Free Shipping · Up to 50% Off · Made in Italy

Privacy Policy

PRIVACY NOTICE

In this section, in accordance with the new European legislation introduced by EU Regulation 679/2016 and Italian legislation (Legislative Decree No. 196/2003), information is provided regarding the processing of the personal data of Users who visit the pages of the website www.cupidodesign.com (hereinafter: “Website”) or who use the purchasing services made available on it (hereinafter “Users” or “Data Subjects”).

This privacy notice is provided exclusively for the Website and not for any other websites that users may access through links contained on the Website.

Data controller 

Email address for contacting the data controller and requesting the deletion of your data, if collected, subject to your consent: info@cupidodesign.com.

***

A - Types of data processed

I. Identifying data

In accordance with the new European legislation introduced by EU Regulation 679/2016 and Italian legislation (Legislative Decree No. 196/2003), browsing the Website and any purchase of products sold on the Website may involve the processing of data capable of directly or indirectly identifying a natural person, such as: first name, last name, residential address, email address, telephone number, and IP address. 

The Website does not require the Data Subject to provide so-called “special categories” of data, namely, as provided for by the GDPR (Art. 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, or data relating to the person’s health, sex life, or sexual orientation. If the requested service requires the processing of such data, the Data Subject will first receive specific information and will be asked to provide explicit consent.

II. Banking data

When purchasing the products available on the Website, banking data will also be processed, such as the card number or bank account number provided to make the payment, and the cardholder and bank account holder.

III. Browsing data

Browsing data is data collected automatically by the systems and programs responsible for operating the Website and is necessary for using web services [e.g., IP addresses, the browser used, domain names of the systems used by users to connect to the web portal, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment].

Such data are also collected when the user has not registered on the Site or requested information.

Browsing data are used exclusively in aggregate form to compile anonymous statistics on visits to the Site and to check its proper functioning. They do not enable the identification of the users concerned and are also deleted immediately after being processed in anonymous form.

They may, however, be used to establish liability in the event of cybercrimes committed against the website.

IV. Data provided voluntarily by the user

The personal data voluntarily provided by the User (such as first name, last name, and e-mail address) for the purpose of sending messages to the Site and/or purchasing the products made available are used solely to respond to the data subject’s needs and to comply with legal obligations. 

The legal basis for such processing is the performance of services relating to the requests made and purchases completed, as well as compliance with legal obligations.

The information that the Site User chooses to make public through the services and tools provided by the Site is supplied knowingly and voluntarily by the User, releasing the Site from any liability for any violations of the law. 

The User is responsible for verifying that they have permission to enter personal data belonging to third parties or content protected by national and international laws.


V. Data collected through analytics cookies

The Site also collects data relating to the user through the use of cookies.

For more information about the data processed through cookies, the types of cookies active, and how to disable them, please refer to the cookie policy.

These cookies are used to track the user’s browsing preferences and to collect statistical data. The user may disable these cookies by accessing their browser settings, as indicated in the Site’s cookie policy.

***

B - Purposes of processing

The personal data collected are used for:

  • to enable shipment of the products purchased by the User; 
  • to obtain anonymous statistical information about the use of the website;
  • to check the proper functioning of the website;
  • the sending of communications and newsletters, in both paper and electronic format, to the e-mail address provided by the user;
  • establishing liability in the event of alleged cybercrimes against the website;
  • compliance with any other legal obligation not included among the purposes above.

Data may be disclosed only following a request from the Judicial Authority in accordance with the law.

***

C - Legal basis for processing

I. Performance of a contract

The legal basis for processing personal data is the performance of obligations arising from the relationship established through the purchase of products, acceptance of the Terms and Conditions, compliance with legal obligations, and the Website's legitimate interest in carrying out processing necessary for these purposes.

II. Consent of the data subject

The optional, explicit, and voluntary sending of emails, messages, or any type of communication to the contact details indicated on this Website entails the subsequent acquisition of the sender's email address, telephone number, or any other personal data, which will be used to respond to requests. Such processing is based on the data subject's consent. 

It is ensured that such processing will be based on the principles of lawfulness, fairness, transparency, adequacy, relevance, and necessity referred to in Article 5, paragraph 1 of the GDPR. Specific summary privacy notices will progressively be included or displayed on the pages of the websites prepared for particular services upon request.

III. Compliance with legal obligations

Personal data may be processed without the data subject's consent when the Data Controller must comply with a legal obligation.

IV. Optional nature of providing data

Except as specified for the performance of the contract or legal obligations, cookies, and browsing data, users are free to provide their personal data or not. However, failure to provide the data may make it impossible to obtain the service.

***

D - Methods and duration of processing

Personal data is processed using computer systems and in compliance with EU Regulation No. 679/2016 and Legislative Decree No. 196/2003.

