INTRODUCTION Welcome to our website ("lolligmilano.com"). Please read our Privacy Policy carefully, which applies whenever you access the website and decide to browse it and use its services, regardless of whether you purchase products. We also ask you to read the General Conditions of Use of www.lolligmilano.com , as they contain important information on privacy and the security systems adopted by the website. DATA CONTROLLERS Any personal data provided or collected through the operations you carry out on www.lolligmilano.com will be processed by Lolli G, Lorenza Guerzoni, as independent data controllers, with headquarters in via Rita Tonoli 5 (MI). It decides independently on the purposes and methods of processing, as well as on the security procedures to be applied to guarantee the confidentiality, integrity and availability of the data. DATA CONTROLLERS Currently, some of the data controllers who process your data are the following: 1. GLS, which processes the data necessary to carry out the shipping, delivery, and return of products purchased on our site; 2. Lolli G, Lorenza Guerzoni for data processing regarding the management and maintenance of Lolli G Milano servers. WHAT PERSONAL DATA FROM CUSTOMERS IS COLLECTED ON WWW.LOLLIGMILANO.COM? The personal data we receive from our customers helps us personalize and continuously improve your purchases on the site. The mandatory or optional nature of the provision is specified from time to time – with reference to the individual information requested – at the time of individual data collection, by placing an appropriate character (*) next to the mandatory information. We use this data in particular to manage orders, provide products and services, process payments, communicate with you about orders, products, services, and promotional offers, update our records, and generally manage your account, display content such as wish lists and customer reviews, and recommend products and services that may be of interest to you. We also use this data to improve our online store and platform, to prevent or detect fraud or abuse of our website, and to enable third parties to perform technical, logistical, and other activities on our behalf. Here are some of the categories of personal data we collect:

• Personal data you provide. Most of the personal data you provide is when you search, order, post to mailing lists or discussion groups, participate in contests or surveys, or communicate with customer service. For example, you provide personal data when you: search for a product; place an order through www.lolligmilano.com ; provide personal data in My Account (and you may have more than one if you have used more than one email address when ordering through www.lolligmilano.com ) or My Profile; communicate with us by phone, email, or otherwise; complete a questionnaire or contest entry; use our services; compile a Wish List or other gift registry; participate in discussion groups or other community features; write and rate reviews; notify us of special occasions; use other personal notification services such as Availability Notifications. The following data is provided: your name; address and phone number; credit card information; names of order recipients (including addresses and phone numbers); names (including addresses and phone numbers) listed in your 1-Click settings; email addresses of your friends and others; the contents of reviews and emails you send to us; your personal description and photo in My Profile; and financial information.
• Automatically Collected Data. We collect and analyze data such as: the Internet Protocol (IP) address used to connect your computer to the Internet; login; email address; password; computer and connection information such as browser type and version; and time zone setting, browser plug-in types and versions, operating system, and platform; order history, which we sometimes combine with similar information collected from other customers to create features like "Best Sellers"; the full Uniform Resource Locators (URL) (including date and time); cookie number; products you viewed or searched for; and any phone number used to contact our customer service. We may also use browser data such as cookies, Flash cookies (also known as Flash Local Shared Objects), or similar data collected through certain parts of our website for fraud prevention and other purposes. During some visits, we may use software tools such as JavaScript to evaluate and collect session information, including page load times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse movements), and methods used to browse away from the page. We may also collect technical information to help us identify your device for fraud prevention and diagnostic purposes.
• Mobile Devices: Most mobile devices provide users with the ability to disable location services. In most cases, these controls are located within the device's settings menu. If you have questions about how to disable location services on your device, we recommend contacting your mobile operator or device manufacturer.
• Personal data collected from other sources From other sources we receive data such as: updated delivery and address information from our carriers or other third parties, which we use to make changes to our records and to deliver your next orders or send you future communications more quickly. 
• Joint or co-branded offerings: We may, from time to time, offer products and services jointly with other companies or under a co-branded agreement.

