Shop Privacy Policy

1. FOREWORD
Dear Customer, pursuant to Legislative Decree No. 101 of August 10, 2018 (provisions for the adaptation of national legislation to the provisions of the European regulation published in the Official Gazette No. 205 of 04/09/2018) on personal data protection and Articles 13 and 14 of EU Regulation 679/2016 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, SODINI BIJOUX S.R.L.U., as the Data Controller of your personal data, informs you about their use and your rights, so that you can freely and knowingly express your consent, where required. We have always paid particular attention to respecting confidentiality obligations towards our customers and adopt all necessary data protection measures in our activities. We therefore invite you to read the following information carefully before completing this form and proceeding with your expression of consent to processing through your signature.

2. SOURCE OF PERSONAL DATA
The personal data in our possession (consisting, by way of example and not limitation, of name, surname, residence, tax code, fixed and mobile phone number, e-mail address, etc., etc.) are processed in compliance with the law and confidentiality obligations. They are also provided directly by the data subject ("Data Subject") through remote communication techniques that the Data Controller may use. Personal data may also be acquired in the course of its activity or from third parties. In the latter case, we will take care to provide the Data Subjects with the information referred to in the foreword, when registering the data concerning them or, in any case, no later than the first eventual communication. In any case, all data acquired are processed in compliance with the provisions of EU Regulation 679/2016 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and the confidentiality obligations that have always guided us.

3. PURPOSE OF PROCESSING
The personal data provided by you or acquired in the context of our activity will be processed based on principles of correctness, lawfulness, transparency, and the protection of your privacy and rights, for the following purposes:
a) strictly connected and instrumental to the management and execution of relationships, such as the management and execution of the contract, or the assistance purposes provided in relation to our services and/or products (e.g., acquisition of preliminary information for the conclusion of a contract, checks and evaluations on the results of the performance of relationships, as well as on the risks associated with them). The provision of personal data for these purposes and their processing are necessary to provide services and manage relationships. The legal basis for processing is the necessity to execute the stipulated contract and the related pre-contractual measures;
b) fulfillment of obligations provided for by law, regulations, or community legislation, or by provisions issued by Authorities legally authorized to do so and by supervisory and control bodies. The legal basis for processing is the fulfillment of legal obligations to which we are subject;
c) marketing activities. The legal basis that legitimizes processing is consent, which is free to give or not, and which can, however, be revoked at any time. The provision of data necessary for this purpose is not mandatory, and refusal to provide them does not lead to any negative consequences, except for the inability to receive commercial communications.

4. DATA PROCESSING METHODS
In relation to the purposes described in the previous paragraph, personal data are processed, in compliance with the provisions of EU Regulation 679/2016 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and current legislation, using manual, paper, IT, and telematic tools, also automated with logic strictly related to the purposes and in order to guarantee the security and confidentiality of the data themselves (with particular regard to the use of remote communication techniques).

5. CATEGORIES OF DATA SUBJECT TO PROCESSING
In relation to the purposes described in the previous paragraph 3, the Data Controller processes personal data other than "special" categories.
In particular, the processing carried out refers to:
• identifying and contact personal data (e.g., name, surname, residential address, nationality, province and municipality of residence, fixed and/or mobile phone, fax, tax code, e-mail address(es), etc.).
For these reasons, we invite you not to communicate any "special" data to us. However, should the Data Controller, for its operations, need to process "special" data (i.e., data capable of revealing racial and ethnic origin, religious, philosophical, or other beliefs in general, political opinions, membership in parties, trade unions, associations or organizations of a religious, philosophical, political, or trade union nature, as well as personal data capable of revealing health status and sexual life), the Data Controller will take care to send you an addendum to this Information and the relevant request for consent to processing.

6. CATEGORIES OF SUBJECTS TO WHOM DATA MAY BE DISCLOSED
For the pursuit of the purposes described in paragraph 3, the Data Controller may communicate (or they may become aware of) your personal data to third parties belonging to the following categories (who would use the received data as autonomous Data Controllers, or as Data Processors pursuant to Art. 28 of EU Regulation 679/2016 of the
European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC):
1. subjects who provide banking, financial, and insurance services;
2. subjects who perform data acquisition, processing, and elaboration services necessary for the execution of instructions received from customers;
3. subjects who perform activities of transmission, enveloping, transport, and sorting of communications with the Data Subject;
4. subjects who perform document archiving and data entry activities;
5. subjects who perform customer assistance activities (e.g., call centers, help desks, etc.);
6. subjects who perform transport activities;
7. subjects who perform assistance and consultancy activities (e.g., Legal, Tax, etc.).
The list of subjects belonging to the above categories is constantly updated and always available at the Data Controller. Upon your request, the complete list can be requested by writing directly to the Data Controller. Finally, your data may be accessed by individuals authorized to process data, under the direct authority of the Data Controller, who, in relation to the performance of their assigned duties, need to access and process the data.

IN NO CASE WILL THE PROCESSED DATA BE DISSEMINATED

7. MANDATORY NATURE OF DATA
The provision of data is mandatory. Any refusal to provide us, in whole or in part, with your personal data or authorization for processing, could result in the non-execution or partial execution of the contract, or the non-execution of the assignment.

8. DURATION OF PROCESSING
Your data will be stored for the time strictly necessary to fulfill the purposes for which they were collected, in compliance with prescriptive terms or different terms eventually established by law for their retention or, for a longer period, if it is necessary to retain them for the protection of the Data Controller's rights.
Finally, with reference to data processing for marketing purposes, if you have consented, the data will be stored until consent is revoked or for the period established by law or by current or subsequent provisions issued by the supervisory authority, after which they will be deleted or anonymized.

9. RIGHTS OF THE DATA SUBJECT
Finally, we inform you that personal data protection legislation grants Data Subjects the possibility to exercise specific rights. You may, at any time, exercise the rights as expressed by Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, and in particular:
- access to your personal data (and/or a copy of such personal data), as well as further information on the processing underway on them;
- the rectification or updating of your processed personal data, should they be incomplete or outdated;
- the erasure of your personal data from databases, should you deem the processing unnecessary or unlawful;
- the restriction of the processing of your personal data, should you consider that your personal data are not correct, necessary, or are unlawfully processed, or should you have objected to their processing;
- to exercise your right to data portability, i.e., to obtain in a structured, commonly used, and machine-readable format a copy of the personal data provided concerning you, or to request their transmission to another Data Controller;
- to object to the processing of your personal data, using a legal basis relating to your particular situation, which you believe should prevent the processing of your personal data;
- to lodge a complaint with the Supervisory Authority (Privacy Guarantor). The exercise of rights is not subject to any formal constraints and is free of charge.
The right to withdraw consent at any time is always recognized; the withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.
The Data Controller has appointed Mr. Federico Sodini, domiciled for his functions at the headquarters, as the person in charge of responding to the Data Subject in case of exercising rights.
Requests can be submitted to said person in charge in writing or by email to privacy@sodinibijoux.it.
Also in consideration of future changes that may occur in the applicable privacy legislation, we may integrate and/or update, in whole or in part, this Information.
It is understood that any modification, integration, or update will be communicated to you in accordance with current legislation.

SODINI BIJOUX S.R.L.U.
Via dei Bocchi N°108, 55013 Lammari (Lu)
Tel. (+39) 0583.92.78.39 - VAT Number and Tax Code 01010690467
Certified E-mail: amministrazione@pec.sodinibijoux.it