PRIVACY POLICY

This section, in accordance with the new European legislation introduced by EU Regulation 679/2016 and Italian legislation (Legislative Decree no. 196/2003), provides information regarding the processing of the personal data of Users who browse the pages of the website www.cupidodesign.com (hereinafter, the “Site”) or use the purchasing services made available on it (hereinafter, “Users” or “Data Subjects”).

This notice is provided exclusively for the Site and not for any other websites that users may access through links on the Site.

Data Controller 

Email address for contacting the data controller and requesting the deletion of your data, if collected, subject to your consent: info@cupidodesign.com.

***

A - Types of Data Processed

I. Identification Data

In accordance with the new European legislation introduced by EU Regulation 679/2016 and Italian legislation (Legislative Decree no. 196/2003), browsing the Site and any purchase of products sold on the Site may involve the processing of data capable of directly or indirectly identifying a natural person, such as: first name, last name, residential address, email address, telephone number, and IP address. 

The Site does not require the Data Subject to provide so-called “special” data, namely, as provided under the GDPR (Art. 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, or data concerning the person’s health, sex life, or sexual orientation. If the requested service requires the processing of such data, the Data Subject will first receive specific information and will be asked to provide explicit consent.

II. Banking Data

When purchasing the products available on the Site, banking details will also be processed, such as the card number or bank account number provided to make the payment, and the cardholder and bank account holder’s name.

III. Browsing Data

Browsing data is data collected automatically by the systems and programs responsible for operating the Site and is necessary for using the web services [e.g., IP addresses, the browser used, domain names of the systems used by users to connect to the web portal, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment].

Such data are also collected when the user has not registered on the Site or requested information.

Browsing data are used exclusively in aggregate form to compile anonymous statistics on visits to the Site and to check its proper functioning. They do not allow the users concerned to be identified and are also deleted immediately after being processed anonymously.

They may, however, be used to establish liability in the event of cybercrimes committed against the website.

IV. Data voluntarily provided by the user

The personal data voluntarily provided by the User (such as first name, last name, and email address) for the purpose of sending messages to the Site and/or purchasing the products offered are used solely to respond to the data subject's needs and to comply with legal obligations. 

The legal basis for such processing is the performance of services relating to requests submitted and purchases made, as well as compliance with legal obligations.

The information that the Site User chooses to make public through the services and tools provided by the Site is provided knowingly and voluntarily, releasing the Site from any liability for any violations of the law. 

The User is responsible for verifying that they have permission to enter third-party personal data or content protected by national and international laws.

V. Data collected through analytics cookies

The Site also collects user-related data through the use of cookies.

For more information about the data processed through cookies, the types of cookies currently active, and how to disable them, please refer to the cookie policy.

These cookies are used to track the user's browsing preferences and to collect statistical data. The user can disable these cookies by accessing their browser settings, as indicated in the Site's cookie policy.

***

B - Purposes of processing

The personal data collected are used for:

• enabling the shipment of products purchased by the User; 
• obtaining anonymous statistical information about use of the web portal;
• to check the proper functioning of the web portal;
• sending communications and newsletters, both in print and electronic format, to the email address provided by the user;
• establishing liability in the event of alleged cybercrimes committed against the website;
• compliance with any other legal obligation not included among the purposes listed above.

Data may be disclosed only following a request from the Judicial Authority in accordance with the law.

***

C - Legal basis for processing

I. Performance of a contract

The legal basis for processing personal data is the performance of obligations arising from the relationship established through the purchase of products, acceptance of the Terms and Conditions, compliance with legal obligations, and the Website’s legitimate interest in carrying out processing necessary for these purposes.

II. Consent of the data subject

The optional, explicit and voluntary sending of emails, messages or any type of communication to the contact details indicated on this Website entails the subsequent acquisition of the sender’s address, telephone number or any other personal data, which will be used to respond to requests. Such processing is based on the data subject’s consent. 

It is ensured that such processing will be based on the principles of lawfulness, fairness, transparency, adequacy, relevance and necessity referred to in Article 5, paragraph 1 of the GDPR. Specific summary notices will gradually be included or displayed on the website pages prepared for particular services available upon request.

III. Fulfilment of legal obligations

Personal data may be processed without the data subject’s consent where the Data Controller must fulfil a legal obligation.