ARE THE PERSONAL DATA COLLECTED THROUGH WWW.LOLLIGMILANO.COM DISCLOSED TO THIRD PARTIES? Our customers' personal data is an important part of our business and we do not share it with others. Therefore, personal data will only be disclosed in accordance with the methods described below and will not be shared with: Lolli G, Lorenza Guerzoni , and the companies under its control. In carrying out their activities, these companies comply with this Privacy Policy or with policies that provide similar protections to those described in this Privacy Policy. THIRD-PARTY SERVICE PROVIDERS: We employ other companies and individuals to perform certain functions on our behalf. For example, to fulfill orders, deliver packages, send postal mail and email, remove repetitive information from customer lists, analyze data, provide marketing assistance, provide search results and links (including paid listings and links), process credit card payments, and provide customer service. These providers have access only to the personal data necessary to perform their tasks. We assure you that they may not use the data for other purposes and are also required to process personal data in accordance with this Privacy Policy and applicable data protection laws. The third parties performing these operations have been carefully selected and are experienced, capable, and reliable, offering adequate guarantees of full compliance with applicable data processing regulations, including data security. These third parties have been appointed "data processors" for this purpose and carry out their activities according to the instructions given by Lolli G, Lorenza Guerzoni , and under her control. We periodically verify that the managers have promptly completed the tasks assigned to them and that they continue to provide adequate guarantees of full compliance with the provisions regarding personal data protection. Your data is then processed by our employees assigned to individual services; the categories of employees who perform these activities depend on the purposes for which the data was provided and are always indicated in the information we provide when you provide your personal data . PROMOTIONAL OFFERS: On occasion, we send offers to selected groups of customers of www.lolligmilano.com on behalf of other companies. In those cases, we do not provide those companies with your name and address. If you do not wish to receive such offers, you can review your Newsletter Settings and notification preferences. BUSINESS TRANSFERS: As our business continues to grow, we may sell or buy stores, subsidiaries, or production units. Typically, in such transactions, customer personal data is included among the transferred business assets, but remains subject to the commitments made in any previous Privacy Policy (unless, of course, the customer expressly consents otherwise). Furthermore, in the unlikely event that the ownership If Lolli G, Lorenza Guerzoni , or substantially all of its assets are transferred to a third party, customer personal data will naturally be among the transferred assets. PROTECTION OF www.lolligmilano.com AND OTHER PARTIES: We disclose account and other personal information only when expressly required by law; to enforce or apply our Terms of Use and Sale and other agreements; and to protect our property, rights, or the safety of www.lolligmilano.com , our users, or others. This includes exchanging information with other companies and organizations for fraud prevention or credit risk reduction purposes. This does not include selling, sharing, or otherwise disclosing personal information received from customers for commercial purposes, contrary to the commitments made in this Privacy Policy. With your consent: In cases other than those indicated above, you will be informed whenever your personal information is disclosed to third parties and you will have the opportunity to choose whether or not to disclose your personal information to third parties. Finally, we inform you that your personal information will not be transferred abroad to countries outside the European Union that do not ensure adequate levels of data protection. If this is necessary to provide you with services or to conclude a contract with www.lolligmilano.com for the purchase of products, we assure you that the transfer of your personal data to countries outside the European Union that do not ensure an adequate level of protection will be carried out only after specific contracts have been concluded between lolligmilano and said parties in accordance with applicable laws and regulations . www.lolligmilano.com may find itself processing personal data of third parties communicated directly by its users to www.lolligmilano.com , for example, when the user has purchased a product to be delivered to a friend, or when the person paying for the product is different from the person for whom the product is intended, or when the user wishes to inform a friend of a service offered by www.lolligmilano.com or the offer for sale of a particular product. In these cases, www.lolligmilano.com will ensure that the third party receives the information required by Article 13 of the GDPR. 13 of Legislative Decree 196/2003 when you register their data in your archives. However, you are responsible for obtaining the consent of the person to whom the data refers before communicating it to lolligmilano and for informing them of this Privacy Policy. You will be solely responsible for communicating information and data relating to third parties without their consent or for any improper or unlawful use of the information. We inform you that the consent of these persons is not required when the data of this individual is communicated to lolligmilano for the conclusion of a contract with lolligmilano on behalf of the third party. THE PRINCIPLES ON WHICH OUR PRIVACY POLICY IS BASED ARE AS FOLLOWS:

