Privacy & Cookie Policy
Last updated: October 21, 2026
This Privacy & Cookie Policy explains how personal information is collected and processed through gianlucalattuada.art, including the artistic portfolio, LATTUADA Jewelry, newsletter subscriptions, and associated website services.
This website is operated in accordance with applicable data protection legislation, including the European Union General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is Gianluca Lattuada, an independent professional registered in Italy.
Website: gianlucalattuada.art
For privacy inquiries or requests concerning personal data, please contact the Data Controller.
2. Information We Collect
Depending on your interaction with the website, we may process:
- Contact information and messages voluntarily submitted through email or other communication channels.
- Email addresses and subscription information provided through newsletter forms.
- Technical information, such as IP addresses, browser and device information, and website access logs.
- Website usage information collected through analytics technologies, where enabled.
We do not intentionally collect special categories of personal data through the website.
3. Purposes and Legal Bases
Personal data is processed for the following purposes:
Professional inquiries: Responding to requests about artistic projects, exhibitions, artworks, jewelry, and collaborations. Processing is based on legitimate interests or steps taken before entering into a contract.
Newsletter communications: Sending updates about LATTUADA Jewelry, new creations, limited editions, and related artistic developments. Processing is based on the subscriber’s consent.
Website functionality and security: Maintaining technical operations, preventing misuse, and protecting the website. Processing is based on legitimate interests.
Website analytics: Understanding website traffic and improving website performance. Where required, non-essential analytics technologies are used on the basis of consent.
Legal obligations: Complying with applicable laws or responding to lawful requests.
We process personal data only to the extent necessary for the relevant purpose.
4. Newsletter and Email Communications
Newsletter subscriptions are managed through Kit (formerly ConvertKit).
By subscribing, visitors consent to receive occasional communications about LATTUADA Jewelry, including product announcements, limited editions, exclusive previews, and related artistic news.
Kit may process information necessary to administer subscriptions, including email addresses, subscription dates, confirmation status, and email interactions.
Subscribers can withdraw their consent at any time using the unsubscribe link provided in each newsletter.
Subscription information is retained while the subscription remains active. Limited records may be retained afterward where necessary to document consent, prevent unwanted resubscription, or comply with legal obligations.
For further information, see Kit’s Privacy Policy.
5. Hosting, Analytics and Service Providers
This website operates using WordPress, with hosting and related services provided by OVHcloud.
Third-party services supporting website functionality may include:
- OVHcloud: Website hosting, server infrastructure, and technical services.
- WordPress and WooCommerce: Website management, online store functionality, shopping carts, checkout, customer orders, and related operations.
- Stripe: Secure processing of online payments, transaction management, and fraud prevention. Payment card information is processed by Stripe and is not stored directly on our website. Stripe Privacy Policy.
- Kit (formerly ConvertKit): Newsletter subscriptions, email communications, and subscriber management. Kit Privacy Policy.
- Google Analytics: Website traffic measurement and analysis, subject to applicable privacy and consent requirements. Google Privacy Policy.
- Complianz: Management of cookie consent and visitor privacy preferences.
- Shipping and logistics providers: Processing of delivery information, including recipient names, shipping addresses, contact details where necessary, and shipment tracking, for the purpose of fulfilling customer orders.
Personal information is shared with these providers only where necessary for the services they perform and in accordance with applicable data protection requirements.
Personal data is not sold to third parties.
6. Cookies and Tracking Technologies
This website uses cookies and similar technologies to ensure its proper functioning, support online purchasing, remember visitor preferences, and, where consent is provided, analyze website traffic.
Cookies are small text files stored on a visitor’s device. Some are essential for the operation of the website, while others are optional and require consent under applicable data protection legislation.
6.1 Essential Cookies
Essential cookies are necessary for the website to function properly and securely.
These may include cookies used by WordPress, WooCommerce, Stripe, and Complianz for purposes such as:
- Maintaining website functionality and security.
- Managing shopping carts, checkout sessions, and order processing.
- Supporting secure payment transactions and fraud prevention.
- Remembering cookie consent preferences.
- Maintaining user sessions where applicable.
Essential cookies are used where legally permitted without prior consent, as they support services explicitly requested by visitors or necessary website operations.
6.2 Analytics Cookies
We use Google Analytics to understand how visitors interact with our website, including information about page visits, traffic sources, and general browsing activity.
Analytics data helps us evaluate website performance and improve the visitor experience.
Where required by law, non-essential analytics cookies and related tracking technologies are activated only after the visitor has provided consent through our cookie management system.
Visitors may refuse or withdraw their consent at any time.
For further information, please refer to Google’s Privacy Policy.
6.3 Third-Party Services
Certain website functions may involve external services, including:
- Kit: Embedded newsletter subscription forms and subscriber management.
- Stripe: Payment processing and transaction security.
- Google: Website analytics and, where applicable, externally hosted resources.
