Privacy Policy

The data controller is Si.Ro SRL, Via Speronari 7, 20123 Milano, Italy, VAT No. IT11069930151.

For privacy requests, you can contact SIRO at [email protected].

SIRO has not appointed a Data Protection Officer. Privacy requests should be sent to the email address above.

When you contact SIRO through the website form, your message is delivered to [email protected]. We may process your name, surname, email address, company, subject, message content, and any information you choose to include in your request.

When you browse the website, we may process technical data such as IP address, device and browser information, pages visited, timestamps, cookie choices, and security logs. Analytics data is processed only if you consent to Analytics cookies.

Please do not include unnecessary special category data, such as health information, political opinions, religious beliefs, or other highly sensitive information in the contact form.

SIRO processes contact and B2B enquiry data to respond to requests, evaluate professional collaborations, provide information about collections or services, and manage pre-contractual or contractual communications. The legal basis is the need to respond to your request or take steps before entering into a business relationship.

We process technical and security data to operate, protect, and maintain the website. The legal basis is SIRO's legitimate interest in providing a secure and reliable website.

We process analytics data through Google Analytics 4 only after your consent. You can withdraw or change that consent at any time through the COOKIES link in the footer.

Where SIRO must retain information for accounting, tax, legal, or compliance reasons, the legal basis is compliance with a legal obligation.

Contact form fields are necessary to understand and respond to your enquiry. If you do not provide the required information, SIRO may be unable to process or reply to the request. Analytics consent is optional and is not required to access the website.

Personal data may be processed by authorized SIRO personnel and by service providers supporting website hosting, technical maintenance, email delivery, security, analytics, and business operations.

The website is hosted through Aruba. Kore Agency provides technical maintenance for the website only and may access data where necessary to maintain, secure, or update the site under SIRO's instructions. Contact form messages are received through the mailbox used for [email protected].

SIRO currently uses Google Analytics 4 only for website analytics, and only when Analytics consent has been granted. SIRO does not currently use advertising pixels or alternative analytics platforms on the website.

These providers process data according to applicable data protection obligations and, where required, act as processors on behalf of SIRO.

International transfers may occur mainly in connection with Google Analytics 4, if Analytics consent is granted. Where personal data is processed outside the European Economic Area, SIRO relies on applicable legal transfer mechanisms, such as adequacy decisions, Standard Contractual Clauses, or other safeguards required by data protection law.

Contact and professional enquiry data is retained for the time needed to manage the request and related business relationship, and normally for up to 24 months after the last meaningful interaction unless a longer period is required for legal, accounting, tax, dispute, or compliance reasons.

Technical security logs are retained only for the time needed for website security and maintenance. Analytics data is retained according to the Google Analytics 4 settings and only where Analytics consent has been granted.

You may request access to your personal data, correction, deletion, restriction, portability, and objection where applicable. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You can exercise your rights by contacting [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, or with another competent supervisory authority.

SIRO does not use website data for automated decision-making that produces legal or similarly significant effects on individuals.

SIRO may update this Privacy Policy to reflect changes in the website, services, or legal requirements. The latest version is always published on this page.

Last updated: May 4, 2026