Privacy Policy

Privacy Policy

Information on the processing of personal data

In compliance with the provisions of the European Regulation EU 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, We inform you about the processing of your data to ensure the protection of your rights and freedoms. More specifically, we inform you of the categories of data processed, the purposes, methods, nature of the provision, integrity and confidentiality, scope of communication and dissemination, the possibility of data transfer to third countries, the retention period, and the existence of profiling processes. 

Purpose of collection

Personal data is collected by MADAM when you browse or use social media applications, such as data on your behavior recorded through cookies or similar technologies, as detailed in the Cookie Policy available on the Site at: www.jewelsbymadam.com, through product sales services or the sending (via regular mail, email, text message, social networks, instant messaging) of communications about our creations, exclusive sales and similar events or initiatives organized by MADAM, or with the participation of MADAM (including any invitations to such events), as well as through the information newsletter.

Personal data is provided directly by you (for example, when creating an account on the website/app, when making purchases, or during any interaction with the live chat), or collected passively (for example, through tracking tools such as browser cookies), or through third parties (for example, social media platforms).

Treatment methods

Your personal data will be processed in accordance with the principles set forth in the Regulation. More specifically:

  1. a) processed lawfully, fairly and in a transparent manner towards you (“ lawfulness, fairness and transparency ”);
    b) processed in a manner that is not incompatible with the purposes for which they are processed (' purpose limitation ');
  2. c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (' data minimisation ');
  3. d) accurate and, where necessary, kept up to date; taking all reasonable steps to promptly erase or rectify inaccurate data, having regard to the purposes for which they are processed (" accuracy ");
    e) stored in a form which permits your identification for a period of time not exceeding the achievement of the purposes for which they are processed; (" storage limitation ");

     f) processed in a manner that ensures appropriate security of your personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘ integrity and confidentiality ’).

     The Data Controller is responsible for compliance with the above-mentioned methods (" responsibility ").

Lawfulness, accuracy and transparency of data (nature of provision)

Your data will be provided and subsequently processed by MADAM only after you have filled in the information required to purchase products or create a user profile or subscribe to the newsletter, after having read and understood this document contained in the link, which must be followed by checking the appropriate box.

If you decide you are no longer interested in the aforementioned services, you can revoke your consent and opt-out at any time as easily as you originally granted it. Specifically, you must send your request to info@jewelsbymadam.com , as well as any changes to inaccurate data or updates to the same.

To this end, we also inform you that the future withdrawal of consent does not affect the lawfulness of the processing based on the consent previously granted.



Restriction of processing of personal data

This data will be used solely for the purposes mentioned above, as well as for commercial purposes such as promotional campaigns. If this data is required for additional purposes not covered herein, MADAM will request your express consent to such further processing.

In this sense, in accordance with the principle of data minimization, for the aforementioned services you will be asked to provide adequate, relevant, and limited data for the aforementioned purpose, as set forth in Article 5, paragraph 1, letter c).

Data integrity and confidentiality 

Your data will be stored by MADAM on dedicated storage servers or archived in a backup copy.

Such personal data will also be monitored by MADAM, taking into account the knowledge acquired based on technical progress, the nature of the data, and the specific characteristics of the processing. This is done in order to minimize, through the adoption of appropriate and preventive security measures, the risks of destruction or loss, even accidental, of the data, unauthorized access, or processing that is not permitted or inconsistent with the purposes of collection.

To this end, we have planned a careful risk analysis of the production process according to the principle of privacy by design, thus ensuring the accuracy, integrity, confidentiality, and security of the data, as well as their effective deletion upon request. 

The analysis is implemented concretely by drafting and updating the register of processing activities, which describes the processing performed and the security procedures adopted.

Scope of communication and dissemination of data

The data you provide will be processed solely by employees and/or collaborators specifically and explicitly assigned to manage the website and the newsletter, as well as automated means such as email, servers, and computers.

Your personal data may not be disclosed or communicated to third parties by our company, except to comply with obligations imposed by law, a regulation, or an EU law, to comply with orders from legitimate public authorities, or to assert a right in court.

Data transfer outside the EU

Your personal data will not be transferred under any circumstances to third countries outside the European Union or to international organizations. Should a cross-border transfer subsequently become necessary, we will require your explicit and informed consent. Such transfer must, however, comply with the provisions of Chapter V, which aim to ensure the protection of your data so as to ensure effective protection.

Storage times

The data you provide will be retained for the time strictly necessary to provide the service for which you provided it and, more generally, as required by law, EU regulations, or specific provisions issued by the Guarantor Authority.

Rights of the interested party

We inform you that at any time you may exercise the rights expressly provided for by EU Regulation 2016/679, Articles 13 to 23, transcribed in the link provided here: download attachment .

So, you will be able to:

- request access to your data, rectification, erasure, integration of incomplete data, limitation of processing to the purposes stated above, receipt of data in a structured, commonly used and machine-readable format, and object, in whole or in part, to the processing of your data;

- alternatively, lodge a complaint with the supervisory authority (Article 77), an effective judicial remedy against the supervisory authority (Article 78), and/or an effective judicial remedy against the data controller or processor, following the procedures and instructions on the Guarantor Authority's website;

- withdraw consent without affecting the lawfulness of processing based on consent given prior to its withdrawal.

How to exercise your rights and respond

Your rights may be exercised by email or certified email to the addresses indicated in the form for exercising your rights. To facilitate this exercise, please download the attached form. (Attach doc. 2)

MADAM, directly or through its representative, will provide you with the information relating to the request submitted without undue delay and, in any case, within 30 days of receiving the request itself.

This deadline may be extended by an additional 60 days if necessary, taking into account the complexity and number of requests. If so, we will inform you of this extension and the reasons for the delay within 30 days of receiving the request.

If we do not comply with your request, we will inform you without delay, and no later than 30 days after receiving the request, of the reasons for non-compliance and of the possibility of lodging a complaint with a supervisory authority and seeking judicial remedy.

If you submit your request by electronic means, the information will be provided, where possible, by electronic means unless you indicate otherwise.

The information provided to you and any communications/actions taken will be free of charge.

If your requests are manifestly unfounded or excessive, in particular due to their repetitive nature, our company may:

  1. (a) charge a reasonable fee taking into account the administrative costs incurred in providing the information or communication or taking the action requested;
  2. b) refuse to comply with the request.

To this end, the data controller will have the burden of demonstrating the manifestly unfounded or excessive nature of the request.

If MADAM has reasonable doubts about your identity, as you are exercising your rights as per the request referred to in Articles 15 to 21, it may request further information from you in order to confirm your identity.

Owner and Data Controller

The Data Controller is Thessa Lacovich, VAT number: 12717860964.

The document containing the Register of processing activities and the list of those responsible for processing is available from the aforementioned Data Controller.

For further information, please visit the website http://www.garanteprivacy.it and the FAQs provided therein from the Italian Data Protection Authority: EC Regulation, European Parliament 27/04/2016 n. 679, Official Journal 04/05/2016 - General Data Protection Regulation.