Privacy and personal data

The controller is Buonocore Ciro, trading as Buonocore – Antiquariato e Restauro, VAT no. 10898351217. Address: Via contrada detta abbasso maranda 1 H, 80147 Napoli (NA), Italy. Data protection contact: antiquariatobuonocore@gmail.com.

This notice covers antiquariatobuonocore.it and its public object evaluation form, not separate services or applications. Contact us for explanations, data requests or security reports.

Browsing: IP address, timestamps, requested resources, browser information, technical events and errors needed to operate and protect the site.

Enquiries: first and last name, city, email, telephone, purpose of contact, photographs, category, dimensions, weight, signatures or marks, notes, analysis results, request reference and record of the privacy notice acknowledgement. Later communications are included only where relevant.

Required fields are identified in the form. Without them, online submission cannot be completed; you can contact us directly to discuss an alternative. Weight is required for precious items as indicated. Do not include identity documents, health data, faces, addresses or unnecessary third-party information. Photographs can reveal private spaces: frame only the object.

We record the privacy acknowledgement, acceptance of terms and promotional email choice separately, with text versions, language, server date and time and any withdrawals. Lack of opt-in is not consent.

Handling the enquiry, providing the requested preliminary analysis, answering questions and discussing the object rely on performance of the requested service or pre-contractual steps under GDPR Article 6(1)(b). Follow-up relates to the enquiry and does not enrol you in promotional campaigns.

Operating and securing the site and preventing abuse rely on legitimate interests in security and continuity under Article 6(1)(f), subject to necessity and proportionality. Strictly necessary retention for legal claims may rely on the same basis following a case-specific assessment.

Applicable legal, administrative or tax obligations rely on Article 6(1)(c). Acknowledging the notice records that information has been provided and a service requested; it is not consent to unrestricted processing.

Only if you select the optional box, Buonocore may use your name and email for its own updates, available objects, events, antiques and restoration services: consent under Article 6(1)(a) GDPR and applicable electronic communications rules. Consent is not required to obtain the analysis.

Selecting photographs prepares a browser preview. Submitting sends photographs, object information and contact details to the service. OpenAI APIs process photographs and object information. Dedicated name, email and telephone fields are not included in the prompt described for this service; personal information in pictures or notes may nevertheless be transmitted. Avoid including it.

AI suggests descriptions, dates, materials and possible values, and can be wrong. It does not automatically determine purchases, contracts or other legally significant outcomes about people. Any concrete offer requires human review. You may request human review or contact us without using automated analysis.

Photographs and results are not intended for public galleries or advertising. Submitting does not transfer ownership of your images; it permits the use needed for your enquiry. Buonocore does not designate these data for model training. OpenAI documentation states that API data are not used for training by default; this does not mean that no technical retention occurs.

Aruba hosts the site and enquiry archive, including necessary technical data, contacts, photographs and results. OpenAI receives photographs and object information for analysis. Providers acting for the controller operate within applicable processing instructions and agreements, including any authorised technical sub-processors.

Google/Gmail handles communications sent to antiquariatobuonocore@gmail.com. If you choose WhatsApp, Google Maps, social networks or external marketplaces, their own roles and privacy notices apply. An external link does not authorise Buonocore to share its customer archive for advertising.

Authorised personnel may access the enquiry. Where necessary, appointed professionals or competent authorities may receive relevant information for legal duties or legal claims. Disclosures must remain limited to the purpose. You may ask about the actual recipients of your case and applicable safeguards.

Buonocore may use CRM, storage, support and email delivery providers to organise enquiries and, only for opted-in contacts, its own promotional communications. Providers acting on its behalf must be governed as processors under Article 28 GDPR according to their actual activities. Contracts, access, retention, subprocessors and transfers must be checked before activation. Using a CRM does not authorise its provider to use the customer archive for its own advertising, sale of data or unspecified model training.

Using the simulator does not automatically authorise marketing or disclosure of data. Buonocore promotional emails require a separate, optional, unticked choice; refusing or withdrawing it does not prevent the indication or handling of the enquiry.

Withdraw free of charge by emailing antiquariatobuonocore@gmail.com, without needing a reason. Each promotional email must provide an easy unsubscribe option. Withdrawal stops future promotions without affecting earlier lawful processing or necessary correspondence about the enquiry.

This choice covers only emails from Buonocore. It does not authorise advertising calls, WhatsApp/SMS promotions, advertising audiences, interest profiling, or disclosure, sale or rental for independent third-party marketing. These possible uses require specific information and, where required, additional separate consents with defined recipients and purposes before activation. This form does not activate them.

The email consent does not cover using photographs, object notes or analyses in campaigns. Public or further use requires a separate assessment of rights and legal basis. CRM or delivery providers receive no blanket permission to reuse the data.

International providers, including OpenAI and chosen communication services, may involve access or transfers outside the European Economic Area. We do not promise exclusively Italian or European processing.

For customer data, OpenAI’s DPA provides for applicable adequacy decisions or standard contractual clauses. The relevant safeguards depend on the service, recipients and agreement; a privacy notice does not replace them. Ask the controller for information and a relevant copy, subject to protection of commercial secrets and others’ data.

