Draft — to be completed and reviewed by a legal advisor before publication. Text in [square brackets] must be filled in.

1. Data controller

The data controller is [FULL LEGAL NAME / BUSINESS NAME], [ADDRESS], VAT no. [VAT NUMBER]. Email: amalia@amaliagre.com.

2. Data we collect

We only collect the personal data you choose to send us — for example your name, email address, phone number and shipping address when you write to us about a work, a commission or a purchase. We may also collect anonymous technical data about visits to this website (see section 6).

3. Why we use your data

We use your data to answer your enquiries, to prepare quotes, to complete and ship purchases, and to meet our legal and tax obligations. The legal bases are the performance of a contract or of pre-contractual steps you request, and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).

4. How long we keep it

Enquiries are kept for as long as needed to answer them and for up to [24] months afterwards. Data relating to sales is kept for the period required by Italian tax law (currently 10 years).

5. Who we share it with

Your data is never sold. It may be shared only with service providers needed to run this website and to deliver your order — for example the website host (Framer), email provider, payment provider and couriers — acting as data processors.

6. Cookies and analytics

This website [does not use / uses] cookies or analytics tools. [If analytics are enabled, describe them here and add a Cookie Policy.]

7. Your rights

Under the GDPR you can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to amalia@amaliagre.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).