The retention of the processed data will last for the time necessary for the purposes described in this privacy policy and, therefore, for the minimum necessary period or until an explicit request from the data subject, and in any event in compliance with the time limits imposed by law.

The Data Controller undertakes to adopt all appropriate security measures to prevent the loss and alteration of personal data, as well as any unlawful or unauthorized use thereof.

The data will be processed exclusively by parties authorized by the Data Controller, including any data processors, representatives, and public entities for the fulfillment of legal obligations, which carry out their respective processing activities as independent data controllers.

The parties authorized by the Data Controller who may process the data include, by way of example: commercial and legal department staff, as well as third-party technical service providers, hosting providers, and IT companies (this list is not exhaustive). The processed data will in any case not be disclosed to unspecified recipients.

Lastly, the data may also be handled by third-party companies for product shipping.

For shipments, the Company relies on the services of “Yiwu Cute Jewelry Co., Ltd.” (https://cjdropshipping.com/blog/post/privacy-policy) 

The security of the information collected cannot be guaranteed against potential hacker attacks and, in general, breaches of the security measures implemented to protect the data. 

In the event of attacks or breaches, they will in any case be reported to the data subjects and the competent authorities in accordance with the law.

***

E - Place of processing

Processing related to the web portal services is carried out by identified personnel expressly designated according to the specific purposes of the services requested and subscribed to.

For the processing activities in question, the Data Controller may enlist the assistance of external companies, consultants, consortia, and software and service providers operating through identified and authorized personnel, within the scope of the purposes provided for and in such a way as to ensure the highest level of data security and confidentiality. In other cases, the personal data collected will not be disclosed to third parties without the express consent of the data subject, except where communication to third parties is necessary to fulfill obligations imposed by laws, regulations, or measures issued by supervisory authorities, or is essential to protect the rights of other users or the website itself.

Personal data will be processed and stored exclusively for the purposes indicated above and to keep and archive it securely, on remote servers managed by leading providers in the sector that ensure compliance with high standards of protection for the processing of personal data.

This may involve the transfer of data to non-EU countries, where all or some of the aforementioned servers may be located. 

In particular, personal data may be transferred outside the European Union to the company “Shopify” (https://it.shopify.com/ and https://it.shopify.com/legal/privacy), e-commerce plugin used by the website managed by the Data Controller.

The processing and storage of data by the aforementioned provider will take place in an “adequate” third country within the meaning of the decision adopted by the European Commission, in particular the decision on the adequacy of the protection provided by Canadian law on the protection of personal information and electronic documents (Canadian Personal Information Protection and Electronic Documents Act) or Privacy Shield certification (USA), or on the basis of a contractual obligation or standard contractual clauses approved by the European Commission, or binding corporate rules approved through the specific procedure referred to in Article 47 of the GDPR.

For the transfer of data to non-EU countries, it is generally not necessary to wait for the national authorization of the Supervisory Authority. However, authorization from the Supervisory Authority will still be necessary if a controller wishes to use specific contractual clauses not recognized as adequate by decision of the European Commission, or administrative arrangements concluded between public authorities.

With regard to data collected for shipping services, the personal data may be processed by “Yiwu Cute Jewelry Co., Ltd.” (https://cjdropshipping.com/blog/post/privacy-policy).  

F - Data subjects' rights

While processing is ongoing, the data subject may exercise the following rights at any time:

  • to obtain confirmation as to whether or not such data exist and, if so, to learn their content and origin; 
  • to verify their accuracy, request the rectification of inaccurate data, the completion of incomplete data, or the updating of outdated data; 
  • to obtain restriction of processing where one of the circumstances provided for in Article 18 of the GDPR applies; 
  • to request the erasure of data processed in breach of the law, or where one of the other conditions set out in Article 17(1)(a), (b), (c), (e) and (f) of the GDPR applies;
  • to object in any event, for legitimate reasons, to their processing, or to object to processing in the other cases provided for by Article 21(2) and (3) and Article 22 of the GDPR;
  • to withdraw at any time the consent freely given to the processing of personal data for the purposes specified below;
  • to obtain the release of the personal data being processed in a format compatible with standard computer applications, in order to transfer it to other platforms of your choice, without obstructing the direct transmission of the processed data to another Data Controller, where such direct transmission is technically feasible (the so-called right to data portability).

Requests concerning the exercise of the aforementioned rights should be sent to the Data Controller by email (info@cupidodesign.com).

If the Data Controller fails to respond, or responds only partially, to the aforementioned requests, the data subject shall have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it) or to bring legal proceedings within the terms and according to the procedures provided for under Articles 77 et seq. of EU Regulation 2016/679 (GDPR).

