Strillio
de en es it
Strillio.shop

Privacy notice

DRAFT FOR REVIEW — not an approved contractual version.
Strillio is an idea by YottaNet S.r.l.. Registered address: Via Nuova Chiunzi 106, Maiori (SA), Italia. VAT: 05500240659. Contact: info@strillio.shop. Privacy contact: dpo@strillio.shop.
[DA COMPLETARE: confirm privacy role, any further required corporate details, effective date and actual operating terms].

Privacy requests: dpo@strillio.shop; corporate details appear above. The email address alone does not establish a formal DPO appointment. [DA COMPLETARE: confirm controller, any joint controllers and an appointed DPO if applicable].

Account data may include email, protected credentials, language, country, name and municipality if supplied. Merchant data cover business, locations, category, content and billing. Service data include follows, favourites, coupons, interactions, orders, subscriptions, invoices, tickets and reports. Technical data cover sessions, security and token management. Push uses installation/device tokens, preferences and supported send/open events. Actual data depend on chosen features.

Requested service functions, billing obligations, security, optional newsletters and optional analytics must be distinguished. Contract, applicable legal duties, consent or a documented legitimate interest may apply to different operations. [DA COMPLETARE: specific data/purpose/ground mapping, required versus optional data, consequences and assessments]. A follow does not authorize every message. Newsletter consent is separate and initially disabled; withdraw through preferences or its link without stopping necessary service emails.

Choose an area manually or allow location for relevant results. That permission does not authorize newsletter, push or analytics. [DA COMPLETARE: actual precision and persistence]. Active functions may involve hosting, email, Stripe, Firebase, Apple/Google push, maps and authorized social providers. Not every provider receives all data. [DA COMPLETARE: actual providers, recipients, roles, countries, transfers and safeguards]. Do not assume unrestricted Strillio access to full card credentials.

Accounts, tokens, events, location, coupons, fiscal records, tickets, reports and backups may require different retention criteria. [DA COMPLETARE: verified periods/criteria, deletion and restriction]. Security controls do not promise absolute immunity. Where applicable request access, correction, erasure, restriction, portability, objection or withdrawal and complain to the competent authority, including the Italian Garante. Contact dpo@strillio.shop; avoid unnecessary identity or sensitive documents. Deactivation is not an erasure request. [DA COMPLETARE: rights procedure, minors, automated decisions/profiling and effective date].