Privacy policy


This page describes how the site is managed with regard to the processing of personal data of users who consult it.
This is a notice provided, pursuant to Article 13 of General Data Protection Regulation 16/679, hereinafter also, for brevity, "GDPR", for the services and web pages of the site accessible by electronic means from the address: https://sayyou.it, corresponding to the home page of the site.
The information is provided solely in relation to the site in question and does not extend to other sites or pages not belonging to the site itself consulted by the user through links, for which the user is encouraged to consult their respective privacy policies. Please be advised that this site does not offer products aimed directly at minors.


DATA CONTROLLER
CALZATURIFICIO MODA ITALIANA SRL
with registered offices in via Chiusa 45, 48012 Bagnacavallo (RA) 
Registration in the Ravenna Business Register P.IVA/VAT-Id. No. 02335940397
EMAIL: amministrazione@modaita.it PEC - certified e-mail address: modaitaliana@cert.cna.it PHONE CONTACT: +39 0545/937413


TYPE OF DATA ACQUIRED AND PURPOSE OF PROCESSING 
Browsing or usage data: the computer systems and software procedures responsible for the operation of this site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols; this data will therefore be collected automatically during the use of this application.
This category of data includes IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), the cookies for which you can consult the attached cookie policy, and other parameters related to the user's operating system and computer environment, including system and maintenance logs.
This data, which is necessary for the use of web services, is also processed for the purpose of: obtaining statistical information on the use of services (most visited pages, number of visitors per time slot or daily, geographical areas of origin, etc.); controlling the proper functioning of the services offered.
In cases where certain data is indicated on the site as optional, users are free to refrain from communicating such data, without this having any consequence on the availability of the service and its operation. Users who are in doubt about which data is optional or mandatory are encouraged to contact the Data Controller.
Data sent by the user: If the user, in order to access the services usable on this website, decides to send his/her personal data through the completion of the forms present in the specific area of the site dedicated to such services, the Data Controller will process such data in order to provide the requested service, in accordance with the indications of this Privacy Policy and any specific information provided during the acceptance phase.
This data will be used by means of IT and/or online tools, with organisational and logical methods strictly related to the sole purpose of carrying out the service or performance requested by the Data Controller, or in some cases by the individuals involved in the organisation of the Data Controller's activity and appointed by it (administrative staff, sales staff or computer system administrators).
The Data Controller shall take appropriate security measures to prevent any unauthorised access, disclosure, modification or destruction of such personal data.
Data is processed at the Data Controller's operational offices and at any other location where the parties involved in the processing are located.


LEGAL BASIS FOR PROCESSING
The legal basis for processing carried out in response to queries received, for the management of any registrations on the site and the possible management of orders/requests is pre-contractual and contractual requirements and legal obligations. 


The legal basis for processing related to promotional activity (such as sending newsletters), market research and profiling, is that of consent given by the user for the specific purposes.


RECIPIENTS or POSSIBLE CATEGORIES OF DATA RECIPIENTS 
Browsing data is handled only by technical staff in charge of processing, or by those in charge of occasional maintenance operations. 
The personal data provided by users in forms, including registration forms to access e-commerce, will not be disseminated outside the company, and will be processed by the Data Controller's staff acting on the basis of specific instructions provided by the same with regard to the purposes and methods of such processing. Your data may be shared with third parties for the purpose of taking advantage of specific services; in these cases, please refer to the privacy policy of the respective operators for further information on data processing. 
The updated list of data processors can always be requested at any time from the Data Controller.


TRANSFER OF DATA TO NON-EU COUNTRIES
As part of the services offered through this site, including those necessary for the operation of e-commerce (for example: order management, payment systems, shipping services, email marketing platforms, hosting, analytics tools and cloud services), some providers used by the Data Controller may process or store personal data in countries located outside the European Union or the European Economic Area.
In such cases, the Data Controller shall ensure that any transfer takes place in compliance with Articles 44-49 of the GDPR, taking appropriate measures to ensure a level of data protection equivalent to that provided in the EU. Such measures may include an adequacy decision by the European Commission, the use of Standard Contractual Clauses (SCC), possibly supplemented by additional measures when necessary.
An up-to-date list of providers making extra-EU transfers and the guarantees used can be requested from the Data Controller at any time.