IV. Voluntary nature of providing the data

Except as specified for the performance of the contract or legal obligations, cookies and browsing data, users are free to provide or not provide their personal data. However, failure to provide the data may make it impossible to obtain the results of the service.

***

D - Methods and duration of processing

Personal data are processed using IT tools and in compliance with EU Regulation No. 679/2016 and Legislative Decree No. 196/2003.

The processed data will be retained for the time necessary to fulfil the purposes described in this privacy notice and, therefore, for the minimum time necessary or until an explicit request from the data subject, and in any event in compliance with the time limits imposed by law.

The Data Controller undertakes to adopt all appropriate security measures to prevent the loss and alteration of personal data, as well as any unlawful or unauthorised use thereof.

The data will be processed exclusively by entities authorised by the Data Controller, including any data processors, representatives and public entities for fulfilling legal obligations, which carry out their respective processing activities as independent data controllers.

The entities authorised by the Data Controller that may process the data include, by way of example: commercial and legal department staff, as well as third-party technical service providers, hosting providers and IT companies (this list is not exhaustive). In any event, the processed data will not be disclosed to unspecified recipients.

Lastly, the data may also be handled by third-party companies for shipping the products.

The Company relies on the services of “Yiwu Cute Jewelry Co., Ltd.” for shipping (https://cjdropshipping.com/blog/post/privacy-policy) 

The security of the information collected cannot be guaranteed against possible hacker attacks or, in general, breaches of the security measures implemented to protect the data. 

In the event of attacks or breaches, however, they will be reported to the data subjects and the competent authorities in accordance with the law.

***

E - Place of processing

Processing relating to the web portal services is carried out by identified personnel expressly appointed according to the specific purposes of the services requested and subscribed to.

For the processing in question, the Data Controller may rely on external companies, consultants, consortia, and software and service providers operating through identified and authorized personnel, within the scope of the intended purposes and in such a way as to ensure the maximum security and confidentiality of the data. In all other cases, the personal data collected will not be disclosed to third parties without the explicit consent of the data subject, except where disclosure to third parties is necessary to comply with obligations imposed by laws, regulations, or measures issued by supervisory authorities, or is essential to protect the rights of other users or of the website itself.

Personal data will be processed and stored, exclusively for the purposes indicated above and to keep and archive it securely, on remote servers managed by leading providers in the sector that ensure compliance with high standards of protection regarding the processing of personal data.

This may involve the transfer of data to non-EU countries, where all or some of the aforementioned servers may be located. 

In particular, personal data may be transferred outside the European Union to the company “Shopify” (https://it.shopify.com/ and https://it.shopify.com/legal/privacy), e-commerce plug-in used by the website managed by the Data Controller.

The processing and storage of data by the aforementioned provider will take place in an “adequate” third country within the meaning of the decision adopted by the European Commission, in particular the decision on the adequacy of the protection provided by Canadian law on the protection of personal information and electronic documents (Canadian Personal Information Protection and Electronic Documents Act) or Privacy Shield certification Privacy Shield (USA), or on the basis of a contractual obligation or standard contractual clauses approved by the European Commission, or binding corporate rules approved through the specific procedure referred to in Article 47 GDPR.

As a rule, authorization from the national Data Protection Authority does not need to be awaited for the transfer of data to non-EU countries. However, authorization from the Data Protection Authority will still be necessary if a Data Controller wishes to use specific contractual clauses that have not been recognized as adequate through a decision of the European Commission or administrative agreements concluded between public authorities.

With regard to the data collected for shipping services, the personal data may be processed by “Yiwu Cute Jewelry Co., Ltd.” (https://cjdropshipping.com/blog/post/privacy-policy).  

F - Data subject rights

During processing, the data subject may exercise the following rights at any time:

• to obtain confirmation as to whether or not the same data exist and, if so, to learn its content and source; 
• to verify their accuracy and request the rectification of inaccurate data, the completion of incomplete data, or the updating of outdated data; 
• to obtain restriction of processing where one of the circumstances provided for by Article 18 of the GDPR applies; 
• to request the erasure of data processed in violation of the law, or where one of the other conditions provided for by Article 17, paragraph 1, letters a), b), c), e), and f) of the GDPR applies;
• to object, in any case and for legitimate reasons, to their processing, or to object to processing in the other cases provided for by Article 21, paragraphs 2 and 3, and Article 22 of the GDPR;
• to withdraw at any time their freely given consent to the processing of personal data for the purposes specified below;
• to obtain the release of the personal data being processed in a format compatible with standard software applications, to enable its transfer to other platforms of their choice, without preventing the direct transmission of the processed data to another Data Controller, where such direct transmission is technically feasible (the so-called right to data portability).

