This Privacy Notice describes how Sielito S.R.L.S., an Italian sustainable fashion and industrial design company (hereinafter referred to as "Sielito," "we," "us," or "our"), collects, uses, and protects your personal data when you visit and interact with our website, in compliance with Regulation (EU) 2016/679 ("GDPR") and the applicable Italian legislation on personal data protection.
Data Controller: Sielito S.R.L.S. (VAT/Tax ID 02741800060), with registered office at Spalto Marengo 98, 15121 Alessandria (AL), Italy.
Legal Representative: Sole Director Lenzi Lanfranco Cielo.
Email (for privacy inquiries): hello@sielito.com
Certified Email (PEC): lenzilanfrancocielo@pec.itCurrently, no Data Protection Officer (DPO) has been appointed. For any questions regarding your personal data, you can contact us at the email address provided above.
We may collect the following types of personal data:Browsing data: for example, IP address, browser type, device used, pages visited, date and time of visit.Identification and contact data: for example, name, email address, shipping address.Order and payment information: for example, purchased products, use of payment methods (Klarna, PayPal, etc.).Communication data: for example, the content of emails or requests you send us.Newsletter preferences and interactions: for example, newsletter subscription and feedback on communications.Profiling and marketing data: for example, browsing and purchase behavior, advertising identifiers for personalized ads.**
We collect your personal data in the following ways:Directly from you: when you place an order, send us an email, subscribe to our newsletter, or voluntarily provide information.Automatically: through cookies and other tracking technologies while you browse our website.
We use your personal data for various purposes, each based on a specific legal ground under the GDPR:Order fulfillment and customer support – Legal basis: Contractual necessity (Art. 6(1)(b) GDPR).
(Example: we use your data to process your order, deliver products, and manage returns or complaints.)Sending transactional emails and service communications – Legal basis: Contractual necessity (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).
(Example: we send you order confirmations, shipping updates, and communications related to your purchase.)Sending newsletters and marketing communications (if you have given consent) – Legal basis: Consent (Art. 6(1)(a) GDPR).
(Example: if you subscribe, we use your email address to send you updates on new products, offers, and news about Sielito.)Use of cookies and analytics tools – Legal basis: Consent (Art. 6(1)(a) GDPR).
(Example: with your consent, we analyze website visits through Google Analytics 4 to understand site usage and improve it.)Profiling and personalized advertising – Legal basis: Consent (Art. 6(1)(a) GDPR).
(Example: with your consent, we may collect information on your purchasing behavior to personalize your site experience or show you targeted ads for our products.)
We share your data with trusted third-party service providers who process data on our behalf to manage various functions of our website and business operations. These third parties include:Webflow (e-commerce platform and website hosting).PayPal, Klarna (online payment services to process transactions — payment providers may change in the future based on business needs).Couriers for shipping (e.g., DHL, UPS — to deliver purchased products).Cloudflare (Content Delivery Network and security service to protect the site and speed up content loading).Google Analytics 4 (web analytics service by Google to collect statistical data on site usage).Google Hosted Libraries and Google Fonts (to improve site functionality and design; Google may collect users’ IP addresses when accessing these resources).YouTube video widgets (we embed videos from YouTube, a service of Google LLC; viewing such content may involve data collection by YouTube, e.g., cookies and usage data).GoDaddy Web Hosting (additional domain and hosting services supporting our site infrastructure).GoDaddy Professional Email (professional email service managing Sielito’s email communications).GoDaddy Digital Marketing Suite (digital marketing tools used to manage online presence and promotional communications).Meta Pixel Analytics (web analytics service by Meta for collecting statistical data on site usage related to social media channels).All these service providers are bound by contractual confidentiality obligations and GDPR compliance, processing personal data solely for purposes agreed upon with us.
Our website uses cookies and similar technologies for various purposes:Site functionality: Some cookies are essential for the operation of the website and to provide you with features such as the shopping cart and secure browsing.Analytics: We use analytical cookies (e.g., Google Analytics 4) to collect aggregated information about how users interact with the site, helping us improve the user experience and site performance.Marketing and retargeting: Third-party cookies for targeted advertising (e.g., Google Ads or similar tools) help us deliver relevant promotional content and measure the effectiveness of our campaigns. Additionally, if you view embedded external content such as YouTube videos on our site, these third parties may set their own cookies.You can manage your cookie preferences via the consent banner that appears on our site or through your browser settings. For more details, please refer to our dedicated Cookie Policy (if available).
We retain your personal data only for as long as necessary to fulfill the purposes for which they were collected, unless a longer retention period is required or permitted by law. In particular:Order and purchase data: retained for the duration of the contractual relationship and thereafter for the period required by law (e.g., up to 10 years for tax and accounting obligations).Marketing/newsletter data: retained until you withdraw your consent or request to unsubscribe. Every marketing email includes a link to unsubscribe.Browsing and analytics data: retained for the minimum period necessary for analysis purposes (as defined in Google Analytics 4 settings) and, where possible, processed in aggregated or anonymized form.Other data: any other data (e.g., email communications) are retained as long as necessary to handle your requests and to protect our rights in case of disputes.
As a data subject, you have a number of rights guaranteed by the GDPR. In particular, you have the right to:Access your personal data that we hold and request a copy (right of access).Rectify your personal data if inaccurate or incomplete (right of rectification).Erase your personal data, where legal grounds apply, for example if the data is no longer necessary for the original purposes (right to be forgotten).Restrict the processing of your personal data in certain circumstances, for example if you contest the accuracy of the data (right to restriction).Object to the processing of your personal data based on our legitimate interests or for direct marketing purposes (right to object).Withdraw your consent at any time if the processing is based on your consent, without affecting the lawfulness of processing carried out before the withdrawal.Lodge a complaint with a Supervisory Authority if you believe your rights have been violated. In Italy, the relevant authority is the Data Protection Authority (Garante per la Protezione dei Dati Personali).To exercise your rights, you can contact us at any time at the email address indicated at the end of this document. We will respond as soon as possible, and in any case within the legal time limits (usually within 30 days).
Protecting the privacy of minors is particularly important. Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from minors under 16 without the consent of a parent or legal guardian. If we become aware that we have collected information from a minor without proper consent, we will delete it as soon as possible.
We adopt appropriate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Such measures include, for example, encryption of sensitive data, access control systems for our databases, secure protocols (HTTPS) for website communications, firewalls, and protection systems through services like Cloudflare, as well as internal procedures for data management and breach prevention. We are committed to regularly reviewing and updating these measures to ensure a level of security appropriate to the risk.
We may update this Privacy Policy periodically, for example in the event of changes to legal regulations or the introduction of new services on our website. Any changes will be published on this page with an updated revision date. We encourage you to review this policy regularly to stay informed about any modifications. In case of significant changes that require your consent, we will notify you through appropriate channels (e.g., via email or site notifications).If you have any questions regarding this Privacy Policy or the processing of your personal data by Sielito, you can contact us at the following email address: hello@sielito.com.
Last updated: 14/05/2025