Privacy Policy Last updated: November 6, 2026 1. Data Controller The data controller of the personal data collected through the website www.francescaguicciardini.com is: Francesca Guicciardini Professional headquarters: Florence, Via dei Serragli 116. Email: ask@francescaguicciardini.com 2. Personal data collected The following may be collected through the website: First name, last name, and email address. Shipping and billing addresses. Phone number, if provided. Order and payment information. Technical navigation data and cookies. Email address and newsletter subscription data. 3. Purposes and legal bases of processing Personal data is used to: Manage orders, payments, shipments, and customer requests, based on the performance of the contract. Comply with tax and administrative obligations required by law. Respond to requests sent through the site, as part of pre-contractual measures or legitimate interest in managing communications. Send newsletters and updates on artistic projects, subject to the data subject's consent. Ensure the security and proper functioning of the site, to the extent permitted by law. 4. Newsletter Subscription to the newsletter is voluntary and is managed through MailerLite. Subscribers' data is used to communicate news, artistic projects, and availability of works and prints. You can unsubscribe at any time through the link provided in each email. MailerLite's privacy policy is available at www.mailerlite.com/legal/privacy-policy. Purchasing a print does not automatically entitle you to the newsletter. 5. Data Sharing Personal data may be processed by service providers necessary for the operation of the site and the Shop, including: Wix, for site and order management. MailerLite, for newsletter management. Payment service providers. Couriers and shipping agents. Administrative and tax professionals, where necessary. Data is not sold to third parties. 6. Data retention Purchase data is retained for the time necessary to process orders and fulfill legal obligations. Data used for the newsletter is retained until consent is revoked, unless further retention obligations apply. Other data is retained for periods proportionate to the purposes for which it was collected. 7. Cookies The site may use technical cookies and, depending on the services activated, analytical or profiling cookies. For more information on the categories of cookies, retention periods, and consent management methods, please refer to the site's Cookie Policy. 8. Rights of interested parties Pursuant to EU Regulation 2016/679 (GDPR), users may, in the cases provided for by the law: Access their personal data. Request its correction or deletion. Request restriction of processing. Object to processing. Request data portability. Revoke previously granted consent. Requests can be sent to ask@francescaguicciardini.com. Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority. 9. International Transfers Some service providers used by the site, including Wix and MailerLite, may process personal data outside the European Economic Area. Any transfers will be made in compliance with applicable law, through adequacy decisions of the European Commission or appropriate safeguards, such as standard contractual clauses. 10. Updates This policy may be updated to reflect changes to the services offered or regulatory requirements.