Privacy Policy

01 About this policy

This Privacy Policy explains how Donzella di Thomas Donzella (“Donzella”, “we”, “us”) uses your personal data when you visit atdonzella.com, write to us, talk with Beatrice, our digital assistant, or buy our creations.

We are a small Maison based in Italy and we name here every service that handles your data on our behalf. For cookies and similar technologies, please also see our Cookie Policy.

02 The data we use

We do not ask for, and do not want, sensitive data such as health information. Please do not include it in your messages.

03 Why we use it

04 Beatrice, our digital assistant

Beatrice is an assistant based on artificial intelligence. She can make mistakes: orders, cancellations, returns, refunds and payments are always decided by a person of our team, and Beatrice takes no decision that has legal effects on you.

To write her replies, your messages are sent to Anthropic, the provider of the artificial intelligence model. Under its commercial terms, Anthropic processes them on our behalf and does not use them to train its models.

What Beatrice remembers about you between visits stays in your browser, on your device, and you can erase it from the chat at any time. On our server we keep the text of conversations for 30 days, to answer questions about them and to improve our answers; after that the text is deleted automatically and only anonymous counts remain.

If you ask Beatrice to pass your request to our team, she sends the conversation, with the contact details you give her, to our customer service.

05 Who handles your data

We do not sell your data. These providers handle it on our behalf, each only for its task:

When you pay with Klarna, PayPal, Revolut Pay or Satispay, that company also handles your data under its own privacy policy. We share data with our accountant and with public authorities only when the law requires it.

06 Transfers outside the European Union

Some providers above are based in the United States. We use them only with the safeguards the GDPR requires: the EU-US Data Privacy Framework where the provider is certified, or the Standard Contractual Clauses approved by the European Commission. You can ask us for a copy by writing to [email protected].

07 How long we keep it

After these periods your data is deleted or made anonymous, unless the law requires us to keep it longer, for example for a dispute.

08 Security

The site is served over encrypted connections, access to our systems is limited to the people who need it, and card data never passes through our servers. No system is perfectly secure: if a breach put your rights at risk, we would inform you and the supervisory authority as the law requires.

09 Your rights

You can ask us at any time to:

• see the data we hold about you and receive a copy of it;
• correct it or complete it;
• delete it, when we are not required to keep it;
• limit its use, or object to uses based on our legitimate interest, including reminders and marketing;
• receive it in a format you can take elsewhere;
• withdraw a consent you gave, without affecting what happened before.

Write to [email protected]: we reply within one month. You can also lodge a complaint with the Italian Garante per la protezione dei dati personali or with the authority of your country.

10 Children

Our site is not meant for people under 16 and we do not knowingly collect their data. If you think a minor has sent us personal data, write to us and we will delete it.

11 Changes to this policy

When our services change, we update this policy and the date at the top. If a change affects you significantly, we will tell you on the site or, if you are our client, by email.