may be collected automatically by the IT systems and technological tools used, including: IP address; browser type and version; device used; operating system; language setting; pages visited; date and time of the visit; and information relating to browsing and use of the website.

This information may be processed, in accordance with the applicable legislation, to ensure the security and proper functioning of the websites, as well as for statistical and analytical purposes.

3. Purpose of processing

Personal data is processed for purposes relating to the management of the MIOBUK websites and the services offered. In particular, we may use the data to:

  • manage and process orders;
  • process and verify payments;
  • to organise the dispatch and delivery of the products;
  • to provide customer support;
  • handle enquiries, returns, exchanges and complaints;
  • to comply with tax, accounting and administrative obligations;
  • to prevent and detect fraud, abuse and unlawful use;
  • to ensure the security of systems and sites;
  • to improve the functionality, performance and user experience of the websites;
  • to comply with obligations laid down by law or by measures issued by the competent authorities.

Subject to your consent, where required by applicable legislation, we may also use your email address to send you marketing communications relating to MIOBUK, including news, new collections, offers, events and other content relating to the brand.

4. Legal basis for processing

The processing of personal data is carried out on the basis of one or more of the following conditions:

  • the performance of the contract or of pre-contractual measures requested by the data subject;
  • compliance with legal obligations to which the Data Controller is subject;
  • the pursuit of a legitimate interest of the Data Controller, whilst respecting the fundamental rights and freedoms of the data subject;
  • the data subject’s consent, where required by the applicable legislation.

Where processing is based on consent, the data subject has the right to withdraw that consent at any time, without this affecting the lawfulness of the processing carried out prior to the withdrawal.

5. Payments

Payments made via MIOBUK websites are processed by selected payment service providers and, where applicable, comply with the security standards set out in current legislation.

Depending on the method of purchase and the services available on the website, the payment methods available may include: credit and debit cards; PayPal; Nexi; Apple Pay; Google Pay. The actual availability of individual payment methods will be indicated during the checkout process.

MIOBUK does not store or have access to the full details of the payment cards used by customers, as this data is managed directly by the relevant payment service providers. Payment information may be processed directly by the relevant providers in accordance with their own privacy policies and terms of service.

6. Who we can share the data with

Personal data may be disclosed to third parties only where this is necessary to provide the services requested, to comply with legal obligations or to fulfil the purposes set out in this Privacy Notice. Depending on the services used, data may be disclosed to:

  • courier and logistics operators responsible for delivery, such as GLS and FedEx;
  • payment service providers;
  • tax advisers, accountants and appointed professionals;
  • providers of website hosting, maintenance, security and technical management services;
  • service providers necessary for the management of the customer relationship;
  • public authorities and parties authorised to request data in the cases provided for by law.

Personal data is not sold or transferred to third parties for independent commercial purposes not authorised by the Customer.

7. Newsletter and commercial communications

Should the Customer choose to subscribe to the MIOBUK newsletter, the email address provided may be used, subject to consent where required, to send communications relating to the brand, including: news and updates; new collections; products and availability; offers and promotions; events; editorial content and content dedicated to the world of MIOBUK.

The Customer may withdraw their consent to receive marketing communications at any time by using the link provided within the communications they have received or by contacting Customer Services directly.

8. Data retention

Personal data is retained for the period necessary to fulfil the purposes for which it was collected and, thereafter, for any period required by current legislation.

Data relating to purchases and commercial transactions may be retained for as long as is necessary to comply with applicable tax, accounting, administrative and legal obligations.

At the end of their respective retention periods, the data will be deleted, anonymised or otherwise processed in such a way as to prevent its use for the original purposes, subject to any further retention obligations laid down by law.

9. Data security

Ghost Collection S.r.l. implements appropriate technical and organisational measures, proportionate to the nature of the data being processed and the risks associated with such processing, to protect the data from unauthorised access, loss, destruction, alteration, disclosure or misuse.

Despite the implementation of appropriate security measures, no IT system or data transmission over the Internet can guarantee absolute security.

10. Your rights

As a data subject, you may exercise the following rights in the circumstances provided for by the applicable legislation:

  • to obtain confirmation as to whether or not personal data concerning you exists;
  • access your personal data;
  • to request the rectification of inaccurate data or the completion of incomplete data;
  • to request the erasure of data in the cases provided for by law;
  • to request the restriction of processing in the cases provided for by law;
  • consent to processing in the permitted cases;
  • to receive personal data in a structured, commonly used and machine-readable format, in the cases provided for by the right to data portability;
  • to withdraw consent previously given, where the processing is based on consent;
  • to lodge a complaint with the Data Protection Authority.

To exercise your rights, you can contact the Data Controller at the following address support@miobuk.it.

11. International data transfers

As MIOBUK may also sell its products to customers residing outside the European Union, some service providers may process personal data in countries outside the European Economic Area.

In the event of international data transfers, Ghost Collection S.r.l. will implement the measures and safeguards provided for by the GDPR and applicable legislation, in order to ensure an adequate level of protection for personal data.

12. Minori

MIOBUK websites are not intended to deliberately collect personal data from children.

If a parent or guardian believes that a child has provided personal data without the necessary authorisation, they may contact the Data Controller at the following address: support@miobuk.it. Upon receipt of the report, Ghost Collection S.r.l. will assess the situation and, where necessary, take the appropriate measures provided for under the relevant legislation.

13. Biscuit

MIOBUK websites use cookies and similar technologies to ensure the platforms function correctly, to improve the browsing experience and, where applicable and permitted by the relevant legislation, to collect statistical and analytical information.

For detailed information on the cookies used, their purposes and how to manage your preferences, please refer to the Cookie Policy.

14. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect any changes in legislation, technology, organisation or the services offered. The most recent version of the Privacy Policy will be published on the official MIOBUK websites.

In the event of substantial changes, where required by the applicable legislation, appropriate measures may be taken to inform the data subjects.

15. Contacts

If you have any questions regarding this Privacy Policy, the processing of personal data or the exercise of your rights, please contact the Data Controller:

Ghost Collection S.r.l.
16 Via F. Baracca
24060 San Paolo d’Argon (BG) — Italy
VAT No.: 04898270162
Email: support@miobuk.it
Certified email address (P.E.C.): ghostcollectionsrl@legalmail.it

Version dated 21 September 2026

Privacy PolicyCookie Policy