Privacy and Cookie Policy

Last updated: October 1, 2026

This Privacy and Cookie Policy explains what personal data is processed when you visit the Adamantis website, contact us through the website forms, and use embedded services. This Policy has been prepared taking into account Regulation (EU) 2016/679 (GDPR), Directive 2002/58/EC, the Italian Personal Data Protection Code (Legislative Decree No. 196/2003, as amended), and the guidance of the Italian Data Protection Authority, the Garante.

What would you like to do?

  • Delete your personal data

  • Remove a published review

  • Obtain a copy of or correct your data

  • Change cookie settings

  • File a complaint

1. Who is responsible for data processing

The data controller is Adamantis, represented by Rufina Safiullina. For questions regarding data processing and the exercise of your rights, you may contact roufina@adamantis.eu. Current postal and other contact details are published on the “Contacts” page.

2. What data we process

  • Technical data: IP address, date and time of the request, requested address, browser and device information, server response code, and security log data.

  • Form data: name, email address, message or review text, and any other information voluntarily provided by the user.

  • Cookie preference data: selected website language and the user’s choice regarding the use of external services.

  • External service data: with consent, Google reCAPTCHA and YouTube may receive technical data, including the IP address and device information. When proceeding to payment through PayPal, the user provides data directly to PayPal.

Please do not enter special categories of personal data in free-text fields, such as information about health, political opinions, or religious beliefs, unless this is necessary for a specific request.

3. Purposes and legal bases

  • Responding to a request, preparing an offer, and taking steps prior to entering into a contract — Article 6(1)(b) GDPR.

  • Performing a contract, managing business correspondence, and complying with accounting and tax obligations — Articles 6(1)(b) and 6(1)(c) GDPR.

  • Protecting the website against spam, abuse, and attacks, and diagnosing errors — the controller’s legitimate interest under Article 6(1)(f) GDPR.

  • Publishing a review submitted by the user — consent under Article 6(1)(a) GDPR. Before submitting a review, the user should be aware that the name and review text may become publicly accessible.

  • Loading Google reCAPTCHA, YouTube, and other optional external components — prior consent under Article 6(1)(a) GDPR and Article 122 of Italian Legislative Decree No. 196/2003.

Providing data through a form is voluntary, but without the required fields we will not be able to process the request. Refusing optional cookies does not limit access to the website’s main content; features that depend on external services remain unavailable until consent is given.

4. Cookies and similar technologies

Cookies are small text files stored by the browser. The website uses the following first-party cookies:

Name Purpose Duration Category
lang Remembers the selected website language up to 12 months necessary functionality
adamantis_cookie_consent Stores the selected categories: necessary, reCAPTCHA, YouTube, or all up to 6 months necessary

Necessary cookies are used without separate consent because they provide explicitly requested settings and store the user’s choice. Optional external services are not loaded until the relevant category is selected or the user clicks “Accept all.” Preferences can be changed at any time via the “Cookie settings” link at the bottom of each page. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. External services

Google reCAPTCHA

reCAPTCHA helps distinguish human activity from automated requests and protects forms from spam. The service is loaded only after consent to external services has been given. The provider is Google; Google’s privacy and terms documents apply when the service is used.

YouTube

Videos are embedded using the privacy-enhanced mode via the youtube-nocookie.com domain and are loaded only after consent. Despite this mode, Google may process the user’s technical data when a video is played.

PayPal and external links

PayPal receives data only after the user independently submits the payment form. Following links to social networks and other websites is also subject to the relevant operator’s policies; before the user follows such a link, those websites do not receive data through an ordinary hyperlink.

6. Data recipients and transfers outside the EEA

Access to data may be provided, to the extent necessary for their tasks, to providers of hosting, technical support, email, accounting, or professional services, as well as to public authorities where required by law. Such parties act either as independent controllers or as processors under the relevant agreements.

Google, PayPal, and certain technical service providers may process data outside the European Economic Area. In such cases, transfers must take place on the basis of an adequacy decision by the European Commission, Standard Contractual Clauses, or another mechanism provided for under Chapter V of the GDPR. The specific conditions are described in the relevant provider’s documentation.

7. Retention periods

  • Request-related data is retained for as long as necessary to respond and manage subsequent interaction, generally for no more than 24 months after the last substantive contact, unless a longer period is required for a contract or for the protection of legal rights.

