Privacy Policy - Diamina

1. Who is responsible for your data?

The website diamina.eu (and its versions diamina.es and diamina.fr) and the Diamina brand are operated by:

Diamina S.L.U. Tax ID ESB65984965 Rambla Catalunya 18, 6th floor, 08007 Barcelona (Spain) Email: [email protected]

Diamina S.L.U. is the controller of the personal data collected on this website, and in sales made by phone, by email, on social media or in person.

This policy applies under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Spanish Organic Law 3/2018 on the Protection of Personal Data (LOPDGDD).

2. What data do we use, why, and for how long?

We only collect the data we need. We do not sell your data.

Purpose	Data	Legal basis	Retention period
Processing your order, its making, delivery and after-sales service	Name, addresses, email, phone, order details	Performance of the contract	Duration of the relationship, then 6 years (accounting and tax obligations)
Metodo de pago	Payment method and proof of payment (card details are processed directly by the payment provider; we have no access to them)	Performance of the contract	6 years
Invoicing and accounting	Billing details, VAT number where applicable	Legal obligation	6 years
Identity check for purchases at or above the legal threshold (see section 3)	Identity, identity document and its copy, nationality, checks performed	Legal obligation (Law 10/2010)	10 years
Customer and professional accounts	Login details, company details, order history	Performance of the contract; legal obligation for the professional file	Until the account is closed, then the legal periods above
Answering your requests (contact, quote, bespoke jewellery)	Name, email, phone, message, files sent	Pre-contractual steps; legitimate interest	1 year after our last reply, or the duration of the contract if the request leads to an order
Newsletters and offers	Email, first name, purchase history	Consent; for customers, legitimate interest regarding similar products (you can unsubscribe at any time)	Until you unsubscribe, or 3 years without interaction
Audience measurement and advertising	Browsing data, cookie identifiers	Consent (see section 5)	According to the cookie lifetime, 13 months at most
Website security and fraud prevention	IP address, technical logs	Legitimate interest	12 months at most, unless there is an incident

3. Identity check (anti-money laundering)

As a trader in jewellery, precious stones and precious metals, Diamina S.L.U. is subject to Spanish Law 10/2010 on the prevention of money laundering and terrorist financing, and to its implementing regulation (Royal Decree 304/2014).

For any purchase at or above the threshold set by the regulations (currently €1,000), and when a professional account is opened, we must check your identity before delivery. To do so, we collect:

your first and last names, the type and number of your identity document, the issuing country, your nationality and the document’s expiry date;
a photo of your identity document;
your statement on whether you are a politically exposed person;
for a professional customer: the company details, proof of registration, and the identity of its representative and beneficial owners;
the checks we performed, in particular the screening of your name against European Union sanctions lists.

Legal basis: legal obligation (Article 6(1)(c) GDPR). Without this information we cannot deliver the order.

Retention: 10 years from the transaction, as required by Article 25 of Law 10/2010. During this period, this data cannot be erased, even at your request (Article 17(3)(b) GDPR).

Security: documents are encrypted, stored on servers located in the European Union, and only accessible to the person in charge of compliance.

Disclosure: this data may be disclosed to the Spanish Financial Intelligence Unit (Sepblac) and to the competent authorities where the law requires it.

4. Who receives your data?

Your data is processed by Diamina S.L.U. Only to the extent necessary, it may be shared with:

our partner workshops, which make your jewellery (order details, without your identity documents);
our service providers, acting on our instructions under a data processing agreement: website hosting (provider located in the European Union), website security and delivery, payment (payment providers and banks), email sending, delivery (carriers), display of customer reviews, audience measurement and advertising, accounting and administration;
public authorities (tax authorities, Sepblac, courts) where the law requires it.

Transfers outside the European Union. Some providers (in particular for payment, website security and audience measurement) may process data outside the European Union, especially in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses. Your identity documents remain stored in the European Union.

5. Cookies

This website uses:

technical cookies, needed for the website to work (cart, login, language, security). They do not require your consent;
audience measurement and advertising cookies (Google), which help us understand how the website is used and measure the effectiveness of our ads. They are only set with your consent, given through the cookie banner, and you can withdraw it at any time;
third-party content, such as the display of Google reviews (Trustindex), which may set its own cookies.

You can change your choices at any time through the “Manage cookies” link at the bottom of the page, or in your browser settings.

6. Your rights

You may at any time:

access your data and obtain a copy;
have it rectified if it is inaccurate;
request its erasure, except where we must keep it by law (accounting, identity checks);
object to processing based on our legitimate interest and, at any time, to marketing emails;
request the restriction of processing;
receive the data you provided to us in a readable format (portability);
withdraw your consent at any time, without affecting processing carried out before.

To exercise your rights, write to [data protection contact email] or by post to the address in section 1. We may ask you to prove your identity. We reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the authority of your country of residence (in France, the CNIL, www.cnil.fr).

7. Security, minors and changes

Security. We protect your data with appropriate measures: encrypted connection (HTTPS), access limited to those who need it, encryption of identity documents and regular backups.

Minors. Our products are intended for adults. We do not knowingly collect data about minors.

Changes. We may update this policy, in particular following changes in the law or in our services. The date of the latest update is shown below.

Last updated: October 6 2026