Privacy Policy 

1. Data Controller

The data controller for the website www.gemsofrome.com is Eugenio Domenico Soriani, NIF ESZ1187495X, with legal address for notifications at Soriani c/o Integral Asesores, Calle Notario Luis Olivier, 6 – 29602 Marbella, Spain. For any privacy-related requests and questions, you can contact us by email at domenicosoriani@gemsofrome.com or by phone at +34 603 357089.

2. Data Collection

In order to operate the website and the e-commerce functions, we collect the following personal data:

• Identifying Information: Name, email address, tax identification number (NIF), physical and/or legal address.

• Payment Information: Data necessary for completing the purchase (e.g., credit card information, bank transfer details). Payment data is processed securely via payment gateways (Stripe and Xmoney) and is not stored by us.

• Browsing Data: Information such as the user’s IP address and user-agent information (for statistical analysis and website optimization).

• Cookies: We use cookies to collect data about website usage, marketing activities, and to personalize the site. This data may be shared with third parties to improve website visibility and marketing efforts.

3. Purpose of Data Collection

The data collected will be used for:

• Managing user registration and product sales, including payment processing and shipping.

• Sending promotional communications, newsletters, offers, and updates on new products (if the user has consented to receive them).

• Optimizing the user experience through analysis of browsing behavior on the site and personalization.

• Conducting marketing activities to improve the website’s visibility.

4. Data Sharing

We may share personal data with the following third parties:

• Payment Gateways: Stripe (and through Stripe, PayPal, Apple Pay, Google Pay) and Xmoney, which process the payment data securely through SSL encryption.

• Couriers: We share data with couriers and national postal services to ship the purchased products.

• Marketing Software: We share data with platforms like Google Analytics and other marketing tools used to improve the visibility and performance of the website.

5. Data Security

All payment data is processed via 128-bit SSL encryption and protected by advanced security measures, such as firewalls and regular password updates, to ensure the safety of personal data.

6. Data Retention

• If the user simply browses the site without registering, no data is stored except for the user’s country of origin.

• If the user makes a purchase without registering, their data will be stored only for the time necessary to process the purchase, shipping, any potential returns and for compliance with tax and accounting obligations required by Spanish and EU law.

• If the user registers without making a purchase, their data will be retained for a maximum of 5 years for marketing purposes.

• If the user registers and makes a purchase, their data will be stored for at least 10 years for marketing and accounting purposes.

7. User Rights

Users have the right to:

• Access their personal data held by us.

• Request the correction, deletion, or limitation of their personal data processing, in accordance with applicable laws.

• To exercise these rights, the user can send a request to domenicosoriani@gemsofrome.com. We will respond within 14 days of the request.

• In some cases, purchase data cannot be deleted as it is necessary for compliance with tax and accounting obligations required by Spanish and EU law.

8. Changes to the Privacy Policy

Any changes to this Privacy Policy will be communicated via email to registered users. However, users are encouraged to review this Privacy Policy periodically to stay informed of any updates.

9. Contact

For any questions regarding privacy or the processing of personal data, users can contact the data controller at domenicosoriani@gemsofrome.com.

Legal References

The processing of personal data described above is carried out in accordance with the Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD) and the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data (GDPR).

• GDPR: General Data Protection Regulation (Regulation (EU) 2016/679) that sets out guidelines for the collection, processing, and protection of personal data within the European Union.

• LOPDGDD: Spanish law that regulates personal data protection and digital rights of individuals in Spain.

In accordance with the law, users have the right to access, rectify, delete, oppose, limit processing, and request data portability.