1. Data controller
The controller is Selynz S.r.l., Via della Cooperazione 37, 20153 Milano (MI), Italia, EU VAT ID IT18472630153. Privacy enquiries: [email protected].
2. Data we process
- Identity and contact details, such as name, address, email and telephone number.
- Order, delivery, support and return information.
- Technical data, such as IP address, device and browser information, security logs and cookie identifiers.
- Communications you send to us.
3. Why we process data and legal bases
- Contract: to process orders, arrange delivery, manage payment at delivery, returns and support.
- Legal obligation: to meet accounting, tax, consumer protection and regulatory requirements.
- Legitimate interests: to secure our services, prevent fraud, improve operations and defend legal claims, balanced against your rights.
- Consent: where required, for optional cookies or direct marketing. Consent can be withdrawn at any time.
4. Recipients
Data may be shared with couriers, hosting and IT providers, customer-support providers, professional advisers, public authorities and other processors or recipients where necessary and lawful. They receive only data relevant to their role.
5. International transfers
If data is transferred outside the European Economic Area, we use a lawful transfer mechanism and appropriate safeguards, such as an adequacy decision or standard contractual clauses, where required.
6. Retention
We retain personal data only for as long as necessary for the purposes described, including contract performance, statutory accounting periods, dispute handling and security. Retention periods vary by data category and legal obligation.
7. Your rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction, portability, or object to certain processing. Where processing relies on consent, you may withdraw it without affecting prior lawful processing.
8. Complaints
You may contact us first so we can address your concern. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the competent authority in your country.
9. Security and required data
We use proportionate technical and organisational measures to protect data. Some information is required to process and deliver an order; without it, we may be unable to perform the contract.
10. Updates
We may update this notice to reflect legal, technical or operational changes. The current version and update date are published on this page.