- Embedded content providers: External multimedia or social media content, where present.
These services may process technical information or use cookies and similar technologies according to their respective functions.
Non-essential third-party tracking technologies are subject to applicable consent requirements.
6.4 Cookie Consent Management
We use Complianz to manage cookie preferences and consent.
When visiting the website, users are presented with options to accept, reject, or customize the use of optional cookies.
Consent is voluntary and can be withdrawn or modified at any time, without affecting the lawfulness of processing previously carried out.
Essential cookies necessary for website functionality may remain active independently of optional consent.
Cookie preferences may be stored for up to 365 days, unless an earlier renewal of consent is required.
6.5 Cookie Details and Retention
The cookies used on this website may vary depending on the services enabled and the features accessed by visitors.
The detailed cookie list identifies relevant providers, purposes, and retention periods based on the website’s cookie configuration.
6.6 Managing or Disabling Cookies
Visitors can manage their cookie preferences using the consent controls available on this website.
Cookies can also be deleted or blocked through browser settings. Please note that disabling certain essential technologies may affect shopping cart functionality, secure checkout, or other website features.
For additional information about personal data processing, international transfers, and privacy rights, please refer to the other sections of this Privacy & Cookie Policy.
7. Data Retention
Personal information is retained only for as long as reasonably necessary to fulfill the purposes described in this Policy.
Newsletter information is retained while the subscription is active, subject to any limited retention necessary following unsubscription.
Professional correspondence may be retained for as long as necessary to manage the inquiry, any resulting professional relationship, and relevant legal claims or obligations.
Technical records and analytics information are retained according to the applicable purposes, service settings, and legal requirements.
Personal data is deleted or anonymized when no longer necessary, unless further retention is required by law.
8. International Data Transfers
Some service providers may process personal information outside the European Economic Area.
Where applicable, international transfers are subject to safeguards required by the GDPR, such as European Commission adequacy decisions or Standard Contractual Clauses.
Information about the relevant safeguards can be requested from the Data Controller.
9. Your Privacy Rights
Where the GDPR applies, individuals may have the right to:
- Access their personal information.
- Request correction of inaccurate data.
- Request deletion of personal information.
- Restrict certain processing activities.
- Object to processing based on legitimate interests.
- Request data portability where applicable.
- Withdraw consent at any time.
- Lodge a complaint with a competent supervisory authority.
To exercise these rights, please contact the Data Controller.
Requests will be handled in accordance with applicable legal requirements.
10. Information for Visitors in the United States
Visitors residing in the United States may be entitled to additional rights under applicable state privacy laws.
Where such legislation applies, rights may include requesting access to, correction of, or deletion of personal information, and exercising applicable opt-out rights.
This website does not intentionally sell personal information or share it for cross-context behavioral advertising.
Privacy-related requests may be submitted through our contact link.
11. Online Store, Orders and Payments
The LATTUADA Jewelry online store is powered by WooCommerce, an e-commerce platform integrated into WordPress.
When online purchasing is available, we collect and process the personal information necessary to manage orders, including customers’ names, email addresses, telephone numbers where required, billing and shipping addresses, purchased products, order details and payment status.
This information is used to process purchases, arrange delivery, provide customer assistance, manage returns and refunds, prevent fraud, and comply with applicable legal and accounting obligations.
Payments are processed securely through Stripe. Payment and transaction information may be processed by Stripe in accordance with its privacy policy. Full payment card details are not stored directly on our website.
Where necessary, relevant shipping information is shared with delivery providers to fulfil orders and provide shipment tracking.
Processing is based on contractual necessity, compliance with legal obligations, and legitimate interests in preventing fraud and maintaining transaction security, as applicable under Article 6 GDPR.
Purchasing a product does not automatically subscribe the customer to marketing communications. Newsletter subscriptions require separate consent.
Order information is retained for periods required by applicable law and, where appropriate, for the establishment, exercise or defence of legal claims.
Products may be handcrafted following an order. Applicable production times, delivery conditions, returns and consumer rights are specified in the product information and our Terms & Conditions.
12. Data Security
Reasonable technical and organizational measures are adopted to protect personal information against unauthorized access, loss, disclosure, or misuse.
No digital transmission or storage system can guarantee absolute security.
13. External Websites
The website may contain links to third-party websites, institutions, social media platforms, and other external services.
These websites operate under their own privacy practices. We encourage visitors to consult the relevant privacy information before providing personal data.
14. Children’s Privacy
The website is not specifically directed at children, and personal information is not intentionally collected from children without any authorization required by applicable law.
15. Policy Updates
This Policy may be updated to reflect changes in website functionality, service providers, applicable regulations, or data processing activities.
The latest version will remain available on this page, with its most recent update date.
16. Privacy Contact
For questions, requests, or concerns regarding personal data or this Policy:
Gianluca Lattuada