The following Privacy Policy applies in every case where the user accesses the website 'thinthingsjewels.com' and decides to navigate within it and use its services, regardless of the purchase of products.

INFORMATION PURSUANT TO ART. 13 OF LEGISLATIVE DECREE 196/2003 AND ART. 13 OF EU REGULATION 679/2016

1. DATA CONTROLLER
   The data controller of the data collected through this site is Thin Things by Margherita Roncoroni, based in Milan at Via Stampa 8, who can be contacted at any time at the following email address: info@thinthingsjewels.com.
   The Data Controller determines the purposes and methods of processing, as specified below, and the security measures to be applied to ensure the confidentiality, integrity, and availability of the data.

2. TYPES OF DATA COLLECTED
   Among the personal data collected through the site 'thinthingsjewels.com', either autonomously or through third parties, are: name, surname, email address, residential address, postal code, tax code or VAT number, country, province, city, phone number, cookies, and usage data.
   Other personal data collected may be indicated in other sections of this privacy policy.

3. PURPOSE OF DATA PROCESSING
   Personal data is collected for the following purposes and using the following services:

a. Contact by Phone
Users who have provided their phone number may be contacted mainly for requests for support related to their order if they cannot be reached via email.
Personal data collected: phone number.

b. Contact Form on the Site
By filling out the contact form on the site with their personal data, the user consents to their use to respond to requests for information, quotes, or any other nature indicated in the form.
Personal data collected: Name, Surname, Email.

c. Purchase Procedure on the Site
When purchasing a product on the site 'thinthingsjewels.com', customers will be asked for personal data to enable and complete this action. This data is necessary for invoicing and shipping the purchased goods.
Data collected: Name, Surname, Address, Postal Code, Tax Code/VAT Number, Phone Number.

1. NATURE OF THE PROVISION OF DATA
   The provision of personal data by the user requested through the site 'thinthingsjewels.com' in various collection instances may be necessary for the continuation of the purposes identified in the relevant information or optional. The mandatory or optional nature of the provision is specified from time to time—referring to the individual information requested—at the time of each data collection.
   The user assumes responsibility for personal data published or shared via the site and guarantees that they have the right to communicate or disseminate it, releasing the Data Controller from any liability to third parties.
   Refusing to provide data marked as mandatory makes it impossible to pursue the main purpose of the specific collection; such refusal may also result in the inability to complete the purchase.

2. PROCESSING METHODS
   All processing, whether automated or manual, carried out by Thin Things is related to the purposes described in paragraph 3 of this information and complies with the regulations contained in the GDPR and the principles outlined therein, such as:

• Lawfulness: Thin Things will process the Personal Data of which it is the Data Controller in respect of the rights of every User and within the limits of their consent, as well as what is provided in this information and in contracts possibly stipulated with the User.

• Minimization: Thin Things will use the least amount of Personal Data possible, namely only those that are necessary for the processing and purposes described.

• Security: Thin Things ensures the application of suitable security measures to protect the Data collected and processed and to safeguard the fundamental freedoms of Users.

• Fairness: Thin Things provides Users with appropriate tools to verify the truthfulness and update their Personal Data and to modify them if necessary.

• Transparency: Thin Things adopts appropriate measures to provide the User with all information regarding the processing and facilitates the exercise of their rights.

• Limitation: Thin Things collects data for determined, explicit, and legitimate purposes, as outlined above, and subsequently retains it for a period not exceeding the achievement of these purposes.

• Accuracy: Thin Things adopts all reasonable measures to promptly update, delete, or rectify inaccurate data concerning the purposes for which they are processed.

• Integrity and confidentiality: Thin Things adopts the best management techniques for Data that facilitate the best usability through the Site, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Processing for commercial purposes may be carried out directly by Thin Things or by third parties, specifically designated as Data Processors under the GDPR. In both cases, the processing of collected data may occur using both analog systems (e.g., paper) and automated systems (e.g., email).
Thin Things may share the Personal Data collected through the site with third parties to allow the execution of the aforementioned purposes.
Thin Things guarantees Users that such data will be used by third parties solely for the purposes described. The user's data will never be sold by Thin Things to third parties. Thin Things acknowledges that the user is the sole owner of their data and can request modifications or deletions at any time: see paragraph 8 below, "Rights of the Data Subject," of this information.
If the User intends to prevent the communication of their Personal Data to third parties, they must express their denial by sending an email to thinthingsjewels@gmail.com. In such cases, denying consent to processing by the data subject may be incompatible with certain services offered by Thin Things or certain functionalities of the site.

1. STORAGE OF PERSONAL DATA AND DURATION OF PROCESSING
   The data controller will retain Users' information for the period required by current legislation and, in any case, for as long as necessary to provide the requested services, after which they will be deleted from their archives, except for data related to the conclusion and execution of contracts, payments, and invoicing, which will be retained for a period not exceeding 11 years.

2. USER RIGHTS
   Individuals to whom the personal data refers have the right at any time to obtain confirmation of the existence or non-existence of such data and to know its content and origin, verify its accuracy, or request its integration or update, or rectification.
   They also have the right to request the deletion of such data or limitation of processing concerning them, as well as to oppose their processing for legitimate reasons, in addition to the right to data portability. The data subject also has the right to lodge a complaint with a supervisory authority.

Changes to this policy:
This information may be subject to changes over time (for example, due to changes in legislation or the introduction of new services offered by this site), so we invite users to check for changes by periodically consulting this page.