G - Updates to the privacy notice

Future regulatory updates may lead to changes to this privacy notice, uploaded to the Website on 19.01.2022.

In the event of changes, the Data Controller will notify users on the Website.


-------------------------------------------------------------------------------------


Cookie

Cookies are small text files stored on the user’s device when they browse certain websites using their preferred browser, and are stored in the browser’s file directory. They are used by server-side web applications to store and retrieve information on the client side.

Cookies are divided into “technical,” “analytical,” and “profiling” cookies. Cookies may in turn be divided into “first-party” and “third-party” cookies.

The Website’s use of cookies and similar technologies complies with national and European legislation, as well as with the Italian Data Protection Authority’s Provision of 8 May 2014, entitled “Identification of simplified procedures for the information notice and the acquisition of consent for the use of cookies.”

The Website is hosted on the platform owned by Shopify,inc. For further information about the cookies used by this platform and to disable them, please refer to the following link: https://it.shopify.com/legal/privacy .

The Website uses the following cookies:

I. Technical Cookies.

The primary purpose of technical cookies is to make browsing the Website easier. Almost all browsers are set to accept cookies; however, users can independently change their browser settings or use specific add-ons to block them. In this case, use of the web portal and some services may be limited.

Technical cookies are further divided into “session” and “persistent” cookies: both are stored on the user’s device, but the former are deleted when the browser is closed, while the latter remain stored until they expire.

The Website uses technical “session” cookies to enable browsing within its pages, such as allowing authentication to restricted areas or storing the user’s temporary preferences; these cookies are deleted once the browser is closed.

The use of session cookies (which, in any case, are not stored persistently on the user’s computer and are automatically deleted as soon as the browser is closed) is strictly limited to transmitting data (consisting of random numbers generated by the server) that identify the specific session and are necessary to enable safe and efficient browsing. 

In some cases, the Site also uses “persistent” technical cookies to store users’ choices, such as their language or device type.

Persistent cookies are stored on users’ devices between separate browser sessions and allow users’ actions on a website to be remembered. Persistent cookies may be used for a variety of purposes, including remembering users’ preferences (e.g., the website language) when using a website.

II. Analytical cookies


These cookies are used to track users’ browsing preferences and to collect data anonymous statistical data. 

The Site uses only third-party Analytical cookies from other websites. 

Users can disable these cookies by accessing their browser settings.

See the links for the individual browsers:


Furthermore, cookies present on websites can be disabled by downloading appropriate software (such as Ghostery http://www.ghostery.com) or activate “private browsing” mode: this is a feature that allows you to browse without leaving browsing data in the browser. This feature only prevents browsing data from being retained in the browser.

Analytical cookies used by the Site

Please note that the Site uses the following analytics services to obtain statistical data relating to use of the website:

For more information, see https://support.google.com/analytics/topic/2919631?hl=it&ref_topic=1008008


Social network plug-in cookies

The Site may also use third-party social network plug-in cookies to allow you to share content on different social networks. They enable users to interact through social networks (e.g., the share function on Facebook, Twitter, YouTube or LinkedIn). These cookies can be disabled through your browser settings (see the links above).

Social network cookies are not necessary for browsing. For further information about the social networks' cookie usage policies, you can consult their respective privacy and cookie policies:

Facebook: https://it-it.facebook.com/about/privacy/

Google: http://www.google.com/intl/it/policies/privacy/

Twitter: https://twitter.com/it/privacy

Instagram: https://help.instagram.com/1896641480634370?ref=ig

LinkedIn: https://www.linkedin.com/legal/cookie-policy

ShareThis: https://sharethis.com/privacy/#sthash.oNiQUPLd.dpbs

YouTube: https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=it

Third-party profiling cookies only.

 Profiling cookies are used to track users' browsing and create a profile based on their behavior, which may then be used to send advertising messages to the user's device. Third-party profiling cookies are cookies from other websites or advertising networks (Google AdSense, etc.) that may be sent to the user's device as a result of browsing the Site.

Facebook Pixel

The Facebook Pixel is a service provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94204, USA ("Facebook"), which enables the follow-up of users' behavior after they click on a Facebook advertisement and are routed to the respective operator's website. Conversion measurement makes it possible to measure, analyze, and optimize the effectiveness of Facebook advertisements for statistical research and market research purposes. The data collected on the Site through the use of the Conversion Pixel does not allow the Site to draw any conclusions about the user's identity. The collected data (for example, the respective user's IP address) is transmitted through the Conversion Pixel, and Facebook stores and processes the data for conversion measurement purposes. The Site receives anonymous reports from Facebook, and these reports contain no information about the identity of the respective users. However, it cannot be ruled out that Facebook may link the user data transmitted through the Site with other individual data relating to the user (for example, user information from a Facebook account), or that Facebook may use the information for its own purposes.

