PRIVACY POLICY

This Privacy Policy is provided pursuant to art. 13 of European Regulation no. 679/2016 and applies exclusively to all data collected through the website www.chisakui.com. This Privacy Policy, together with the Cookie Policy, establishes the basis on which User's personal data will be processed.

Data Controller

The Data Controller of the data collected by this website is Chisakui by Paula Alejandra Aguilera Rodriguez, VAT no.: IT: 14234970961, with registered office in Via dei Biancospini 19, 20146, Milan, IT. E-mail: info@chisakui.com

Methods of Personal Data Processing

Personal data provided or acquired through browsing this website will be processed according to principles of fairness, lawfulness, transparency, and protection of privacy in accordance with current regulations.

The Data Controller processes Users' personal data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of personal data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

Types of Data Collected

The data we collect from all visitors:

• Technical information about site usage, browser type and version, operating system
• IP address
• Usage data

Usage data is collected automatically when using the website and may include information such as your device's Internet protocol address (e.g., IP address), browser type, browser version, the pages of our website you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.

Data we may collect:

• When you access the website from or through a mobile device, we may automatically collect certain information, including, but not limited to, the type of mobile device you use, your mobile device's unique ID, your mobile device's IP address, the type of mobile internet browser used, unique device identifiers, and other diagnostic data.
• Your social media account IDs and information shared with us through your social media accounts.
• Third-party authentication status if you visit the site from a mobile application (e.g., if you are currently logged in to Facebook or other social media accounts).

Categories of Personal Data Processed

Among the personal data processed by this website, either independently or through third parties, are: Cookies, usage data, E-mail, and Name. Personal data can be collected independently by the Data Controller or through third parties. Personal data can be voluntarily provided by the User when using the website, by filling out the contact form, or by communicating with the Data Controller via email. Further personal data collected may be indicated in other sections of this Privacy Policy or through informative texts displayed at the time of data collection.

The optional, explicit, and voluntary sending of electronic mail via the Contact Form or by means of the addresses indicated on this website entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the e-mail. Consent to the provision of data by the User is necessary for inclusion in the Data Controller's databases and for the establishment and proper execution of what is offered by the Data Controller to its Users, as well as to third parties for the fulfillment of the single requested activity. Failure to provide data therefore prevents registration in the Data Controller's databases, the conclusion of any contracts, as well as their execution and any other possible activity.

Tools used for personal data processing

Contact Form

By filling out the contact form with their data, the User consents to their use to respond to requests for information, or for any other purpose indicated in the form's header. Personal data collected through the Contact Form: E-mail, Name.

Address management and email sending

These services allow the management of a database of email contacts, phone contacts, or any other type of contact, used to communicate with the User. These services may also allow the collection of data related to the date and time the User views messages, as well as the User's interaction with them, such as information on clicks on links included in the messages.

Newsletter

By subscribing to the newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional content, related to this website may be sent. The User's email address may also be added to this list as a result of registering with this Site or after making a purchase. The User can choose to unsubscribe from the newsletter at any time by clicking on a specific button found within the emails. After clicking the unsubscribe button, the User's Data will be immediately deleted from the "email marketing" software. Personal Data collected: email.

This website uses the newsletter service provided by Mailchimp, which provides a newsletter platform that allows Data Controllers to reach their customers, understand how they interact with such communications and other content, and personalize marketing based on their interests. Personal Data collected: email address. Place of processing: England. Privacy Policy https://www.intuit.com/privacy/statement/

Statistics

Statistical services allow the Data Controller exclusively to monitor and analyze traffic data and serve to track User behavior.

Interaction with Social Networks

These services allow interaction with social networks or other external platforms directly from the pages of this website. The interactions and information acquired by this website are in any case subject to the User's privacy settings for each social network. If a social network interaction service is installed, it is possible that, even if the User does not use the service, it may collect traffic data relating to the pages where it is installed.

Instagram (Meta Platforms Ireland Ltd.)

Instagram buttons are services for interacting with the Instagram social network, provided by Facebook. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy https://help.instagram.com/519522125107875/?maybe_redirect_pol=0

Facebook (Meta Platforms Ireland Ltd.)

Facebook buttons are services for interacting with the Instagram social network, provided by Facebook. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy https://help.instagram.com/519522125107875/?maybe_redirect_pol=0

Address management and email sending

These services allow the management of a database of email contacts, phone contacts, or any other type of contact, used to communicate with the User. These services may also allow the collection of Data related to the date and time the User views messages, as well as the User's interaction with them, such as information on clicks on links included in the messages.

Content on external platforms

These services allow viewing content hosted on external platforms directly from the pages of this Website and interacting with them. If such a service is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages where it is installed.


Payment management

Payment management services allow this Website to process payments via credit card, bank transfer, or other instruments. The Data used for payment is acquired directly by the requested payment service provider without being processed in any way by this Website. Some of these services may also allow scheduled sending of messages to the User, such as emails containing invoices or payment notifications.


This Website uses the following service:

PayPal (Paypal Europe S.à.r.l. et Cie, S.C.A Inc.)
PayPal is a payment service provided by PayPal Europe S.à.r.l. et Cie, S.C.A Inc., which allows the User to make online payments using their PayPal credentials. Personal data collected: Cookies and various types of Data as specified by the service's privacy policy. Place of processing: Luxembourg – Privacy Policy https://www.paypal.com/it/webapps/mpp/ua/privacy-full

Use of Data

We use the personal information we collect to provide you with the requested service, innovate our technology, and optimize your browsing experience. We may use the personal data of all site visitors to administer and improve the site and optimize its infrastructure.