Requests concerning the exercise of the aforementioned rights must be addressed to the Data Controller by email (info@cupidodesign.com).

If the Data Controller fails to respond, or responds only partially, to the aforementioned requests, the data subject shall have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or bring legal proceedings within the terms and according to the procedures provided for under Articles 77 et seq. of EU Regulation 2016/679 (GDPR).

G - Updates to the privacy notice

Future regulatory updates may lead to changes to the current privacy notice, uploaded to the Website on 19.01.2022.

In the event of any changes, the Data Controller will announce them on the Website.

 

-------------------------------------------------------------------------------------

 

Cookie

Cookies are small text files that are stored on the user's device when they browse certain websites using their preferred browser and are stored in the browser's file directory. They are used by server-side web applications to store and retrieve information on the client side.

Cookies are divided into “technical,” “analytics,” and “profiling” cookies. Cookies can, in turn, be divided into “first-party” and “third-party” cookies.

The Website’s use of cookies and similar technologies complies with national and European legislation, as well as with the Italian Data Protection Authority’s ruling of 8 May 2014, entitled “Identification of simplified procedures for the information notice and acquisition of consent for the use of cookies.”

The Website is hosted on the platform owned by Shopify,inc. For more information about the cookies used by this platform and to disable them, please refer to the following link: https://it.shopify.com/legal/privacy .

The Website uses the following cookies:

I. Technical Cookies.

The primary purpose of technical cookies is to make browsing the Website easier. Almost all browsers are set to accept cookies; however, users can independently change their browser settings or use specific add-ons to block them. In that case, access to the web portal and use of some services may be limited.

Technical cookies are further divided into “session” cookies and “persistent” cookies: both are stored on the user’s device, but the former are deleted when the browser is closed, whereas the latter remain stored until they expire.

The Website uses “session” technical cookies to enable navigation within the pages, such as allowing authentication for restricted areas or storing the user’s temporary preferences; these cookies are deleted once the browser is closed.

The use of session cookies (which, in any case, are not stored persistently on the user’s computer and are automatically deleted as soon as the browser is closed) is strictly limited to the transmission of data (consisting of random numbers generated by the server) that identify the specific session and are necessary to enable safe and efficient browsing. 

In some cases, the Website also uses “persistent” technical cookies, to store the user’s choices regarding, for example, the language or device type.

Persistent cookies are stored on users’ devices between separate browser sessions and make it possible to remember the user’s actions on a website. Persistent cookies may be used for a variety of purposes, including remembering the user’s preferences (e.g. the website language) when using a website.

II. Analytical Cookies

These cookies are used to track users’ browsing preferences and to collect data anonymous statistical form. 

The Site uses only third-party Analytical cookies from other websites. 

Users can disable these cookies by accessing their browser settings.

See the links for the individual browsers:

• Internet Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies ;
• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences?redirect=no;
• Safari: https://www.apple.com/legal/privacy/it/;
• Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en;
• Opera: https://blogs.opera.com/news/2015/08/how-to-manage-cookies-in-opera/

You can also disable cookies on websites by downloading suitable software (such as Ghostery http://www.ghostery.com) or activate “incognito browsing” mode: this is a feature that allows you to browse without leaving browsing data in the browser. This feature only prevents browsing data from being retained in the browser.

Analytical Cookies used by the Site

Please note that the Site uses the following analytics services to obtain statistical data relating to use of the website:

• Analytics service provided by BugSnag Inc. https://docs.bugsnag.com/legal/privacy-policy/  
• Analytics service provided by Akami.com https://www.akamai.com/ 
• “Google Analytics” provided by Google Inc. In this case, the personal data collected are stored by Google as the independent data controller for the relevant processing.

For more information, see https://support.google.com/analytics/topic/2919631?hl=it&ref_topic=1008008

 

Social network plug-in cookies

The Site may also use third-party social network plug-in cookies to allow you to share content on various social networks. They allow users to interact through social networks (e.g., the share function on Facebook, Twitter, YouTube, or LinkedIn). These cookies can be disabled through your browser settings (see the links above).

