Privacy and Data Protection Notice

IN ACCORDANCE WITH ART. 13 OF EU REGULATION 2016/679 – GDPR In compliance with EU Regulation 2016/679 (General Data Protection Regulation, GDPR), Gioielleria Italiana S.r.l. wishes to inform you about the processing of your personal data. This notice refers exclusively to the websites of Gioielleria Italiana S.r.l. (www.gioielleriaitaliana.com – www.amadiamond.com) and does not cover any external links to third-party domains, which are subject to their own privacy notices and for which Gioielleria Italiana S.r.l. cannot be held responsible. Gioielleria Italiana owns the AMA® brand.

1. DATA CONTROLLER

The data controller is GIOELLERIA ITALIANA S.r.l., located in Albissola Marina (SV), Via Poggio del Sole Superiore n. 1, represented by its legal representative. For any issues regarding data processing and the exercise of rights, you can contact the controller at support@gioielleriaitaliana.com - gioielleriaitaliana@pec.it.

2. TYPES OF DATA PROCESSED

Gioielleria Italiana S.r.l. collects and processes the following personal data: • Identifying data (name, surname, address, date of birth, tax code, company name, legal address, VAT number, ATECO code, email, PEC, phone number); • Payment data (bank details, credit/debit card numbers); • Data related to orders and shipment of purchased products; • Possible video recordings within contexts where the company stores, displays, and/or handles valuable goods.

3. PURPOSES AND LEGAL BASIS OF PROCESSING

The personal data provided will be processed in accordance with articles 5 and 6 of the GDPR for the following purposes: • Contract performance and service provision: to create a user profile, purchase products, and provide services through Gioielleria Italiana websites. • Legal and contractual obligations: including administrative, fiscal, and accounting management of orders. • Security and protection of assets: within contexts where the company stores, displays, handles, or delivers valuable goods. • Service communications: to inform about orders and purchased products. The legal basis for the processing of the aforementioned purposes is the performance of the contract (art. 6, para. 1, lit. b of the GDPR). With explicit consent from the user, data may also be used for: • Sending commercial or promotional communications via email regarding products or services similar to those purchased. • Examples: participation in surveys, market research, or promotions, etc. • Profiling activities to personalize the browsing experience and improve commercial offerings. The legal basis for these purposes is explicit consent (art. 6, para. 1, lit. a of the GDPR). The user can withdraw consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

4. TRANSFER OF DATA TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANIZATIONS

Personal data will not be transferred outside the European Union. In case of any such transfer, compliance with data protection regulations will be ensured.

5. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL

Providing the data is necessary for managing orders and service communications. Refusing to provide such data will make it impossible to complete orders. For marketing purposes, consent is optional, and refusal will not affect the provision of core services, but may prevent access to specific products and/or services offered by the data controller.

6. RIGHTS OF THE DATA SUBJECT

The data subject has the right to exercise the following rights under articles 15-22 of the GDPR: • Access, correction, deletion, and portability of personal data. • Restriction or withdrawal of processing. • Filing a complaint with the Data Protection Authority.

7. DATA PROCESSING METHODS AND STORAGE

Data processing is carried out through manual, IT, and telematics tools, ensuring security and confidentiality. Data will be stored for the time necessary to achieve the purposes stated above and in compliance with legal obligations.