  • Documents related to contractual, accounting, and tax obligations are retained for the period required by law, generally for up to 10 years.

  • The IP address used in the form submission rate-limiting mechanism is used for 24 hours; server and security logs are retained for as long as necessary for security and incident investigation.

  • A published review is retained until consent is withdrawn or the purpose of publication no longer exists, unless another lawful basis applies.

8. User rights

Depending on the circumstances, the user may exercise the following rights:

  • Access: determine whether personal data is being processed, obtain a copy, and receive information about the processing.

  • Rectification: correct inaccurate data and complete incomplete data.

  • Erasure: request deletion of data when it is no longer necessary, consent has been withdrawn and no other legal basis applies, or the data has been processed unlawfully.

  • Restriction of processing: temporarily restrict the use of data, for example while its accuracy or the lawfulness of processing is being verified.

  • Objection: object to processing based on legitimate interests. The controller will stop processing unless it demonstrates compelling legitimate grounds that override the user’s interests, rights, and freedoms, or the data is required for the establishment, exercise, or defence of legal claims.

  • Data portability: receive the data provided by the user in a structured, machine-readable format and, where technically feasible, transmit it to another controller, where the processing is based on consent or a contract and is carried out by automated means.

  • Withdrawal of consent: withdraw consent at any time for the publication of a review or the use of optional external services. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

The website does not make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect the user.

9. How to delete your personal data

  1. Send an email to roufina@adamantis.eu with the subject “Deletion of personal data.”

  2. State your name, the email address used when contacting us, and briefly describe when and through which form you provided the data.

  3. Specify the scope of the request: delete all data relating to you, or only a specific request, message, or document.

  4. We will confirm receipt of the request and communicate the outcome without undue delay, generally within one month.

If the request is complex or a large number of requests are received at the same time, the deadline may be extended by up to a further two months. We will inform you of the extension and the reasons for it within the first month. Requests are handled free of charge; a fee may be charged or a request refused only where it is manifestly unfounded or excessive, in particular because of its repetitive nature, within the limits of Article 12 GDPR.

To protect your data, we may request only the additional information necessary to reasonably verify your identity. Do not send a copy of your passport in advance. If your identity or connection to the relevant data cannot be confirmed, we will explain what information is required.

The right to erasure is not absolute. Certain information may be retained where necessary to comply with a legal obligation, meet accounting or tax requirements, establish, exercise, or defend legal claims, or in other cases covered by Article 17(3) GDPR. In our response, we will state which data cannot be deleted, the applicable legal basis, and the relevant retention period.

10. How to delete or correct your review

  1. Send an email to roufina@adamantis.eu with the subject “Deletion of review” or “Correction of review.”

  2. State the name under which the review was published, the language of the review, the approximate date of submission or publication, and a short unique excerpt from the text. If possible, include a link to the page.

  3. State the requested action: remove the review from publication entirely, correct the name or text, or replace the review with a revised version.

The email address entered in the review form is not published. It is used to deliver the message and to communicate regarding the request. Because the published entry contains the name and review text, additional verification of the requester’s connection to the review may be required for reliable identification.

Once the request has been verified, the review will be removed from the public page or corrected. Copies in backup systems may remain for a limited period until the next deletion cycle and will not be used for republication. Data required for legal claims may be retained separately for the applicable period.

11. How to submit any data-related request

A request may be written in free form in Russian, Italian, or English and sent to roufina@adamantis.eu. Please indicate:

  • which right you wish to exercise;

  • which data or requests your application concerns;

  • information that allows us to locate the relevant record;

  • your preferred method of receiving the response.

If the request is submitted electronically, the response will generally also be provided electronically. If we refuse to comply with a request, we will explain the reasons and how to file a complaint. The user may authorise a representative; in such cases, proof of authority may be required.

12. Complaints and judicial remedies

If the user believes that their data is being processed unlawfully, they may first contact the controller at roufina@adamantis.eu. This does not limit the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian supervisory authority, or with the supervisory authority of the EU Member State of the user’s habitual residence, place of work, or place of the alleged infringement. The right to seek judicial remedies before the competent court also remains available in accordance with Articles 77–79 GDPR.

13. Legal references

14. Security and changes to this Policy

Reasonable technical and organisational measures are applied to protect data against accidental loss, unlawful access, alteration, or disclosure. If there is a material change in the way data is processed, this page will be updated; the date of the current version is stated at the beginning of this document.