This notice explains how AMORIM FINE VIOLINS CREMONA S.R.L. uses personal data when you visit amorimfineviolins.com, contact us, attend an event, or use our instrument sales, trials, consignment, storage, workshop and expertise services. It also covers personal data received from other sources during provenance research. It applies to our processing under the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
Controller:
AMORIM FINE VIOLINS CREMONA S.R.L., VAT ID IT01676710195, registered office at Piazza Marconi 8, 26100 Cremona CR, Italy. Privacy contact:
luan@amorimfineviolins.com, for the attention of Luan Schreiner de Amorim.
2. Information we use and why
Inquiries and business communications
We use your name, email address, telephone number, country, correspondence and information about the instrument, service or price range that interests you. You may also tell us whether you are a musician, collector or representative of an institution. We use this information to answer questions, arrange visits and trials, prepare quotations and follow up on your request. Inquiries may reach us through our website, email, telephone, WhatsApp, our atelier or events.
Where you request steps towards a contract with us, the basis is Article 6(1)(b) GDPR. For general correspondence, delivery of a requested brochure or Collector's Brief, and contacts acting for companies or institutions, we rely on Article 6(1)(f): our legitimate interest in responding to requests and maintaining business relationships. An inquiry or brochure request does not subscribe you to marketing.
Sales and services
We process contact and address details, tax or VAT identifiers, contract and invoice details, payment confirmations, instrument records and relevant correspondence to organise sales, trials, consignments, storage, appraisals, analysis, certificates, repairs and restoration. Proportionate identity and collection-authority checks help us protect instruments and verify instructions. We request copies of identity documents only where necessary for a particular transaction or legal requirement.
The basis is Article 6(1)(b) for contracts with individuals and Article 6(1)(f) for institutional contacts, property protection and fraud prevention. Accounting, tax and other specific legal duties rely on Article 6(1)(c). Bank and card payment providers process payment details through their own systems. Please do not send full card details through our contact forms.
Provenance and instrument documentation
Instrument research may contain the identities of living former or current owners, ownership history and related correspondence. We obtain this information from clients and owners, documentation supplied with an instrument, books, published sources and other dealers' records. Our basis is Article 6(1)(f): the legitimate interests of Amorim, owners and purchasers in checking ownership history, authenticity and the reliability of instrument documentation. We limit the personal details used, and the names of living owners are not included in our public certificates, dossiers or website materials as part of our ordinary practice.
Where we receive your personal data indirectly, we provide the information required by Article 14 GDPR within a reasonable period, normally within one month. Contact us to ask about the source and use of information relating to you.
Events and photographs
For free events, we use registration and contact information to manage attendance and send practical event information, on the basis of Article 6(1)(b) or Article 6(1)(f). Event registration is separate from newsletter consent. Where we take identifiable photographs for publication or promotion, we obtain separate permission under Article 6(1)(a) and explain the intended channels and use. You can decline without losing access to the event, and we obtain appropriate permission for images of children.
Website operation and security
Hosting and security services process technical information such as your IP address, requested page, request time, browser and device information to deliver and protect the website and investigate faults or abuse. We use Hostinger for hosting and its delivery infrastructure. Contact Form 7 handles website inquiries, using a honeypot for spam prevention. Our fonts and instrument viewer are hosted with the website. The basis for necessary delivery and security processing is Article 6(1)(f): our legitimate interest in running a reliable and secure service. Optional tracking requires your consent.
Analytics and optional third-party content
With your statistics consent, Google Analytics 4 helps us understand visits, viewed pages and interactions. Google Ads and Meta advertising integrations are used by our media team and require separate marketing consent before their resources are requested. Google AdSense is not used. YouTube content is loaded only after you choose to enable the relevant video service through an informed consent control. These services can receive device, network, page and interaction information. Our
Cookie Policy identifies the services and storage used and explains your choices. The basis for optional analytics, advertising and embedded-content processing is Article 6(1)(a).