1. 1. process the data exclusively for the purposes and according to the methods illustrated in the information provided when the data is collected;
2. 2. use the data for purposes other than those for which the data was specifically released only where the user has given his or her express consent;
3. 3. Make data available to third-party companies only for purposes instrumental to providing the requested service and within the scope of an appointment as data controller; not disclose, assign, or transfer data to third parties for their own processing without first informing users and granting their consent;
4. 4. respond to requests for deletion, modification, or integration of the data provided, or to object to the processing of data for the purpose of sending commercial and advertising information;
5. 5. ensure correct and lawful data management, safeguarding user privacy, and applying appropriate security measures to protect the confidentiality, integrity, and availability of the data provided.

IS THE SECURITY OF MY PERSONAL DATA GUARANTEED? We are committed to protecting the security of your personal data during transmission by using PayPal/Stripe software, which encrypts the information you enter. When confirming your order, we only display the last four digits of your credit card number. Naturally, we transmit your complete credit card number to the financial institution that issues your credit card during order processing. It is important that you take appropriate measures to prevent unauthorized access to your password and computer. Always make sure you are logged out when using a shared computer. WHAT PERSONAL DATA CAN I ACCESS? Through www.lolligmilano.com , you have the possibility of accessing a wide range of data relating to your account and your transactions on www.lolligmilano.com ; you can view your data and, if necessary, update it. This list will change as our website is updated and changed. WHAT OPTIONS DO I HAVE? As noted above, you can always choose not to provide personal information, although this may be necessary to place an order or take advantage of certain features of www.lolligmilano.com, such as My Profile, Wish List, and Customer Reviews. You can add or update certain information on the "What information can I access?" pages. When you update your information, we will retain a copy of the previous version for our records. If you do not want to receive emails or other correspondence from us, you can adjust your Newsletter Settings and Notification Preferences. (You can opt out of receiving our Terms of Use and other legal notices, such as this Privacy Policy. These policies, however, will continue to govern your use of www.lolligmilano.com and orders placed on www.lolligmilano.com. It is your responsibility to review them and be aware of any changes.) If you do not want us to use the personal data we collect to personalize the third-party advertisements we show you, you can review your Newsletter Settings and Notification Preferences. The Help menu on the toolbar of most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, and how to disable cookies altogether. Additionally, you can disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on's settings or visiting its manufacturer's website. However, because cookies allow you to take advantage of some essential features of www.lolligmilano.com , we recommend that you leave them enabled. For example, if you block or reject our cookies, you will not be able to add items to your Shopping Cart, proceed to Checkout, or use any www.lolligmilano.com products and services that require registration. CAN MINORS USE www.lolligmilano.com ? Minors are not permitted to purchase products through www. lolligmilano.com Users under the age of 18 may use www.lolligmilano.com only under the supervision of a parent or guardian. YOUR RIGHTS You always have the right to obtain from Lochi Fashion sas confirmation as to whether or not personal data concerning you is being processed, even if not yet recorded, and communication of such data in an intelligible form . You also have the right to obtain from Lochi Fashion sas information regarding the source of your personal data; the purpose and method of processing of your personal data; the logic applied in the event of processing carried out with the aid of electronic means; the identification details of the data controller and data processors; the indication of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity, for example, as data processors. All this information is contained in this Privacy Policy. Furthermore, you always have the right to obtain from Lochi Fashion sas information regarding the source of your personal data; the purposes and methods of processing of your personal data; the logic applied in the event of processing carried out with the aid of electronic means; the identification details of the data controller and data processors; the indication of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity, for example, as data processors. All this information is contained in this Privacy Policy. Furthermore, you always have the right to obtain from Lochi Fashion sas information regarding the source of your personal data; Lolli G, Lorenza Guerzoni :

1. a. the updating, rectification, and integration of your personal data;
2. b. the deletion, anonymization, or blocking of your personal data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
3. c. certification that the operations referred to in letters a) and b) have been brought to the attention, including with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected.

