Welcome to the privacy policy of www.basama.it. This policy explains which Data we collect, why we collect it and your rights in relation to it.
Source policy last updated: 6 October 2025. English translation prepared on 3 October 2026 from the Italian policy published by Basamá through iubenda.
Summary
Data collected automatically
We collect Data automatically, for example when you visit www.basama.it: Trackers, Usage Data, referring URLs and pageviews. We use it for platform and hosting services, analytics, interaction with live chat platforms and displaying content from external platforms.
Data you provide
We collect Data you provide, for example when you interact with our online chat: payment information, billing address, shipping address, name and the other Data listed below. We use it for platform and hosting services and interaction with live chat platforms.
Owner and Data Controller
Alfonso Gioielleria SRL
Via Genova 12, 07041 Alghero (SS), Italy
Controller’s email address: info@basama.it
Types of Data collected
The Personal Data collected by this Application, independently or through third parties, includes: Trackers, Usage Data, payment information, billing address, shipping address, name, email address, order ID, telephone number, point-of-sale data, referring URLs, pageviews and Data communicated while using the service.
Complete details of each type of Personal Data collected are provided in the dedicated sections of this privacy policy or in specific explanatory texts displayed before the Data is collected. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, this Application may be unable to provide the Service. Where this Application identifies Data as optional, Users may refrain from providing it without any effect on the availability or operation of the Service. Users who are uncertain which Data is mandatory are encouraged to contact the Controller.
The use of Cookies or other Trackers by this Application or by the owners of third-party services used by it serves to provide the Service requested by the User, in addition to the other purposes described in this document and the Cookie Policy. The User is responsible for any third-party Personal Data obtained, published or shared through this Application.
Methods and place of processing
Methods of processing
The Controller adopts appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of Personal Data. Processing is carried out using computers and/or IT tools, following organisational procedures and methods strictly related to the stated purposes.
In addition to the Controller, in some cases Data may be accessible to other parties involved in the organisation of this Application (administrative, sales, marketing and legal personnel and system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies and communications agencies), appointed as Data Processors by the Controller where necessary. An updated list of these parties may be requested from the Controller at any time.
Place
Data is processed at the Controller’s operating offices and wherever the other parties involved in processing are located. Contact the Controller for further information. Users’ Personal Data may be transferred to a country other than the one in which they are located. Users may refer to the section on detailed processing information to learn more about the place of processing.
Retention period
Unless otherwise stated in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected, and may be retained longer due to legal obligations or on the basis of Users’ consent.
Purposes of processing
The User’s Data is collected to allow the Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect malicious or fraudulent activity, and for the following purposes: platform and hosting services, analytics, interaction with live chat platforms and displaying content from external platforms.
Detailed information on processing Personal Data
Interaction with live chat platforms
These services allow Users to interact with third-party live chat platforms directly from the pages of this Application, to contact and be contacted by this Application’s support service. Where such a service is installed, it may collect Usage Data relating to the pages on which it is installed even if Users do not use the service. Live chat conversations may also be recorded.
Platform and hosting services
These services host and operate key components of this Application, allowing it to be provided through a single platform. These platforms offer the Controller tools such as analytics, user registration management, comment and database management, e-commerce and payment processing. Using these tools involves collecting and processing Personal Data. Some services operate through servers located in different geographical locations, making it difficult to determine exactly where Personal Data is stored.
Analytics
The services in this section allow the Controller to monitor and analyse traffic data and track User behaviour.
Displaying content from external platforms
These services allow content hosted on external platforms to be displayed directly within this Application’s pages and enable interaction with it. Such services are often called widgets: small elements placed on a website or application that provide specific information or perform a particular function and often enable user interaction. They may collect web traffic data relating to the pages where they are installed even when Users do not use them.
WooCommerce
WooCommerce is a WordPress plugin used by this Application that enables its owner to build and manage an e-commerce website.
Personal Data processed: Usage Data, point-of-sale data, email address, order ID, billing address, shipping address, payment information, name, telephone number and Trackers. Service provided by this Application.
Tawk.to Widget
The Tawk.to Widget is a service for interacting with the Tawk.to live chat platform, provided by tawk.to ltd.
Personal Data processed: Data communicated while using the service, Usage Data and Trackers. Provider: tawk.to ltd. (United States). Provider privacy policy.
Google Fonts
Google Fonts is a typeface display service managed by Google LLC that allows this Application to incorporate such content into its pages.
Personal Data processed: Usage Data and Trackers. Provider: Google LLC (United States). Provider privacy policy.
WooCommerce Order Attribution Tracking
WooCommerce Order Attribution Tracking is an analytics feature of WooCommerce that links online order data to marketing activities, channels or campaigns to measure their effectiveness.
Personal Data processed: Usage Data, pageviews, Trackers and referring URLs. Service provided by this Application.
Cookie Policy
This Application uses Trackers. To learn more, consult the Cookie Policy.
Further information for Users in the European Union
Legal basis of processing
The Controller processes Personal Data relating to Users when one of the following conditions applies:
- The User has consented to one or more specific purposes.
- Processing is necessary for the performance of a contract with the User and/or pre-contractual measures.
- Processing is necessary to comply with a legal obligation to which the Controller is subject.
- Processing is necessary to carry out a task in the public interest or exercise official authority vested in the Controller.
- Processing is necessary for the legitimate interests pursued by the Controller or a third party.