STORAGE
Browsing data is deleted immediately after its aggregation (subject to any need for investigation of crimes by the Authority).
Purchasing data will be kept for as long as is necessary to fulfill contractual and regulatory obligations. 
Data communicated by the user to send inquiries or to take advantage of the support service will be kept for the amount of time necessary to fulfill the request. 
If you provide your consent to receive promotional communications and subscribe to the newsletter, your personal data will be retained until you request cancellation, which can be exercised at any time.


NATURE OF DATA PROVISION
The provision of data by users of the site is always voluntary; however, in case of failure to provide the data indicated as "mandatory" within the registration forms, the Data Controller will not be able to provide the information or services requested as and when needed. 
Regarding the provision of data for the purpose of subscribing to the company's newsletter service and marketing activities, this is optional, and failure to consent will only result in the inability to be included in the mailing list and be updated on news, offers and business proposals, but will not affect the proper registration of your account and the possibility of making purchases or requesting information/assistance. 


RIGHTS OF DATA SUBJECTS
The subjects to whom the personal data refers may at any time exercise the rights provided for in Articles 15-21 of EU Regulation 679/16, namely: access the data concerning them; obtain its rectification, cancellation, restriction; oppose in whole or in part its processing by contacting the Data Controller. Such requests are processed by the Data Controller free of charge, in the shortest possible time, and in any case within a maximum period of one month.  To exercise these rights, it will be possible to write to the contact information above.
Where applicable, the right to revoke consent at any time is recognised without affecting the lawfulness of the processing based on the consent given prior to revocation.
Right to complain: data subjects who believe that the processing of personal data relating to them carried out through this site occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for in Article 77 of the Regulation itself, or to take appropriate legal action (Article 79 of the Regulation).


 Update 30 January 2026

 


SAYYOU operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). SAYYOU is powered by Shopify, which enables us to provide services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, make a purchase or other transaction through the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or has been de-identified, so it cannot identify you or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
• Contact details including name, address, billing address, shipping address, phone number, and email address.
• Financial information including credit cards, debit cards and financial account numbers, payment card information, financial account information, transaction details, payment method, payment confirmation and other payment details.
• Account information, including username, password, security questions, preferences and settings.
• Transaction information, including items you view, place in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
• Communications with us, including information you include in communications with us, for example, when you send a customer service request.
• Device information, including device data, browser or network connection, IP address, and other unique identifiers.
• Usage information, including data regarding your interaction with the Services, how and when you interact with or browse the Services.

SOURCES OF PERSONAL INFORMATION
We may collect personal information from the following sources:
• Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services, including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
• From our service providers, including when we contract them to enable certain technologies, and when they collect or process your personal information on our behalf;
• From our partners or other third parties.


HOW WE USE YOUR PERSONAL INFORMATION
Depending on how you interact with us or what Services you use, we may use personal information for the following purposes:
• Providing, personalising, and improving services. We use your personal information to provide you with the Services, including executing our contract with you, processing payments, fulfilling orders, saving your preferences and items of interest to you, sending notifications related to your account, processing purchases, returns, exchanges or other transactions, creating, managing and maintaining your account, arranging shipping, facilitating any returns and exchanges, allowing you to post reviews, and creating a personalised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to personalise and better improve the Services.
• Marketing and advertising. We use your personal information for marketing and promotional purposes, such as to send you marketing communications, advertising and promotion via email, text message, or postal mail, and to show you online advertisements for products or services on the Services or other websites, including items you have previously purchased or added to your shopping cart and other activities on the Services.
• Security and fraud prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate, or take action regarding possible fraudulent, illegal, dangerous, or malicious activity, protect public safety, and protect our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials secure. We strongly advise you not to share your user name, password or other login details with anyone else.
• Communicating with you. We use your personal information to offer you customer support, be responsive to you, offer you effective services, and maintain our business relationship with you.
• Legal reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversary legal proceedings, and to enforce or investigate potential violations of our terms or policies.