Interested parties should address requests to the Data Controller by email at hello@lolligmilano.com. If you believe that the processing of your personal data by the Data Controller violates your privacy rights, you may file a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), following the instructions on the Authority's website www.garanteprivacy.it . You have the right to object, in whole or in part, to:

1. a. for legitimate reasons, to the processing of your personal data, even if pertinent to the purpose of the collection;
2. b. to the processing of your personal data for the purpose of sending advertising or direct marketing materials or for market research or commercial communications. You may freely exercise your rights at any time by sending a written request to Lochi Fashion sas by completing the contact form, and we will respond promptly. To ensure that your personal data is always accurate, up-to-date, relevant, and complete, please notify us of any changes using the contact form.

- Art. 130, paragraph 4, Legislative Decree 196/2003 We inform you that the legislation on the protection of personal data allows that Lolli G, Lorenza Guerzoni, without having to obtain your express consent, may use your data for direct sales activities of products similar to those you have already purchased, provided that you do not refuse such use of the email address provided. Provision of the Guarantor of 19 June 2008, regarding simplifications of procedures with respect to processing for administrative and accounting purposes. The information set out above is the minimum information that Lolli G, Lorenza Guerzoni is obligated to provide you with: For any further information regarding the processing of your personal data by lochi fashion sas, we invite you to read this Privacy Policy in its entirety. NOTICES AND REVISIONS If you have any questions about the Privacy Policy on the www.lollibijoux.com website, please email our customer service. Our business is constantly changing, and therefore, the Privacy Policy and the General Terms and Conditions of Use and Sale are also subject to change. We may send you periodic reminders of our notices and terms of use by email, unless you have requested us not to do so. If you have opted out of these changes, we recommend that you check our website frequently for any changes. Unless otherwise stated, the current Privacy Policy applies to all personal data we hold about you and your account. However, we stand by our promises and will never materially change our policies and procedures. However, if substantial changes are necessary, we will inform you so that you can express or decline your consent to the changes. Lolli G., Lorenza Guerzoni may modify or simply update, in whole or in part, the site's Privacy Policy, including in light of changes to laws or regulations governing this matter and protecting your rights. Changes and updates to the Privacy Policy will be notified to users on the Home Page as soon as they are adopted and will be binding once published on the website. We therefore ask you to regularly access this section to check the publication of the most recent and updated Privacy Policy. To learn about your rights and stay up-to-date on legislation regarding the protection of individuals with regard to the processing of personal data, we recommend visiting the website of the Italian Data Protection Authority at http://www.garanteprivacy.it/ . This Privacy Policy is subject to updates by the "Site". The version published on the Site is the one currently in effect. In the event of a material change to this Privacy Policy, the "Site" will notify the user of such change by posting a link to the revised privacy policy containing the words "Recently Updated Privacy Policy" on the Site for one week after the change. The "Site" encourages the user to periodically review the Privacy Policy to be informed of any changes. APPLICABLE LAW This Privacy Policy is governed by Italian law and in particular by the Personal Data Protection Code (Legislative Decree No. 196 of June 30, 2003), which governs the processing of personal data—including data held abroad—by anyone residing or based in Italy. The Code guarantees that the processing of personal data is carried out in compliance with fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality, personal identity, and the right to protection of personal data.

Cookie Policy

Privacy Policy on Cookies – Art. 13 of the Privacy Code

In this information we provide you with a comprehensive account of how cookies are used on this website (hereinafter "Site").

