Privacy Policy and Data Processing

UNDER ART. 13 OF REG. EU 2016/679 – GDPR In compliance with Regulation EU 2016/679 (General Data Protection Regulation, GDPR), Gioielleria Italiana S.r.l. wishes to inform you about how your personal data is processed. This information refers exclusively to the websites of Gioielleria Italiana S.r.l. (www.gioielleriaitaliana.com – www.amadiamond.com) and does not cover external links to third-party domains, which are subject to their own policies and for which Gioielleria Italiana S.r.l. cannot be held responsible. Gioielleria Italiana owns the AMA® trademark.

1. DATA CONTROLLER

The Data Controller is GIOELLERIA ITALIANA S.r.l., with registered office in Albissola Marina (SV), Via Poggio del Sole Superiore n. 1, represented by its legal representative pro tempore. For any issues related to the processing of personal data and the exercise of rights, you can contact the Data Controller at the email addresses support@gioielleriaitaliana.com - gioielleriaitaliana@pec.it.

2. TYPES OF DATA PROCESSED

Gioielleria Italiana S.r.l. collects and processes the following personal data: • Identifying data (name, surname, address, date of birth, tax code, company name, registered office, VAT number, ATECO code, email, PEC, phone number); • Payment data (bank details, credit/debit card numbers); • Data related to orders and shipping of purchased products; • Possible video recordings in contexts where the Company keeps, displays, and/or makes available valuable goods.

3. PURPOSES AND LEGAL BASIS OF PROCESSING

The personal data provided will be processed in accordance with Articles 5 and 6 of the GDPR for the following purposes: • Contract or service execution: to enable the creation of a user profile, purchase of products, and provision of services through the Gioielleria Italiana S.r.l. websites. • Compliance with legal and contractual obligations: such as administrative, fiscal, and accounting management of orders. • Security and protection of assets: in the context of access to company premises, fairs, and/or events where valuable goods are kept, displayed, handled, or delivered. • Service communications: to inform about orders and purchased products. The legal basis for the processing of the above purposes is the execution of the contract (art. 6, par. 1, lit. b) of the GDPR). With the explicit consent of the user, data may also be used for: • Sending commercial or promotional communications by email regarding products or services similar to those purchased. • For example: participation in surveys, market research, or promotions, etc. • Profiling activities to personalize the browsing experience and improve the commercial offer. The legal basis for these purposes is explicit consent (art. 6, par. 1, lit. a) of the GDPR). The user can withdraw consent at any time, without affecting the legality of the processing carried out before the withdrawal.

4. TRANSFER OF DATA TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANISATIONS

Personal data will not be transferred outside the European Union. In case of any need for transfer, compliance with data protection regulations will be ensured.

5. NATURE OF PROVISION AND CONSEQUENCES OF REFUSAL

Providing data is necessary for managing orders and service communications. Refusal to provide such data will result in the inability to complete orders. Regarding marketing purposes, consent is optional and refusal will not affect the provision of main services, but such refusal may result in the inability to access specific products and/or services offered by the Data Controller.

6. DATA SUBJECT RIGHTS

The data subject has the right to exercise the following rights under Articles 15-22 of the GDPR: • Access, rectification, deletion, and portability of personal data. • Limitation or revocation of processing. • Filing a complaint with the Data Protection Authority.

7. PROCESSING METHODS AND DATA RETENTION

Data processing is carried out using manual, IT, and telematic tools to ensure security and confidentiality. Data will be retained for the time necessary to achieve the stated purposes and in accordance with legal obligations.