The Controller may always be asked to clarify the specific legal basis for each processing activity, particularly whether it is based on law, provided for by a contract or necessary to enter into a contract.
Further information on retention periods
Unless otherwise stated, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be kept longer due to legal obligations or Users’ consent. Therefore:
- Personal Data collected for purposes relating to a contract between the Controller and the User is retained until the contract has been fully performed.
- Personal Data collected for the Controller’s legitimate interests is retained as long as needed to fulfil those interests. Further information about these interests is available in the relevant sections of this document or from the Controller.
Where processing is based on consent, the Controller may retain Personal Data until consent is withdrawn. The Controller may also be required to retain Personal Data for a longer period to comply with a legal obligation or an authority’s order. Personal Data is deleted when the retention period expires. Consequently, the rights of access, erasure, rectification and data portability can no longer be exercised after that period.
Users’ rights under the General Data Protection Regulation (GDPR)
Users may exercise certain rights concerning Data processed by the Controller. In particular, within the limits of the law, Users may:
- Withdraw consent at any time. Users may withdraw consent previously given for processing their Personal Data.
- Object to processing. Users may object where processing is based on a legal basis other than consent.
- Access their Data. Users may learn whether Data is being processed, obtain information about certain aspects of processing and receive a copy of the Data processed.
- Verify and request rectification. Users may check the accuracy of their Data and request updates or corrections.
- Restrict processing. Users may request restrictions. In that case, the Controller will process the Data only for storage.
- Have their Personal Data erased or removed. Users may request that the Controller erase their Data.
- Receive their Data or have it transferred to another controller. Users may receive their Data in a structured, commonly used, machine-readable format and, where technically feasible, have it transferred to another controller without hindrance.
- Lodge a complaint. Users may complain to the competent data protection supervisory authority or bring legal proceedings.
Users are entitled to learn about the legal basis for Data transfers abroad, including to international organisations governed by public international law or established by two or more countries, such as the UN, and about the security measures adopted by the Controller to protect their Data.
Details of the right to object
Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Controller or for the Controller’s legitimate interests, Users may object on grounds relating to their particular situation.
Where Personal Data is processed for direct marketing, Users may object at any time, free of charge and without giving a reason. Following an objection, Personal Data will no longer be processed for that purpose. Users can refer to the relevant sections of this document to determine whether the Controller processes Data for direct marketing.
How to exercise these rights
Requests may be sent to the Controller using the contact details in this document. Requests are free of charge. The Controller will respond as soon as possible and in any event within one month, providing all information required by law. Any rectification, erasure or restriction of processing will be communicated to each recipient, if any, to whom Personal Data was disclosed, unless this is impossible or involves disproportionate effort. The Controller will inform the User of those recipients upon request.
Further information about processing
Legal action
The Controller may use the User’s Personal Data in legal proceedings or in the preparatory stages of possible legal action to protect against misuse of this Application or related Services. Users acknowledge that the Controller may be required to disclose Data by order of public authorities.
Specific information
At the User’s request, in addition to the information in this privacy policy, this Application may provide additional and contextual information concerning specific Services or the collection and processing of Personal Data.
System logs and maintenance
For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs: files recording interactions that may also contain Personal Data such as the User’s IP address.
Information not contained in this policy
Further information about processing Personal Data may be requested from the Controller at any time using the contact details provided.
Changes to this privacy policy
The Controller reserves the right to change this privacy policy at any time by notifying Users on this page and, where possible, within this Application, and, where technically and legally feasible, by sending a notice through available User contact details. Please check this page frequently, referring to the date of the latest update. If changes affect processing based on consent, the Controller will obtain the User’s consent again where necessary.
Definitions and legal references
Personal Data (or Data)
Any information that, directly or indirectly, including in connection with other information such as a personal identification number, makes a natural person identified or identifiable.
Usage Data
Information collected automatically through this Application, including through third-party applications integrated into it: the IP addresses or domain names of the computers used by Users who connect to this Application, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful outcome, error, etc.), the country of origin, the features of the visitor’s browser and operating system, the various time details of each visit (for example, the time spent on each page) and details of the path followed within the Application, particularly the sequence of pages visited, and other parameters concerning the User’s operating system and IT environment.
User
The individual using this Application who, unless otherwise specified, is the Data Subject.
Data Subject
The natural person to whom the Personal Data relates.
Data Processor (or Processor)
The natural or legal person, public authority or other body that processes Personal Data on behalf of the Controller, as described in this privacy policy.
Data Controller (or Controller)
The natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of processing Personal Data and the tools adopted, including the security measures concerning the operation and use of this Application. Unless otherwise specified, the Data Controller is the owner of this Application.
This Application
The hardware or software tool through which Users’ Personal Data is collected and processed.
Service
The service provided by this Application as described in the relevant terms, if available, on this website/application.
European Union (or EU)
Unless otherwise specified, every reference to the European Union in this document extends to all current member states of the European Union and the European Economic Area.
Cookie
Cookies are Trackers consisting of small sets of data stored in the User’s browser.
Tracker
Any technology — for example Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting — that enables Users to be tracked, for example by accessing or storing information on the User’s device.
Legal references
Unless otherwise specified, this policy relates solely to this Application.
How can we help?
You can contact us to request access to your information, correction of your information, erasure of your information or transfer of your Data to another service. Although we strive to create a positive user experience, we know that problems may occasionally arise between us and our users. If this happens, please contact us at info@basama.it.