Privacy Policy

Data Controller

The Data Controller is NESI SPARTACO – Sole Proprietorship, operating under the trade name Arti Orafe.

Email: info@gioielleriartiorafe.it

Collected Data

The following may be collected:

  • identifying data;
  • contact data;
  • shipping and billing data;
  • payment data;
  • technical and navigation data.

Purposes of Processing

  • order management;
  • shipping;
  • customer support;
  • tax and legal compliance;
  • website security;
  • optional marketing with prior consent.

Legal Basis

Processing is based on:

  • contract performance;
  • legal obligations;
  • user consent;
  • legitimate interest of the controller.

Data Retention

Data is retained for the time necessary for the stated purposes and legal obligations.

Data Subject Rights

Users may exercise their rights under Articles 15-22 GDPR.

Requests can be sent to info@gioielleriartiorafe.it.

Third-Party Services

The website may use services provided by third parties, including Shopify, Shopify Payments, and PayPal.

Extra-EU Transfers

Some data may be processed outside the European Economic Area in compliance with the guarantees provided by the GDPR.