Newsletter and marketing
If you subscribe, we use your email address and any optional name to send news about instruments, acquisitions, services and events. We rely on your consent under Article 6(1)(a) GDPR and the applicable Italian electronic-marketing rules. We use an email confirmation step before adding a new subscriber. You can unsubscribe in every marketing email or by contacting us. Consent to website marketing cookies is separate from newsletter consent. We keep limited evidence of consent and withdrawal to demonstrate compliance and honour your choice. We do not use individual open-tracking pixels or tracked marketing links under this newsletter setup.
3. Who receives information
Access within Amorim is limited to people who need the information for sales, publishing, workshop work, the laboratory, finance or administration. The main external recipients are:
- Hostinger and relevant delivery/security subprocessors (including Cloudflare infrastructure) for website hosting.
- Notion for our CRM and workflow records, and Google Workspace and Drive for business email, instrument folders, documentation and images.
- Mailchimp for mailing-list administration and newsletter delivery; the MC4WP integration transfers subscription information to Mailchimp by API and does not store it on our website.
- Banks and SumUp for payment processing; specialist carriers, insurers, customs intermediaries and competent authorities where needed for a transaction or legal obligation.
- Instrument owners, buyers, independent experts and professional advisers to the extent needed for an authorised transaction, analysis or advice.
- Google services for analytics, optional advertising and YouTube content where you activate the relevant service.
Providers acting for us under our instructions are engaged under appropriate data-processing terms. Banks, public authorities and some other providers may act as independent controllers for their own purposes. We share only the data needed for the relevant purpose.
4. International transfers
Some providers, support teams or transaction participants may process personal data outside the European Economic Area. Our hosting production server is located in the United States (Arizona), with backups in the United States (Boston). Mailchimp and Google/Meta services may also involve transfers to the United States. Where required, transfers are made on the basis of an applicable European Commission adequacy decision or appropriate safeguards, such as the Commission's Standard Contractual Clauses, together with the necessary transfer assessment and supplementary measures. You can contact us for information about the safeguard used for a particular transfer.
5. How long we retain information
We keep personal data for the relevant purpose and any applicable retention requirement, then delete it or remove identifying details.
| Record |
Retention rule |
| Unsuccessful inquiries |
12 months after the last substantive contact, unless a continuing request, dispute or legal duty justifies longer retention. |
| Contracts and transaction records |
For the relationship and the applicable accounting, tax and claims periods (ordinary accounting records generally 10 years). |
| Identity documents and trial checks |
Only as long as needed for the documented verification purpose, legal obligation or claim. |
| Certificates and provenance files |
Instrument history may be retained long term; personal ownership/contact details are separated, restricted and reviewed at least annually. |
| Event registrations and images |
Registrations for 3 months after the event; identifiable promotional images for up to 24 months from capture, subject to permission and earlier withdrawal. |
| Newsletter records |
Until withdrawal or unsubscribe, reviewed after 24 months without a renewed subscription. Unconfirmed signups deleted within 30 days. |
| Consent evidence and suppression |
Limited consent evidence for 3 years after the relevant withdrawal/expiry, unless a legal hold applies; minimal suppression data while needed. |
6. Your choices and rights
Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on our legitimate interests on grounds relating to your situation, and you may object to direct marketing at any time. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal — use the website's Cookie settings link for website preferences and the unsubscribe link for newsletters, or email
luan@amorimfineviolins.com. We normally respond within one month.
You may complain to the Garante per la protezione dei dati personali in Italy at
www.garanteprivacy.it or to the competent supervisory authority in your country of habitual residence or work.
7. Required information and automated decisions
Contact information needed to answer a request, and information necessary for a contract or legal duty, must be provided if you want us to handle that request or transaction. Newsletter subscriptions, optional tracking and promotional-photo consent are voluntary, and refusal does not prevent ordinary website browsing or an unrelated inquiry. Inquiries are reviewed by a person; we do not use solely automated decisions producing legal or similarly significant effects in our inquiry or sales process.
8. Security and updates
We apply technical and organisational measures appropriate to the data and risks, including controlled access and procedures for handling security incidents. No system can eliminate every risk. We update this notice when our activities or legal requirements change and provide additional information before materially different processing begins.
