Privacy

Data processing notice

Last updated: 13 October 2026. Data and purposes The form collects your name, email address, any selected creation and message solely to answer enquiries addressed to the atelier. Do not include sensitive data or information about other people that is not necessary for your enquiry. We do not use these data for newsletters, advertising or profiling. Legal basis and provision of data Enquiries about creations and services are processed on the basis of pre-contractual measures requested by the data subject (Article 6(1)(b) GDPR). Other communications and protection of the website against abuse are handled on the basis of the legitimate interest in responding and keeping the service secure (Article 6(1)(f)). Providing data is optional; without a name, email address and message, we cannot process the form. The privacy checkbox confirms that you have read this notice and does not authorise promotional activity. Processing and recipients Enquiries are sent to info@diadema.me and handled by the data controller and persons authorised to manage communications. The website uses Hostinger hosting and the domain’s email services; these providers may process technical data and communications necessary to provide their services. Messages are not published on the website. No automated decisions about individuals are envisaged. Any transfers outside the EEA made by providers are subject to GDPR safeguards and the providers’ applicable terms; you can contact the data controller for information about providers and safeguards. Retention Enquiries are kept in the email inbox for as long as necessary to handle them, normally no longer than 180 days, unless needed to continue a conversation, meet obligations or protect rights. The data controller is responsible for managing and deleting correspondence. The form does not keep an additional message archive on the web server. Spam prevention counters use pseudonymous identifiers and time windows of up to 24 hours; expired entries are deleted when the next form request is made. Hosting service technical logs follow the provider’s retention periods. Rights You can write to info@diadema.me to exercise, where applicable, your rights of access, rectification, erasure, restriction, objection and portability, or to request clarification. You may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Reports about website functionality

The “Report a problem” form collects your name, email address and a description of the difficulty so the administrator can handle your report and reply if needed. The message is sent to admin@diadema.me, with no additional archive on the web server and no subscription to promotional communications. The handling and retention arrangements and rights described in this notice apply. After submission, a thank-you message appears on the website; no automatic email reply is sent.

Virtual headband try-on

Access to the try-on requires a code. An essential HttpOnly, SameSite Strict session cookie maintains access for up to two hours; it is not used for advertising or profiling. To limit abuse, access attempts are counted over 15 minutes using an identifier derived from the IP address; expired records are removed at the next attempt. The code does not verify whether you follow the Instagram profile. Opening Instagram takes you to an external service with its own privacy notice. The virtual try-on combines the visitor’s selected or newly taken photograph with the chosen creation entirely within the browser. The photo and its filename are not sent to our servers, saved in cookies or local storage, or attached to enquiries. No facial recognition is performed. The photo remains in the page’s memory until it is removed, replaced or the page is left. Using the camera requires an explicit action and browser permission; microphone access is not requested. The camera stops after a photo is taken, when it is closed, when the page goes into the background or when you leave it. Any permission remembered by the browser can be revoked in its settings. Use your own photo or one you are authorised to use. The try-on is an illustrative composition and does not measure fit.

Browsing and external services

Fonts and images are hosted on this website. Viewing photographs does not require a connection to Instagram. Following a social media link takes you to an external service governed by its own privacy notice.

This website is hosted by Hostinger. Technical logs may include IP address, date, requested resource and browser information for the operation and security of the service.

Aggregate visit statistics

The website counts estimated entries and page views in aggregate to understand how its showcase is used. The counter uses no cookies, browser storage or visitor identifiers; it does not store IP addresses, device characteristics, page addresses or referring websites. Only daily totals are kept within a 400-day window, cleared on the next update and accessible exclusively to the administrator. It does not distinguish unique people: reloads, return visits, bots and privacy settings may affect the figures. It does not combine data with other websites or share it with external analytics services. It respects Do Not Track and Global Privacy Control signals; browsers that have opened the administration area are excluded while they retain the associated technical session.