Purposes of Personal Data Processing and Legal Basis

Personal data can be collected independently by the Data Controller or through third parties. In this case, the computer systems and software procedures used to operate this website acquire certain personal data of Users, of a technical-informatic nature (e.g., IP address, type of browser used, operating system, domain name, and addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the internet. This data may be processed solely for the purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.


The data that the User chooses to provide spontaneously are collected to allow the Website to provide its services, as well as for the following purposes:


a) fulfill obligations arising from the contract concluded between the User and the Data Controller for the sale of Products on the Website and to provide the information requested by the User. This processing is mandatory for the execution of the contract to which the User is a party, for the execution of pre-contractual measures or to comply with a legal obligation to which the Data Controller is subject;


b) "Cart" procedure where personal data is entered. The data is processed to execute the concluded Contract, to contact the User regarding the Contract and for its management, for the management of assistance requests, withdrawal requests, management and resolution of the Contract itself. This processing is mandatory for the execution of the contract to which the User is a party.


c) fulfill any type of obligation contemplated and provided for by current laws, regulations, related norms and commercial uses, in particular, in tax/fiscal matters. This processing is mandatory to comply with a legal obligation to which the Data Controller is subject;


d) other accessory purposes or purposes related to those indicated above and in any case falling within the scope of the Website's activities;


e) respond to specific requests addressed to the Data Controller by the User for informational communications related to the Data Controller's Services, via email messages or by filling out the Contact Form and other communication tools such as telephone. This processing is optional and based on the User's consent, however, failure to communicate one or more data will make it impossible to respond to the request for information and to use the services offered by the Data Controller;


f) carry out statistical analyses on aggregated and anonymous data to analyze User behavior to improve the products and services provided by the Data Controller as well as to meet the User's expectations.

Data Communication

In addition to the Data Controller, in some cases, the data may be accessed by:


a) Persons authorized to process data, specifically trained and involved in the organization of the Website (administrative, commercial, marketing, legal personnel, system administrators).

b) External parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Processors, if appointed, can always be requested from the Data Controller.

c) Public or private entities that can access the data in compliance with legal obligations;
d) entities that perform ancillary and instrumental tasks with respect to the Data Controller's activity.


Place of Processing and Data Transfer Abroad

The Data is processed at the Data Controller's operational headquarters. For further information, the Data Controller can be contacted. The Data may be processed by natural persons and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and located in EU or non-EU member countries. In the event that Data is transferred outside the EEA, the Data Controller will adopt all appropriate contractual measures to ensure adequate Data protection.

Duration of Processing

As expressly provided for by art. 5, para. 1, letter e) of the GDPR, data is stored for the time necessary for its processing in relation to the performance of the service requested by the User or required by the Purposes described in this document and in particular:


a) Data collected for contractual obligations will be stored for the time necessary to fulfill the aforementioned purposes and as required by law.

b) Data collected for tax/administrative obligations or contractual obligations will be stored for the time necessary to fulfill the aforementioned purposes and as required by law.

c) Data collected for purposes attributable to the Data Controller's legitimate interest will be retained until such interest is satisfied.

d) Data collected based on the User's Consent may be stored until such Consent is revoked.

e) Data may be stored by the Data Controller for a longer period in compliance with legal obligations or by order of an authority.


The User can obtain further information regarding the legitimate interest pursued by the Data Controller by contacting the Data Controller.
At the end of the retention period, personal data will be deleted and therefore, the rights of access, deletion, rectification, and data portability can no longer be exercised.

How to update and modify data

For users in the European Union, the European Economic Area, and Switzerland, there is also the right to:

a. access personal data;

b. obtain the rectification or erasure thereof or the restriction of processing concerning them;

c. object to processing;

d. data portability;

e. withdraw consent, where provided: the withdrawal of consent does not affect the lawfulness of processing based on consent given before withdrawal. The withdrawal of consent includes the option to unsubscribe from our e-mailing list at any time or to contact us to request removal from our text message lists.

f. lodge a complaint with the supervisory authority (www.garanteprivacy.it).

For your protection, we can only share and update personal data associated with the email address you use to send us your request, and we may need to verify your identity before doing so. We will respond to such requests in a reasonably timely manner. Please do not send sensitive personal data, passwords, or credit card details via email.

Cookies

This website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and ads, provide social media features, and analyze traffic.

For information about the Cookies on this website, please consult our Cookie Policy.

Security Measures Adopted

This Website, to ensure the security of personal data entry, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, transactions and data transmitted on websites occur with maximum security, and the content of the communication is not read or manipulated in any way by third parties.

Changes to the Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users on this page. Therefore, please consult this page frequently, referring to the date of the last modification indicated at the bottom.

In case of non-acceptance of the changes made to this Privacy Policy, the User is required to cease using this website and can request the Data Controller to remove their personal data.

Unless otherwise specified, the previous Privacy Policy will continue to apply to personal data collected until that moment.

Privacy Policy updated on 07/05/2026

© 2026 Chisakui. All rights reserved.