Social network cookies are not necessary for browsing. For further information on social networks’ cookie usage policies, you can consult their respective privacy and cookie policies:

Facebook: https://it-it.facebook.com/about/privacy/

Google: http://www.google.com/intl/it/policies/privacy/

Twitter: https://twitter.com/it/privacy

Instagram: https://help.instagram.com/1896641480634370?ref=ig

LinkedIn: https://www.linkedin.com/legal/cookie-policy

ShareThis: https://sharethis.com/privacy/#sthash.oNiQUPLd.dpbs

YouTube: https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=it

Third-party profiling cookies only.

 Profiling cookies are used to track the user's browsing activity and create a profile based on their behavior, which may then be used to send advertising messages to the user's device. Third-party profiling cookies are cookies originating from other websites or advertising networks (Google AdSense, etc.) that may be sent to the user's device as a result of browsing the Website.

Facebook Pixel

The Facebook Pixel is a service provided by FacebookInc. 1601 S. California Ave., Palo Alto, CA 94204, USA ("Facebook"), which enables the tracking of user behavior after clicking on a Facebook ad and routing to the website of the respective operator. Conversion tracking makes it possible to measure, analyze, and optimize the effectiveness of Facebook ads for statistical and market research purposes. The data collected on the Website using the conversion Pixel does not allow the Website to draw any conclusions about the user's identity. The collected data (for example, the respective user's IP address) is transmitted through the conversion Pixel, and Facebook stores and processes the data for conversion-tracking purposes. The Website receives anonymous reports from Facebook, and these reports do not contain any reference to the identity of the respective users. However, it cannot be ruled out that Facebook may link other individual user data transmitted through the Website to the user's data (for example, user information from a Facebook account), or that Facebook may use the information for its own purposes.

The Visitor Tracking Pixel is a service provided by a third-party company (Facebook), and the Website cannot control or influence the data-processing operations of a third-party company. You can find information about Facebook's privacy policy here https://www.facebook.com/about/privacy.

Facebook, as well as its partners, enables online advertising both within and outside Facebook's web space. For this purpose, it may also be possible for a cookie to be stored on the user's computer.

To give consent to the use of the Pixel conversion tracking, the user must be over 13 years of age. The user hereby declares that they are of legal age to give such consent, or that a parent or legal guardian has been asked and has decided to give their consent to this Consent Statement in advance.

Consent to the use of the conversion tracking tool can be withdrawn at any time. For this purpose, please feel free to use the following link: https://www.facebook.com/ads/website_custom_audiences/.

Alternatively, you can also refuse the use of the relevant cookies by disabling the use of cookies by third-party providers by visiting the Network Advertising Initiative's opt-out page:

http://www.networkadvertising.org/choices/

and selecting the appropriate settings using the measures provided there.

Finally, users can visit the following websites at YourOnlineChoices (EU), Network Advertising Initiative (USA) and Digital Advertising Alliance (USA), DAAC (Canada) to understand and manage tracking preferences for most advertising.  

To offer you Klarna's payment methods, at checkout we may transmit your personal data to Klarna in the form of contact details and order information, so that Klarna can assess your eligibility for its payment methods and personalize those payment methods. The personal data transferred is processed in accordance with Klarna's privacy policy.

Processing in the context of electronic withdrawal
When you exercise your right of withdrawal electronically using the provided function, we process the personal data necessary to manage the declaration. This includes, in particular, your name, contact details, and contract information (e.g., order no.). Processing is based on Art. 6(1)(b) GDPR for managing the withdrawal and related communications. The data is retained only for as long as necessary to process the withdrawal and comply with statutory retention obligations.

Mobile Terms of Service

Cupido Design

Last updated: Oct. 1, 2024

The Cupido Design mobile message service (the "Service") is operated by Cupido Design (“Cupido Design”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.

By consenting to Cupido Design’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Cupido Design through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Service-related messages may include updates, alerts, and information (e.g., order updates, account alerts, etc.). Promotional messages may include promotions, specials, and other marketing offers (e.g., cart reminders).

You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Cupido Design. Your participation in this program is completely voluntary.

We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.

You may opt-out of the Service at any time. Text the single keyword command STOP to Cupido or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Cupido Design mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to Cupido or email info@cupidodesign.com.

We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.

The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.

To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.

We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.