Privacy policy

BYSIMON

How we handle your data when you visit www.bysimon.it, buy from us or write to us.

Last updated: 10 November 2026

In short
  • We use your data to manage orders, shipping, payments and customer care.
  • Newsletter, personalised ads and statistics only with your consent, which you can withdraw at any time.
  • We do not sell your data.
  • You can ask us at any time to see, correct or delete it.

Who we are

The data controller is Bysimon Group S.r.l., registered office Via Nazionale 289, 83013 Mercogliano (AV), Italy; operational office at Centro Orafo Il Tarì, 81025 Marcianise (CE). Privacy contacts: shop@bysimon.it · tel. +39 0823 513830.

What data we collect

Orders and contactsname, shipping and billing addresses, email, phone, products purchased, returns.
Paymentspayment outcome and references. Full card details are handled only by the payment provider: we never see them.
Accountemail, password (encrypted), preferences, order history.
Messageswhat you write to us by email, WhatsApp or in the site chat.
Browsingtechnical device data and, with your consent, statistics and marketing cookies (see the Cookie Policy).

Why we use it, on what legal basis and for how long

Purpose Legal basis Retention
Managing orders, payments, shipping, returns and warranty Contract (Art. 6(1)(b) GDPR) For the duration of the relationship; tax records 10 years
Tax and accounting obligations Legal obligation (Art. 6(1)(c)) 10 years (Art. 2220 Italian Civil Code)
Customer account Contract (Art. 6(1)(b)) While the account is active or until you ask us to delete it
Customer care (email, WhatsApp, chat) Contract and pre-contractual steps; legitimate interest in replying (Art. 6(1)(b)-(f)) 24 months from the last contact
Newsletter and offers by email, SMS or WhatsApp Consent (Art. 6(1)(a)); for existing customers, offers on similar products (Art. 130(4) Italian Privacy Code), with the option to object in every message Until consent is withdrawn or you object
Statistics and personalised advertising Consent (Art. 6(1)(a)) through the cookie banner As stated in the Cookie Policy
Site security and fraud prevention Legitimate interest (Art. 6(1)(f)) As long as necessary, at most 24 months
Defence in case of disputes Legitimate interest (Art. 6(1)(f)) Until the limitation period expires
Diana, our chat assistant

In the site chat and on WhatsApp you are answered by Diana, an assistant based on artificial intelligence (main provider: Anthropic; in some cases a model running on our own servers). She uses your messages and, if you ask, your order details only to help you: find a product, track a shipment, assist with a return. A member of our customer care team can take over at any time, and Diana makes no decisions with legal effects on you. Please do not share sensitive data in the chat (health, ID documents, full card details).

Who we share data with

Only with the providers we need to offer you our services, appointed as data processors where required, and with authorities when the law requires it. We do not sell your data.

Store and payments
Shopify (store platform) · Shopify Payments · PayPal · Scalapay · Shop Pay / Shop Cash · TikTok Shop (for orders placed there) · our bank for bank transfers
Shipping
BRT · GLS (also via Spedisci.online) · Poste Italiane · DHL
Communications
Klaviyo (email and newsletter) · Meta (WhatsApp) · Anthropic (Diana chat) · Aruba (email)
Statistics and advertising, only with consent
Google · Meta · TikTok · Pinterest · Microsoft · OpenAI · Klaviyo
Others
accountant, consultants and lawyers, bound by confidentiality

Transfers outside the European Union

Some providers (for example Shopify, Google, Meta, Microsoft, Klaviyo, Anthropic, OpenAI) may process data in the United States or other countries. In these cases transfers rely on GDPR safeguards: an adequacy decision (EU-U.S. Data Privacy Framework) or Standard Contractual Clauses approved by the European Commission.

Your rights

  • access your data and get a copy
  • correct it
  • delete it
  • restrict its processing
  • receive it in a readable format (portability)
  • object, in particular to marketing
  • withdraw your consent at any time

Write to shop@bysimon.it: we reply within one month. If you believe the processing is not correct, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your country.

Minors

The store is intended for adults. We do not knowingly collect data from children under 14: if you think this has happened, write to us and we will delete it.

Security

We protect data with appropriate technical and organisational measures: encrypted connections, access limited to authorised staff, backups.

Changes

If we change this policy we update the date at the top and, when needed, we let you know.

For cookies, read our Cookie Policy.