Privacy Policy

1. Data Controller

The Data Controller is Dielle S.r.l., with registered office at Via Riccardo Galli 11, 20148 Milan (MI), VAT No. 08862090159, hereinafter also referred to as “Dielle” or “the Company.” For any inquiries regarding data processing, you may contact the Data Controller at the following email address: privacy@dielleprofessional.com.

2. Types of Data Processed

As part of its business operations, Dielle may collect and process the following categories of personal data:

• Browsing data: IP address, browser type, operating system, pages visited, visit duration.
• Voluntarily provided data: first name, last name, email address, phone number, company name, submitted via contact forms or portal registration.
• Portal usage data: order information, purchasing preferences, transaction history for registered customers.
• Technical authentication data: managed through the Clerk, Inc. service (see section 5).

3. Purposes and Legal Basis for Data Processing

4. Retention Period

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected:

• Contractual and invoicing data: 10 years from the close of the contractual relationship, pursuant to Italian tax obligations.
• Browsing data and technical logs: maximum 12 months.
• Commercial communications: until consent is withdrawn.
• Authentication data (Clerk): according to the supplier's retention policy, and in any case no longer than account deletion.

5. Third Parties and Transfers

Dielle uses third-party providers to deliver its services. These entities act as data processors and are bound by specific data processing agreements (DPAs):

• Clerk, Inc. (USA): authentication and account management service. Transfer to USA covered by Standard Contractual Clauses.
• Mapbox, Inc. (USA): partner map display. Transfer to USA covered by Standard Contractual Clauses.
• Vercel, Inc. (USA): application infrastructure hosting. Data transits through European servers where available.
• Stripe, Inc. (USA): payment processing (where applicable). Transfer to USA covered by Standard Contractual Clauses.

Data is not sold to third parties or communicated to unauthorised parties.

6. Data Subject Rights

As a data subject, you have the right to:

• Access your personal data (Art. 15 GDPR).
• Request rectification of inaccurate data (Art. 16 GDPR).
• Request erasure of data ("right to be forgotten", Art. 17 GDPR).
• Object to processing based on your particular situation (Art. 21 GDPR).
• Request restriction of processing (Art. 18 GDPR).
• Receive your data in a structured format (portability, Art. 20 GDPR).
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. How to Exercise Your Rights

To exercise the rights listed above, you may send a written request to privacy@dielleprofessional.com or by certified mail with return receipt to the Data Controller’s address. The Data Controller will respond within 30 days of receiving the request, unless the matter is complex, in which case an extension of up to an additional 60 days may be required.

8. Changes to This Policy

The Controller reserves the right to modify this policy at any time, in the event of regulatory, technological or operational changes. Material changes will be communicated to registered users by email or by a visible notice on the site. We recommend consulting this page periodically.

Last updated: July 2026