Definition of "cookie"

Cookies are tiny text files sent from the Site to the user's terminal (usually the browser, regardless of the device used—PC, tablet, or smartphone). They are stored there before being retransmitted to the Site upon the same user's next visit. This is necessary to correctly use the services provided by the Site. A cookie cannot retrieve any other data from the user's hard drive, transmit computer viruses, or capture email addresses. Each cookie is unique to the user's web browser. The term "cookies" refers to cookies used for navigation and all similar technologies.

Purpose of processing and purposes of session "technical cookies"

The cookies used on the Site are used for computer authentication, session monitoring, and storing specific technical information regarding users accessing the services offered on these web pages. Therefore, some operations on the Site cannot be performed without the use of cookies, which in such cases are therefore technically necessary. For example, accessing restricted areas of the Site and the activities that can be performed there would be much more complex and less secure without the presence of cookies that allow the user to be identified and maintained throughout the session. Pursuant to Article 122, paragraph 1, of the Privacy Code (in the version in force following the entry into force of Legislative Decree 69/2012), "technical" cookies may be used even without the data subject's consent. Furthermore, the same European body that brings together all the data protection authorities of the various Member States (the so-called "Article 29" Working Party) clarified in Opinion 4/2012 (WP194) entitled "Exemption from consent for the use of cookies" that the following are cookies for which it is not necessary to obtain the prior and informed consent of the user: 1) cookies with user-generated data (session identifier), lasting for one session or persistent cookies limited to a few hours in some cases; 2) authentication cookies, used for the purposes of authenticated services, lasting for one session; 3) user-centric security cookies, used to detect authentication abuses, lasting for a limited persistent duration; 4) session cookies for media players, such as "flash" player cookies, lasting for one session; 5) session cookies for load balancing, lasting for one session; 6) persistent cookies for customizing the user interface, lasting for the duration of a session (or slightly longer); 7) cookies for sharing content via third-party social plugins, for logged-in members of a social network. This Site uses "technical cookies" that are necessary for browsing the Site. They enable essential functions such as authentication, validation, session management, and fraud prevention. For example, they allow us to identify whether the user has regularly accessed areas of the site that require prior authentication, or user validation and session management for various services and applications, or data storage for secure access, or fraud control and prevention functions. We also specify the presence of cookies for site access statistics, for internal analysis purposes, without any sensitive data being sent or retrieved from the Site. When subscribing to the newsletter and/or sending an email with a form, the user must accept the request, either by email in the first case or by express consent by clicking the Send button in the second case. The user has the option to unsubscribe from the newsletter at any time, or to request deletion of their email address after receiving a response to the request generated by the form.

Third Party Cookies

While browsing the Site, users may also receive cookies from other websites or web servers (so-called "third-party" cookies) on their terminals. This occurs because the Site may contain elements such as images, maps, sounds, or specific links to web pages on other domains hosted on servers other than the one hosting the requested page. In other words, these cookies are set directly by website operators or servers other than the Site. These cookies may be sent to the user's browser by third-party companies directly from their websites, which can be accessed by browsing the Site. In such cases, the Site is not involved in the operation of these cookies, and their sending is the responsibility of these third-party companies. As clarified by the Italian Data Protection Authority: "The obligation to inform users about the use of cookies and, where applicable, to obtain their prior consent falls to the operator of the site that uses them, as the data controller. If a site also allows the transmission of third-party cookies, the third party is generally responsible for providing the information and obtaining consent. Users must be adequately informed, albeit using the simplified procedures provided by law, when they access the site that allows the storage of third-party cookies, or when they access content provided by third parties, and in any case, before the cookies are downloaded to their device."

Owner and Data Controllers

Below we specify the data controller of cookies and the address to which you can request information or other requests: Lorenza Guerzoni, registrant of the lolligmilano.com website . Address for exercising rights pursuant to art. 7 of the Privacy Code: hello@lolligmilano.com

Exercise of rights by the interested party

You may exercise your rights under Article 7 of the Privacy Code at any time, without any formalities (including using the specific request form provided by the Authority at www.garanteprivacy.it ), by writing to hello@lolligmilano.com.