Privacy Policy
Last updated: 3 September 2026
This notice explains how personal data is processed when users visit the Giraldo Diamond Group website or choose to contact us through the links provided on the website.
1. Data controller
The data controller is Giraldo Diamond Group. For privacy-related information, you can contact us using the details shown on the website, including +39 371 6520781.
2. Browsing data
During normal browsing, certain technical data necessary for the operation and security of the website may be processed automatically, such as IP address, browser type, operating system, date and time of the request and technical connection information. Such data may also be logged by the hosting provider.
3. Contact via WhatsApp
The website contains links to WhatsApp. When a user contacts us through WhatsApp, voluntarily provided data — such as name, telephone number, message content and information about the requested diamond or setting — is used to answer the request, provide commercial information and manage any pre-contractual or contractual relationship.
Use of WhatsApp also involves data processing by the relevant service provider under its own terms and privacy notices.
4. Purposes and legal bases
Personal data may be processed to:
- respond to user requests;
- provide information about diamonds, mountings, availability and prices;
- take pre-contractual steps requested by the user and manage orders or commercial relationships;
- comply with legal, tax, administrative or accounting obligations;
- ensure security, prevent abuse and maintain the proper operation of the website.
The legal bases may therefore include taking pre-contractual or contractual steps, compliance with legal obligations and, where applicable, the controller's legitimate interest in the security and management of the website.
5. Provision of data
Simply browsing the website does not require users to voluntarily submit personal data. Providing data through WhatsApp is optional, but may be necessary for us to answer a request or provide the requested service.
6. Recipients and service providers
Data may be processed by technical providers strictly necessary for the services used, such as the hosting provider and WhatsApp. Data may also be disclosed to advisers or authorities where required by law or necessary to protect the controller's rights.
7. Data transfers
Some technology providers used by the user, including external communication services, may involve processing or transfers of data outside the European Economic Area. In such cases, processing takes place under the safeguards and mechanisms provided by applicable law and the relevant provider's terms.
8. Retention
Data is retained for as long as necessary to respond to requests and manage the commercial relationship and, afterwards, for any periods required by applicable law or necessary to protect legal rights.
9. Data subject rights
Where provided by law, data subjects may request access to their personal data, rectification, erasure, restriction of processing, objection to processing and data portability. They may also lodge a complaint with the competent data protection supervisory authority.
10. Cookies and similar technologies
This version of the website does not, by its own configuration, use profiling systems or advertising cookies. Any strictly technical cookies or technical data may depend on the hosting service used. If analytics, marketing, embedded maps, videos or other third-party services are added in the future, this notice and any consent management mechanism will need to be updated.
11. Links to external websites
The website may contain links to external services, including the IGI certificate verification service and WhatsApp. When users access these services, they leave this website and become subject to the respective privacy notices and terms.
12. Changes to this notice
This Privacy Policy may be updated following changes to the website, services used or applicable law. The date of the latest update is shown at the top of this page.