HOW WE DISCLOSE PERSONAL INFORMATION
Under certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
• With Shopify, providers, and other third parties performing services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).
• With business and marketing partners to offer marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have the right to ask us not to share information about you to show you targeted advertising and marketing based on your online activity with different merchants and websites.
• When you provide us with, request from us or consent to the disclosure of certain information to third parties, such as to ship products to you or through the use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or bankruptcy, complying with any applicable legal obligations (including responding to subpoenas, search warrants and similar requests), enforcing applicable terms of service or policies, and protecting or defending the Services, our rights and those of our users or others.

RELATIONSHIP WITH SHOPIFY
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. The information you submit to the Services will be transmitted and shared with Shopify, as well as with third parties who may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use some Shopify-enhanced features that incorporate data and information obtained from your interactions with our Store, with other merchants, and with Shopify. To provide these improved features, Shopify may use personal information collected about your interactions with our store, with other merchants, and with Shopify. Under these circumstances, Shopify is responsible for processing your personal information, including responding to your requests to exercise your rights regarding the use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit Shopify's Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights regarding your personal information here: Shopify Privacy Portal.

THIRD-PARTY WEBSITES AND LINKS
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee nor are we responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of the information on these sites. Information you provide in public or semi-public places, including information shared on third-party social media platforms, may also be viewable by other users of the Services and/or users of such third-party platforms without restriction on its use by us or by third parties. Our inclusion of such links does not in itself imply any endorsement of the content on those platforms or their owners or operators, except as stated on the Services.

DATA FOR CHILDREN
The Services are not intended for use by children, and we do not knowingly collect any personal information about minors in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you can contact us using the contact information listed below to request its deletion. As of the effective date of this Privacy Policy, we have no actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under the age of 16.

SECURITY AND STORAGE OF YOUR INFORMATION
Please note that no security measure is perfect or impenetrable, and we cannot guarantee "perfect security." Furthermore, any information you send us may not be secure during transit. We advise you not to use unsecured channels to communicate sensitive or confidential information to us.
The length of time your personal information is retained depends on several factors, such as the need for that information to maintain your account, provide you with services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

YOUR RIGHTS AND CHOICES
Depending on where you live, you may have some or all of the rights listed below regarding your personal information. However, these rights are not absolute, they may apply only in certain circumstances, and in certain cases we may refuse your request as permitted by law.
• Right of access / knowledge. You may have the right to request access to the personal information we hold regarding you.
• Right to erasure. You may have the right to request that we delete the personal information we hold regarding you.
• Correction. You may have the right to request that we correct inaccurate personal information we keep regarding you.
• Right of portability. You may have the right to receive a copy of the personal information we hold regarding you, and to request that we transfer it to third parties under certain circumstances and with certain exceptions.
• Management of communication preferences. We may send you promotional emails, and you can opt out of receiving them at any time by using the unsubscribe option shown in our addressed emails. If you opt out, we may still send you non-promotional emails, such as those about your account or orders you have placed.
If you reside in the United Kingdom or the European Economic Area, subject to exceptions and limitations under local law, you may exercise the following rights in addition to those described above:
• Objection to processing and restriction of processing: You may have the right to ask us to stop or limit the processing of our personal information for certain purposes.
• Withdrawal of Consent: When we rely on consent to process your personal information, you have the right to revoke that consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent prior to withdrawal.
You may exercise any of these rights where indicated in the Services or by contacting us using the contact information provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights regarding data processed by Shopify, you can visit https://privacy.shopify.com/en.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required by applicable law. In accordance with applicable laws, you may designate an authorised agent to make requests on your behalf to exercise your rights. Before we accept such a request from an agent, we will require that you provide proof authorising him or her to act on your behalf, and we may require that you verify your identity directly with us. We will respond to your request promptly, as required by applicable law.

COMPLAINTS
If you have complaints about how we process your personal information, please contact us using the contact information provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact information listed below, or file your complaint with your local data protection authority. For the EEA, you can find a list of the authorities responsible for data protection here.

INTERNATIONAL TRANSFERS
Please note that we may transfer, store, and process your personal information outside the country where you live.
If we transfer your personal information outside the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or any equivalent contract issued by the competent authority in the United Kingdom, unless the data transfer is to a country that has been deemed to provide an adequate level of protection.

CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated Privacy Policy on this website, update the "Last Updated" date, and provide notice as required by applicable law.