Privacy Policy
Personal Data Processing Notice
Issued pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) · Trademark owned by ZOE TECH S.R.L. · Last updated: November 2026
Privacy notice summary
This notice describes how ZOE TECH S.R.L., as Data Controller for the MIAKORO® brand, collects, uses, stores, and protects the personal data of those who browse or purchase on miakoro.com, in full compliance with the General Data Protection Regulation (EU/2016/679 — GDPR) and Legislative Decree 196/2003, as amended by Legislative Decree. 101/2018.
1. Data controller
The Data Controller of personal data is the company:
| Company name | ZOE TECH S.R.L. |
|---|---|
| Trade name | MIAKORO® |
| Registered office | C.so Lodi 5, 20135 Milan (MI) — Italy |
| VAT / Tax ID | IT04556340166 |
| Privacy contact email | info@miakoro.com |
2. Types of data collected
We collect and process only the data strictly necessary to provide our services and fulfill sales contracts. Specifically:
- Browsing data: IP addresses, request times, device or operating system parameters, and technical log files, automatically collected by computer systems during site consultation.
- Identification and contact data: first name, last name, email address, and phone number, voluntarily provided during registration or when submitting a request.
- Shipping and billing data: delivery address, billing address, tax ID or VAT number.
- Payment data: information about financial transactions. Card data is never stored on our servers: it is handled by external payment gateways certified PCI-DSS.
3. Processing purposes and legal bases
Personal data is processed for the following purposes, based on the respective legal bases (Art. 6 GDPR):
- Performance of the sales contract (Art. 6.1.b): order management, payment processing, product delivery, customer service, and management of withdrawal rights or legal warranties.
- Compliance with legal obligations (Art. 6.1.c): tax, accounting, and regulatory obligations required by law.
- Legitimate interest of the Controller (Art. 6.1.f): fraud prevention, network and IT system security, defense or protection of rights in legal proceedings.
- Marketing and newsletter (Art. 6.1.a): sending promotional or commercial communications, only with explicit and optional consent.
- Visit statistics (Art. 6.1.a): aggregated analysis of how the site is used, with Google Analytics, only with consent to statistics cookies given through the banner.
4. Processing methods and retention
Processing is carried out using electronic and automated tools, with appropriate security measures to prevent unauthorized access, loss, disclosure, or alteration of data (Art. 32 GDPR).
Data is retained for different periods depending on the purpose:
- Contractual and accounting data: 10 years from the completion of the transaction, in compliance with tax and civil obligations (Art. 2220 c.c.).
- Browsing data: for the time strictly necessary for site operation, and in any case deleted within a few days.
- Marketing and newsletter data: until consent is withdrawn (unsubscription) or for a maximum of 24 months from collection.
- Statistics data (Google Analytics): for the retention period set in Google Analytics, up to 14 months.
5. Recipients of personal data
The data collected will never be sold to third parties. Possono essere condivisi esclusivamente con soggetti designati Responsabili del Trattamento (art. 28 GDPR) o Titolari autonomi, limitatamente alle finalità sopra indicate:
- Poste Italiane S.p.A. (Poste Delivery Business) and, for international shipments, Poste’s partner couriers: the recipient’s name, address, phone number and email, for delivery and shipping notifications;
- Claisy, for the insurance of shipped parcels: order number, name, delivery address, email, products, amount and tracking number;
- Stripe Payments Europe Ltd. (Ireland) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg), for payments: card data is processed only by them and never reaches us;
- Brevo (Sendinblue SAS, France), only for newsletter subscribers: email, language and welcome discount code;
- Google Ireland Ltd. (Google Analytics and Google Tag Manager), only with consent to statistics cookies given through the banner;
- Cloudflare, Inc. (Turnstile), for anti-spam checks on the registration and newsletter sign-up forms;
- banks and external tax, legal or accounting consultants;
- the website hosting provider and the providers of technical email delivery services.
6. Data transfer outside the EU
Personal data is stored and managed on servers located within the European Union. Some of the providers listed above (Google, Cloudflare, Stripe, PayPal) belong to groups based in the United States and may also process data outside the European Economic Area: in these cases, the transfer takes place on the basis of the EU–U.S. Data Privacy Framework or the Standard Contractual Clauses (SCC) approved by the European Commission.
7. Data subject rights
At any time you can exercise the rights guaranteed by Arts. 15-22 of the GDPR by writing to info@miakoro.com:
- Access (Art. 15): obtain confirmation that processing of your data is underway and receive a copy.
- Rectification (Art. 16): correct inaccurate data or complete incomplete data.
- Erasure / right to be forgotten (Art. 17): request deletion of data in cases provided by law.
- Restriction (Art. 18): request suspension or limitation of processing.
- Portability (Art. 20): receive the data provided in a structured, commonly used, and machine-readable format.
- Objection (Art. 21): object at any time to processing for reasons related to your particular situation or for direct marketing purposes.
- Withdrawal of consent: withdraw at any time the consent given for marketing, without affecting the lawfulness of previous processing.
Right to lodge a complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the supervisory authority of the EU member state in which you reside.
8. Changes to the privacy policy
The Controller reserves the right to modify this notice at any time, to adapt it to legislative or technical updates. Changes will be published on this page with the date of last update indicated.
Notice prepared for ZOE TECH S.R.L. (MIAKORO®) — compliant with Regulation (EU) 2016/679 (GDPR) and current Italian legislation.