Privacy policy

Last updated: October 8, 2026

Data controller

The controller of personal data collected through this website is DIAMANTE S.A.S. DI BATTISTA MARIA TERESA & C., Corso Garibaldi 95, 61034 Fossombrone (PU), Italy — VAT IT02125220414 — email info@diamante-shoes.com — certified email diamantesnc@pec.it.

What data we collect

• Order and account data: name, addresses, email, phone, products purchased.
• Payment data: amount, order reference, chosen method and payment outcome. We never receive or store card or bank account details (see “Payments”).
• Newsletter: email, language and date of consent.
• Messages: data you send us via forms, email or WhatsApp.
• Technical data: IP address, browser, cookies (see Cookie policy).

Purposes and legal bases

• Handling orders, shipping, returns and support — performance of a contract (Art. 6(1)(b) GDPR).
• Tax and accounting obligations — legal obligation (Art. 6(1)(c)).
• Newsletter and offers, including review requests and cart reminders — consent (Art. 6(1)(a)), which you can withdraw at any time.
• Statistics (Google Analytics 4) and marketing (Meta Pixel, TikTok Pixel, Google Tag Manager) — only with your consent via the cookie banner.
• Security and fraud prevention — legitimate interest (Art. 6(1)(f)).

Payments

Online payments are processed by Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland). We only pass payment providers what they need to carry out the payment: amount, order reference and payment status, plus the contact details strictly needed for fraud checks (name and email). You enter your card number, bank login and IBAN directly with Stripe, iDEAL | Wero, Bancontact or your bank: we never receive or store them. From Stripe we only receive the payment outcome and, for cards, the card brand and last four digits.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for fraud prevention, legitimate interest (Art. 6(1)(f)). Stripe, European Payments Initiative (iDEAL | Wero) and Bancontact also process payment data as independent controllers under their own privacy notices (e.g. stripe.com/privacy). Transaction records are kept for 10 years to meet tax obligations.

WhatsApp

If you message us on WhatsApp, the message is also processed by WhatsApp Ireland Ltd. under its own privacy policy. We use your data only to reply to you.

Recipients

We only share data with those we need to run your order and the website:

• Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland) — online payment processing and fraud prevention.
• iDEAL | Wero (European Payments Initiative – EPI Company SE, Brussels, Belgium) and your bank — if you pay with iDEAL | Wero.
• Bancontact (Bancontact Payconiq Company SA, Brussels, Belgium) and your bank — if you pay with Bancontact.
• Couriers (DHL, UPS, GLS) — name, address, phone and email for delivery.
• WhatsApp (WhatsApp Ireland Ltd.) — if you message us on WhatsApp.
• Hosting (Hostinger International Ltd., Cyprus) — website servers.
• Email and newsletter services, our tax adviser.

We do not sell your data.

Transfers outside the EU

Some providers (e.g. Google, Meta, TikTok, Stripe) may process data outside the European Economic Area; in that case transfers are based on adequacy decisions or standard contractual clauses.

Retention

Order and billing data: 10 years as required by law. Newsletter: until consent is withdrawn. Support messages: 24 months. Customer account: until it is closed.

Your rights

You can request access, rectification, erasure, restriction, portability and object to processing (Arts. 15–22 GDPR), and withdraw consent at any time, by writing to info@diamante-shoes.com. You may also lodge a complaint with the supervisory authority of the country where you live or work, in particular:

• Italy: Garante per la protezione dei dati personali — www.garanteprivacy.it
• Netherlands: Autoriteit Persoonsgegevens (AP) — autoriteitpersoonsgegevens.nl
• Belgium: Data Protection Authority (GBA/APD) — gegevensbeschermingsautoriteit.be