Privay Policy

Rigoberta Jellini Jewelry respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit or use rigobertajellini.com , contact us, create an account or interact with our online store.

This Policy applies in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek data protection legislation.

Data Controller

The data controller responsible for the processing of your personal data is:

Rigoberta Jellini Jewelry
Eleni Tzeli (Τζέλη Ελένη)
Amalias 16
Trikala, Greece
VAT No.: EL140955453
Tax Office: Trikala
Email: info@rigobertajellini.com

If you have any questions regarding the processing of your personal data or this Privacy Policy, you may contact us using the details above.

Personal Data We Collect

We only collect personal data that is necessary for the purposes described in this Privacy Policy.

Depending on how you interact with the Website, we may collect the following information:

Information you provide directly

When you create an account, place an order, contact us or otherwise use our services, you may provide information such as:

* Full name
* Email address
* Telephone number
* Billing and delivery address
* Account information
* Information contained in communications with us
* Information relating to your orders and interactions with our Website

Information collected automatically

When you browse the Website, certain technical information may be collected automatically, including:

* IP address
* Browser type and version
* Device type
* Operating system
* Date and time of access
* Pages visited
* Referring website or source
* Technical information relating to your interaction with the Website

This information may be collected through cookies and similar technologies, as described below.

How We Use Your Personal Data

We may use your personal data for the following purposes:

* To provide and operate the Website.
* To create and manage your customer account.
* To communicate with you regarding your account or requests.
* To provide customer support.
* To process and manage your interactions with our online store.
* To communicate with you regarding orders or other services you have requested.
* To comply with legal, accounting and tax obligations.
* To maintain the security and integrity of the Website.
* To detect, prevent and address fraud, misuse or security incidents.
* To improve the functionality, performance and user experience of the Website.
* To send newsletters and marketing communications where you have provided the required consent or where otherwise permitted by applicable law.

The specific commercial terms relating to purchases, payments, shipping, cancellations and returns are set out separately in our Terms of Use and applicable store policies.

Legal Basis for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases under the GDPR:

Performance of a contract

Where processing is necessary to provide a service or fulfil an agreement with you.

Legal obligations

Where processing is necessary for compliance with legal, tax, accounting or other regulatory obligations.

Legitimate interests

Where processing is necessary for our legitimate interests, such as maintaining website security, preventing fraud, improving our services and managing our business, provided that these interests are not overridden by your rights and freedoms.

Consent

Where you have given us your consent for a specific processing activity, such as certain marketing or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Cookies and Similar Technologies

The Website uses cookies and similar technologies to ensure its proper operation and, where applicable, to improve functionality, analyse usage and support marketing activities.

Cookies may be used for purposes such as:

* Maintaining essential Website functionality.
* Remembering user preferences.
* Supporting account and shopping functionality.
* Maintaining security.
* Understanding how visitors use the Website.
* Measuring Website performance.
* Supporting marketing and advertising activities where applicable and where the required consent has been obtained.

Essential cookies may be necessary for the Website to function correctly.

Where required by applicable law, non-essential cookies will only be activated after obtaining your consent.

You may manage your cookie preferences through the cookie consent mechanism provided on the Website. You may also control cookies through your browser settings.

Marketing Communications

If you choose to subscribe to our newsletter or other marketing communications, we may use your email address to send information about:

* New jewellery pieces
* New collections
* News and announcements
* Special offers or promotions
* Other information relating to Rigoberta Jellini Jewelry

Marketing communications are optional and are not required to make a purchase.

You may unsubscribe at any time by using the unsubscribe option included in our marketing emails or by contacting us at:

info@rigobertajellini.com

Where applicable, we may use third-party email marketing providers to manage and deliver these communications. Such providers process personal data only as necessary to provide their services to us.

Sharing of Personal Data

We do not sell or rent your personal data.

Your personal data may be shared with third parties only where this is necessary for the purposes described in this Privacy Policy, to operate our business, or where required by law.

Depending on the services used by the Website, these recipients may include:

* Website hosting and technical service providers
* IT and website maintenance providers
* Payment service providers
* Delivery and courier providers
* Email and newsletter service providers
* Analytics and technology providers
* Professional advisers, where necessary
* Public authorities or other entities where required by law

Where third parties process personal data on our behalf, we take appropriate measures to ensure that such processing is carried out in accordance with applicable data protection requirements.

Third-Party Services

The Website may use services provided by third parties for purposes such as payments, website functionality, analytics, communication, security or marketing.

These third-party services may process certain information in accordance with their own privacy policies.

Where appropriate, we require such providers to implement appropriate security and data protection measures and to process personal data only for specified purposes.

The Website may also contain links to third-party websites, including social media platforms. We are not responsible for the privacy practices or content of websites operated by third parties.

International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer is carried out in accordance with the GDPR and that an appropriate level of protection is maintained, including where required through applicable safeguards such as an adequacy decision or appropriate contractual safeguards.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Different types of information may therefore be retained for different periods depending on the purpose and applicable legal requirements.

For example, certain information may need to be retained for accounting, tax or legal purposes even after our relationship with you has ended.

When personal data is no longer required, it will be securely deleted or anonymised where appropriate.

Data Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

While we take appropriate measures to protect your personal data, we cannot guarantee absolute security.

Your Rights Under the GDPR

Subject to the conditions and limitations provided by applicable law, you have the following rights regarding your personal data:

Right of access

You may request confirmation as to whether we process your personal data and request access to that data.

Right to rectification

You may request correction of inaccurate personal data or completion of incomplete information.

Right to erasure

You may request deletion of your personal data where the applicable legal requirements are met.

Right to restriction of processing

You may request that the processing of your personal data be restricted in certain circumstances.

Right to object

You may object to certain processing activities, including processing based on legitimate interests and direct marketing.

Right to data portability

Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at:

info@rigobertajellini.com

We may need to request additional information to verify your identity before processing certain requests.

Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Greece, the competent authority is:

**Hellenic Data Protection Authority (HDPA)**
Website: www.dpa.gr

You may also contact the relevant data protection supervisory authority in your country of residence or place where you believe an infringement has occurred, where applicable.

Children's Privacy

The Website is not intended to knowingly collect personal data from children without the appropriate consent where such consent is required by applicable law.

If you believe that a child has provided us with personal data without the required consent, please contact us so that we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, Website functionality, applicable laws or our data processing practices.

Any updated version will be published on this page with the relevant “Last updated” date.

We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, the way we process personal data, or wish to exercise any of your data protection rights, please contact:

Rigoberta Jellini Jewelry
Eleni Tzeli (Τζέλη Ελένη)
Amalias 16
Trikala, Greece
VAT No.: EL140955453
Tax Office: Trikala
Email: info@rigobertajellini.com