Skip to main contentSkip to footer
Biscioni Gioielli logo

Privacy Policy

Last updated: October 10, 2026

This notice explains how Gioielleria G.Biscioni Srl.u processes the personal data of visitors to www.biscionigioielli.it, under Regulation (EU) 2016/679 ("GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).

Data controller

Gioielleria G.Biscioni Srl.u, Ponte Vecchio 38r, 50125 Florence (FI), Italy. VAT number 07321130481.

Email: mail [at] biscionigioielli.com. Phone: +39 055 212186.

The controller has not appointed a Data Protection Officer (DPO), as it is not required to do so.

Data we process

  • Browsing data: IP address, browser and device type, pages visited, date and time of requests. These are collected automatically by the systems that run the website.

  • Data sent through the contact form: first name, last name, email address and message.

  • Questions written to the virtual assistant.

  • Visit statistics, only if you consent to measurement (Google Analytics 4).

  • Cookie preferences, to remember your choice.

Please do not enter special categories of data, such as health information, or data about other people in the contact form or in the virtual assistant.

Why we process data, on what basis and for how long

Operation and security of the website

We process browsing data to display pages, protect the website from abuse and fix technical problems. Legal basis: the controller's legitimate interest in the security and proper functioning of the website (Art. 6(1)(f) GDPR). Technical logs are kept for a limited period set by the hosting provider and then deleted. The website's database and images are copied in encrypted form (backup) after every change to the website and in any case every 15 days, so they can be restored in case of failure: only the 4 most recent copies are kept, older ones are deleted automatically.

Replying to contact form requests

We use contact form data only to reply to you. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). The message is stored in the website's management panel and forwarded to the shop's email address through the Brevo service. Messages are kept for 24 months and then deleted automatically, unless the law requires otherwise. Without this data we cannot reply.

Virtual assistant

The virtual assistant is an automated program that answers questions about Biscioni Gioielli using only the content published on the website. The text of each question is sent through the OpenRouter service (OpenRouter Inc., USA) to the Claude artificial intelligence model by Anthropic PBC (USA), which generates the answer. Questions and answers are stored in the management panel for 12 months to check the quality of the service and prevent abuse, and then deleted automatically. The IP address is used only temporarily to limit the number of questions and is not stored. Legal basis: the controller's legitimate interest in providing information to visitors (Art. 6(1)(f) GDPR). The assistant makes no decisions with legal effects on you (Art. 22 GDPR) and using it is optional.

Contact via WhatsApp

The WhatsApp button opens a conversation with the shop in the WhatsApp app. The website sends no data to WhatsApp until you tap the button. From then on, messages are also processed by WhatsApp Ireland Limited, as an independent controller, under the WhatsApp privacy policy. We use the messages only to reply to you (Art. 6(1)(b) GDPR).

Visit statistics (Google Analytics 4)

Only with your consent to measurement (Art. 6(1)(a) GDPR) we collect visit statistics with Google Analytics 4, provided by Google Ireland Limited. Google Analytics 4 does not log IP addresses. Statistics cookies last up to 2 years. You can withdraw your consent at any time from the "Cookie preferences" link at the bottom of every page. More information: Google privacy policy.

Map on the Contacts page (Mapbox)

The interactive map loads only with your consent to the "Experience" category (Art. 6(1)(a) GDPR). When the map is active, your browser connects to the servers of Mapbox Inc. (USA), which receive your IP address and technical data about your device. More information: Mapbox privacy policy.

Legal obligations and protection of rights

Data may be processed to comply with legal obligations (Art. 6(1)(c) GDPR) and to defend the controller's rights in court (Art. 6(1)(f) GDPR), for as long as these purposes require.

Who receives the data

Data are not sold or disclosed to the public. They can be accessed by authorized shop staff and by the providers that help us run the website, appointed as processors (Art. 28 GDPR) or, where stated, acting as independent controllers:

  • Railway Corporation (USA): hosting of the website, database and images, on servers in the Netherlands (European Union).

  • Cloudflare, Inc. (USA): DNS management for the website's domains and redirection of biscionigioielli.it, biscionigioielli.com and pontevecchio.biz to www.biscionigioielli.it, for which it receives the IP address and technical data of the request, without using cookies; R2 service: storage of the website's encrypted backup copies, in data centers in the European Union, without being able to read their content.

  • Brevo (Sendinblue SAS, France): delivery of contact form messages to the shop's email address, with data processed in the European Union.

  • OpenRouter Inc. (USA) and Anthropic PBC (USA): processing of questions to the virtual assistant.

  • Google Ireland Limited (Ireland): visit statistics, only with your consent.

  • Mapbox Inc. (USA): map on the Contacts page, only with your consent.

  • WhatsApp Ireland Limited (Ireland), independent controller: only if you message the shop on WhatsApp.

  • The technician who maintains the website, for the time and to the extent needed for the work.

The up-to-date list of processors is available from the controller on request.

Transfers outside the European Union

The website, its database, the backup copies and the delivery of contact form emails remain in the European Union. Some providers listed above (OpenRouter, Anthropic, Mapbox, Cloudflare for redirects and possibly Google) may process data in the United States. In these cases the transfer relies on the European Commission's adequacy decision (EU-US Data Privacy Framework) for participating providers, or on the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR). You can ask the controller for information on the safeguards in place.

Your rights

You can ask the controller at any time for:

  • access to your data and a copy of it (Art. 15 GDPR);

  • correction of inaccurate data (Art. 16);

  • erasure of your data (Art. 17);

  • restriction of processing (Art. 18);

  • portability of the data you provided (Art. 20);

  • objection to processing based on legitimate interest (Art. 21);

  • withdrawal of consent at any time, without affecting processing already carried out (Art. 7). For cookies, use the "Cookie preferences" link at the bottom of the page.

To exercise your rights, write to mail [at] biscionigioielli.com. Requests are free of charge and you will receive a reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of the country where you live or work.

Children

The website is not intended for children under 14 and we do not knowingly collect their data.

Cookies

For the cookies and similar technologies used by the website, see the cookie policy.

Changes to this notice

We may update this notice when the website's services or the law change. The date of the last update is shown at the top. If changes concern processing based on consent, we will ask for your consent again.