The Visitor Tracking Pixel is a service provided by a third-party company (Facebook), and the Site cannot control or influence a third-party company's data processing operations. You can learn about Facebook's privacy policies here https://www.facebook.com/about/privacy.

Facebook, along with its partners, allows online advertising to be placed both within and outside Facebook's web space. For this purpose, a cookie may also be stored on the user's personal computer.

To give consent to the use of Pixel conversion, the user must be over 13 years of age. By this declaration, the user declares that they are of legal age to give such consent, or that a parent or legal guardian has been asked and has decided to give their consent to the Consent Declaration in advance.

You can withdraw your consent to the use of conversion measurement at any time. To do so, please use the following link: https://www.facebook.com/ads/website_custom_audiences/.

Alternatively, you can also refuse the use of the corresponding cookies by disabling the use of cookies by third-party providers by accessing the deactivation page of the Network Advertising Initiative:

http://www.networkadvertising.org/choices/

and selecting the appropriate settings using the measures offered there.

Finally, Users are informed that they can visit the following websites via YourOnlineChoices (EU), Network Advertising Initiative (USA), and Digital Advertising Alliance (USA), DAAC (Canada) to understand and manage tracking preferences for most advertising.

To offer the user Klarna's payment methods, at checkout we may transmit the user's personal data to Klarna in the form of contact details and order details, so that Klarna can assess the user's eligibility for its payment methods and personalize those payment methods. The user's transferred personal data is processed in accordance with Klarna's privacy policy.

Processing in the context of electronic withdrawal
When you exercise your right of withdrawal electronically using the provided function, we process the personal data necessary to manage the declaration. This includes, in particular, your name, contact details, and contract information (e.g., order no.). The processing is based on Art. 6(1)(b) GDPR for managing the withdrawal and related communication. The data is retained only for as long as necessary to process the request and comply with statutory retention obligations.

Messaging Terms of Service

Cupido Design

Last updated: October 1, 2024

Cupido Design’s mobile messaging service (the “Service”) is operated by Cupido Design (“Cupido Design,” “we,” “us”). Your use of the Service constitutes acceptance of these terms and conditions (“Mobile Terms”). We may modify or discontinue the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time; continued use of the Service after the effective date of such changes constitutes acceptance of them.


By consenting to Cupido Design’s SMS messaging service, you agree to receive recurring SMS messages from and on behalf of Cupido Design through your mobile carrier at the mobile number you provided, even if that number is registered on state or federal Do Not Call lists. Messages may be sent using automatic telephone dialing systems or other technologies. Service messages may include updates, alerts, and information (e.g., order updates, account notifications, etc.). Promotional messages may include promotions, special offers, and other marketing communications (e.g., cart reminders).


You acknowledge that enrollment in this program is not required to make purchases and that your consent is not a condition of any purchase from Cupido Design. Participation in the program is entirely voluntary.


The Service is free, but you are responsible for all messaging-related costs and charges applied by your mobile carrier. Message frequency varies. Message and data rates may apply. Check your plan and contact your carrier for more details. You are solely responsible for all SMS-related costs, including those charged by your carrier.


You can deactivate the Service at any time. To unsubscribe, send the single command STOP to Cupido or click the unsubscribe link (where available) included in any message. You will receive a single confirmation message confirming your unsubscription. No further messages will be sent to your device unless you explicitly request them. If you have enrolled in other Cupido Design mobile messaging programs and wish to cancel them, unless otherwise provided by applicable law, you must unsubscribe from each one separately by following the instructions in their respective terms.


For assistance or support with the Service, send HELP to Cupido or email info@cupidodesign.com.


We may change the short codes or telephone numbers used to provide the Service at any time, and we will notify you of such changes. You acknowledge that any messages, including STOP or HELP requests, sent to a short code or number that we have changed may not be received, and that we will not be responsible for carrying out the requests contained in such messages.


The mobile carriers supported by the Service are not responsible for delayed or undelivered messages. You agree to provide us with a valid mobile phone number. If your number changes, you must re-enroll in the program using the new number.


To the extent permitted by applicable law, you agree that we will not be responsible for the failure to deliver, delayed delivery, or incorrect delivery of any information sent through the Service, for any errors in such information, and/or for any action you may or may not take in reliance on such information or the Service.


We respect your right to privacy. To learn how we collect and use your personal data, please see our Privacy Policy.


Note: I used the informal “you” because it is consistent with the tone of the website, but I can switch to the formal impersonal form (“the user”) if you prefer. References to state/federal Do Not Call lists and language concerning automatic telephone dialing systems come from US law (TCPA) and have no equivalent in Italy: for an Italian audience, they should be replaced with a reference to the Public Register of Oppositions and the legal basis of consent under the GDPR.