PRIVACY POLICY
Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)
1. Data controller
The data controller is Lorini Gioielli di Mauro Lorini, Via D. Luigi Sturzo 198/2, Arezzo (AR), Italy, VAT no. IT01481270518. Contact: info@lorinigioielli.com.
2. Data processed
The site collects: data voluntarily provided by the user (first name, surname, email address, telephone number, content of the message) through contact forms, WhatsApp or email; data needed for orders, shipping and invoicing; browsing data (IP address, browser type, pages visited) and data collected through cookies, as described in the Cookie Policy.
3. Purposes and legal bases
To answer requests for information and contact (Art. 6.1.b GDPR); to manage orders, payments, shipping and customer service (Art. 6.1.b); to comply with legal, tax and accounting obligations (Art. 6.1.c); to ensure the security and proper functioning of the site (Art. 6.1.f); with the user's consent, for statistics and marketing through non-technical cookies (Art. 6.1.a).
4. Processing methods and retention
Data are processed by electronic and paper means, with appropriate security measures. They are kept for as long as necessary for the purposes stated and, for accounting and tax data, for 10 years. Contact data are kept for as long as necessary to answer the request.
5. Recipients of the data
Data may be shared with suppliers acting as data processors, including Wix.com Ltd. (the platform hosting the site and online shop), payment service providers, couriers and shipping agents, and tax and accounting advisers. Data are not disclosed or sold to third parties. Some suppliers may process data outside the European Economic Area, with appropriate safeguards under Articles 44 et seq. of the GDPR.
6. Your rights
You may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection (Articles 15-22 GDPR), and withdraw your consent, by writing to info@lorinigioielli.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
7. Provision of data
Providing the data marked as mandatory is necessary to answer requests and complete orders; failure to provide them makes it impossible to provide the requested service.
8. Changes
This notice may be updated. Last updated: October 2026.