Note: The authoritative version of this document is the Italian one. This translation is provided for convenience only.
This notice is drafted pursuant to Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. It describes how personal data of users who visit or make purchases on www.silkincom.com (the "Site") is collected, used, stored and protected.
1. Data Controller
The Data Controller is:
Marco Dibenedetto, sole proprietor of SILKinCOM
Registered office: Via Giuseppe Verdi 2/B, 22072 Cermenate (CO), Italy
Tax code: DBNMRC80E04C933Q
VAT: 03786790133
REA: CO – 333010
Email:
silkincom.business@gmail.com2. Categories of data processed
- Identification and contact data (first name, last name, email, phone, address)
- Shipping and billing data for order fulfilment
- Payment data (handled by external providers)
- Browsing data (IP address, browser type, access times, pages visited)
- Data collected via cookies, Google Analytics, Meta Pixel and marketing tools
- Data voluntarily provided through contact forms or newsletter sign-up
3. Purposes of processing and legal bases
- Order fulfilment, shipping and payments — Performance of contract
- Handling requests via contact forms — Pre-contractual measures
- Newsletter and promotional communications — Explicit consent
- Statistical analysis and site improvement — Legitimate interest
- Remarketing and personalised advertising — Explicit consent
4. Methods of processing
Data is processed using IT, electronic and paper tools, in compliance with the principles of lawfulness, fairness and transparency. Appropriate technical and organisational measures are adopted to guarantee the security and confidentiality of personal data.
5. Data recipients
Data may be communicated to collaborators of the Controller (accountant, marketing agency, couriers) and external service providers including Stripe (payments), Vercel (hosting), Resend (transactional email), Google Ireland Ltd. (Analytics) and Meta Platforms Ireland Ltd. (Facebook/Instagram Pixel).
6. International data transfers
The Site sells and ships worldwide. Some data may be transferred to non-EU countries (e.g. United States, UK, Switzerland) via providers that adhere to standard contractual clauses approved by the European Commission.
7. Retention period
Purchase and billing data: for the time necessary to fulfil legal and tax obligations (10 years). Marketing data: until consent is withdrawn. Browsing data: maximum 26 months.
8. Rights of the data subject
The user has the right to access, rectification, erasure, restriction, portability and objection. To exercise these rights, write to
silkincom.business@gmail.com.