SMS Information
This Policy was updated on July 30, 2025 .
Pursuant to EU Regulation No. 679/2016 ("GDPR") concerning the protection of natural persons with regard to the processing of personal data, the processing of your information will be based on the principles of correctness, lawfulness and transparency, in order to guarantee the security and confidentiality of the data.
We therefore invite you to carefully read the following Information Notice, so that you are aware of and can consciously express your consent to the use of your data, allowing us to provide you with a service in full compliance with the rights of data subjects.
If you no longer wish to receive SMS messages or other types of communication for advertising or informational purposes, and for the other purposes indicated in the "Purpose of Processing" section of this privacy policy, you may freely revoke your consent by making a request in accordance with the rights granted to you by EU Regulation 2016/679 with reference to articles 15, 16, 17, 18, 19, 20, 21, 22 by contacting SODINI BIJOUX SRLU directly.
Requests should be addressed to:
- via email, at the following address: privacy@sodinibijoux.it
- By Fax ( +39 ) 0583.92.78.44
- or by mail, to SODINI BIJOUX SRLU, Privacy Office, Via Dei Bocchi N°108, 55013 Lammari (Lu).
Furthermore, each SMS will contain instructions on how to unsubscribe.
Data Controller
SODINI BIJOUX SRLU, VAT number 01010690467, with registered office and operating address at Via dei Bocchi N°108 in Lammari (Lu), owner of the website http://www.sodini.com, as Data Controller, provides below the Privacy Policy pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016.
Purpose of the processing
Your personal data is processed for:
• contact her to provide information about current and future offers and promotions;
• send her birthday wishes;
• to verify the level of satisfaction and for any customer loyalty activities.
Types of personal data collected
To fulfill the purpose indicated, the data processed by the Data Controller are collected directly from the data subject and refer to:
• personal data (name, date of birth);
• contact information (phone number).
Legal Basis
The legal basis identified for this purpose is your explicit and unequivocal consent (pursuant to Article 6.1, letter A) of the GDPR).
Protection of collected personal data
For your protection, please note that the data requested from you is only that which is strictly necessary for the fulfillment of the purposes described herein, in compliance with the principle of data minimization as per Article 5, paragraph 1, letter c).
Treatment methods
Regarding the methods, we inform you that the processing of your data may be carried out both manually and electronically, in compliance with Article 32 of EU Regulation 2016/679, by the Data Controller or by persons specifically appointed and authorized by him.
The updated list of appointees and external parties appointed as Data Processors is kept at the Data Controller's headquarters, who, upon your express request, will immediately make it available to you.
According to Article 4, paragraph 2 of the Regulation, processing may consist of any operation or set of operations which is performed on personal data or on sets of personal data, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, disclosure, alignment, combination, restriction, erasure or destruction.
Retention period
The Data Controller will retain your personal data for the time necessary to fulfill the purposes mentioned above and in any case for no more than two years from their collection and until you request their deletion.
Disclosure of data to third parties
Except for any communications necessary to comply with legal obligations, the Data Controller will only communicate the personal data provided to internal personnel formally appointed as authorized data processors, and to external suppliers selected to support the requested service, who have also been duly appointed as Data Processors, such as:
• Parties that provide IT services to the Data Controller, such as companies that perform maintenance and technical assistance activities for information systems, databases, telecommunications networks, and this website.
• Consultants and collaborators;
• Marketing companies;
• Other parties to whom the communication of your data is necessary or otherwise functional to the performance of the activity foreseen by the pre-contractual or contractual relationship;
• Competent authorities, judicial authorities and/or other public bodies, if they request it or if there is a need or obligation to do so.
No data collected through this means is disclosed.
Rights of the data subject
Pursuant to EU Regulation 679/2016, the data subject is recognized and guaranteed the following rights: the right to request access to their personal data from the Data Controller (Article 15), rectification (Article 16), erasure or deletion (Article 17), restriction of processing of their personal data (Article 18), the right to data portability (Article 20), or to object to their processing (Article 21), as well as the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them (Article 22). This processing of personal data is based on the explicit consent provided, pursuant to Article 7, paragraph 3 of the Regulation; therefore, you are entitled to withdraw your consent at any time by completing this form.
Updates and changes
The Data Controller reserves the right to modify, supplement, or periodically update this Privacy Policy in compliance with applicable regulations or measures adopted by the Data Protection Authority. Such modifications or additions will be brought to the attention of the interested parties. We invite users to review this policy regularly to check for updated information and decide whether or not to continue using the services offered.