Public form archive: the stated retention period is 180 days from submission for photographs, contact details and analysis. The service’s declared procedure removes expired enquiries on subsequent use, so deletion may occur after that threshold. You may request earlier deletion. Retention does not authorise unrelated uses.

Email and WhatsApp communications are retained as needed to answer and conclude the enquiry. If a contract follows, only necessary records are kept separately for applicable legal duties and documented legal claims. Mailboxes and devices must be considered when handling deletion requests.

Logs and backups follow hosting security needs and service cycles. Backups are not used for follow-up; deletions must be reapplied after a restoration. Ask the controller about the applicable cycle.

OpenAI documentation generally provides for abuse-monitoring logs for up to 30 days, with exceptions for legal requirements or protection of services or third parties. Disabling response storage does not mean zero retention. The terms of the service used apply.

The email choice is linked to the enquiry and usable for at most 180 days after submission, unless withdrawn earlier; it does not extend photo retention. Expiry must block promotional use even before archive cleanup. Strictly necessary evidence of consent and objections is kept separately only for documented compliance or legal defence needs; suppression lists cannot be used to send advertising.

The public site, in the configuration described, uses no advertising cookies or profiling systems. The browser stores “buonocore-language” until removed through browser settings. The form and archive use the technical session cookie “buonocore_session” for security and restricted access, not marketing. Administrative access expires after 30 minutes of inactivity and in any event after 8 hours.

Map previews are local images. Google Maps opens only when you follow a link and then its own terms apply. Email, WhatsApp, social and marketplace links are also opened at your initiative. Introducing non-essential trackers would require prior management of users’ choices under applicable rules.

Protection requires risk-appropriate technical and organisational measures, restricted access, credential management and provider oversight. No system guarantees zero risk. This technical limit does not exclude controller liability or waive individual rights.

The controller must assess, contain and document breaches. Where GDPR conditions are met, notification to the authority is required without undue delay and, where feasible, within 72 hours of awareness. High-risk breaches require communication to individuals without undue delay, subject to legal exceptions.

Report problems to antiquariatobuonocore@gmail.com with only necessary information. Do not send passwords, access keys or unnecessary third-party records. Using a provider does not eliminate legal obligations or responsibilities.

Where applicable, you may request access, rectification, erasure, restriction and portability. You may object to legitimate-interest processing on grounds relating to your situation, and to direct marketing at any time. Any consent can be withdrawn without affecting prior lawful processing. Rights are not absolute: specific records may need to be retained for legal duties or claims.

Write to antiquariatobuonocore@gmail.com with your request reference, if available. Do not automatically attach identification: if there are reasonable doubts, we may ask only for necessary verification. The usual response period is one month, with an extension of up to two additional months where permitted; reasons must be given within the first month.

You may complain to the Italian Garante at www.garanteprivacy.it or another competent GDPR authority, and seek available judicial remedies. Contacting Buonocore does not restrict these rights.

The person submitting an enquiry must be an adult entitled to provide the photographs and object information, including when acting for another person. They must have the permissions necessary to use the images for this service. Unlawful material, unauthorised photographs and irrelevant third-party personal data are not permitted.

Information must be accurate to the user’s knowledge. Unverified attribution, provenance, materials and authenticity must be described as hypotheses or statements requiring verification. Users should disclose known defects, restoration and modifications and must not alter photographs to conceal them. Expert knowledge is not required.

The online service provides an initial automated analysis of the supplied material. Submission does not appoint Buonocore to undertake an expert appraisal, certification or individual professional consultation and does not mean that an expert has inspected the object. Human examination, quotations, professional appointments or purchases must be agreed separately with explicit arrangements and conditions.

Results, descriptions and price ranges are indicative and may be incomplete or incorrect. They are not expert appraisals, authenticity certificates, definitive attributions or insurance, tax or court valuations. Stylistic similarities do not establish authorship. Photographs and statements do not replace checks of provenance, ownership, materials, condition or restrictions on circulation.

Any Buonocore commercial range is calculated as one third of the hypothetical AI retail range, with rounding. Neither is a verified market price: no current comparable-sale research or expert examination of the individual object has been performed. This calculation is not a purchase offer.

The range is not a purchase offer, guaranteed price, promised sale proceeds or commitment to sell on the user’s behalf. Buonocore remains free not to make an offer. Any proposal may differ from the automated indication following inspection and consideration of the object’s condition and the market, and must be confirmed separately.

The report, including a PDF, must not be presented to others as certification, authentication or an expert appraisal signed by Buonocore, nor altered to attribute different content or guarantees to it. Appropriate professional assessment is needed before purchase, sale, restoration or insurance; the automated result must not be the sole basis for a decision.

Buonocore may request further information, decline unlawful or irrelevant material and temporarily suspend analysis where needed for security, maintenance or abuse prevention, using proportionate measures and respecting applicable obligations. A missing result is not a negative assessment of the object. Assistance is available through the contact on this page.

Liability for false statements, infringement of image rights or other unlawful uses is assessed under applicable law according to the conduct and harm attributable to each party. These terms define the service; they do not exclude mandatory liabilities of Buonocore or providers, including for wilful misconduct or gross negligence, or restrict consumer rights or GDPR protections.

The date and version identify this notice. Material changes to purposes, providers or processing require updated information before new processing and, where needed, a new choice. Merely browsing does not constitute consent to substantial changes.