Source: https://www.curadellabarba.it/en/pagina/13-informativa-sulla-protezione-dei-dati
Timestamp: 2019-04-25 08:57:54+00:00

Document:
1.1. The present informative explains the modality, the entity and the purpose of the treatment of the personal data collected inside our online offer and of the sites, the functions and the contents related to it (hereinafter commonly referred to as "online offer" or "site" web "). Information on data protection is applicable regardless of the domains, systems, platforms and devices (eg desktop or mobile devices) used on which the online offer is provided.
1.2. The definitions used as "personal data" or their "treatment" are referred to the definitions given in art. 4 of the General Data Protection Regulation (RGPD).
1.3. The personal data of the users that are processed in the context of this online offer includes personal data (eg names and addresses of customers), contract data (eg services to be provided, names of managers, information on payments), usage data ( eg Internet pages of our online offer visited, interest in our products) and content data (eg data entered in the contact forms).
1.4. The definition "user" concerns all the categories of people involved in data processing. They include our business partners, customers, prospects and other visitors to our online offering. The terms used, such as "user" are to be understood without gender connotations.
1.5. We treat users' personal data only in compliance with the applicable data protection directives. This means that the data of users are processed only in the presence of consent required by law, that is, in particular if the processing of data is necessary or required by law for the provision of our contract services (eg processing orders) and our online services, if there is a consensus of users, as well as for the pursuit of our legitimate interest (ie interest in the analysis, optimization and economic exploitation and security of our online offer) pursuant to art. 6, par. 1, lett. f of the RGPD, in particular with regard to the measurement of reachability, the creation of profiles for advertising or marketing purposes and the collection of access data and the use of third-party service providers.
1.6. It is specified that the legal basis of the consent is given by the art. 6, par. 1, lett. a and from the art. 7 of the RGPD, the legal basis for the treatment for the provision of our services and the execution of contractual measures is given by art. 6, par. 1, lett. b of the RGPD, the legal basis for the processing for the fulfillment of our legal obligations is given by the art. 6, par. 1, lett. c of the RGPD and the legal basis for the treatment for the purpose of safeguarding our legitimate interests is given by art. 6, par. 1, lett. f of the RGPD.
2.1. We take organizational, contractual and technical security measures using the latest technology to ensure compliance with data protection laws and to protect data we process from random manipulation, loss, destruction or destruction. voluntary or access by unauthorized persons.
2.2. The security measures also include in particular the encrypted transmission of data between your browser and our server.
3.1. The transmission of data to third parties takes place only in compliance with the provisions of the law. We transmit user data to third parties only in cases where it is necessary, for example pursuant to art. 6, par. 1 lett. b of the RGPD for the execution of contractual measures or for the pursuit of legitimate interests pursuant to art. 6, par. 1, lett. f of the RGPD for the economic and effective exercise of our commercial activity.
3.2. In cases where we use subcontractors to provide our services, we adopt the appropriate regulatory precautions as well as the corresponding technical and organizational measures to ensure the protection of personal data in accordance with applicable legal provisions.
3.3. In the event that, in the context of this information on data protection, recourse is made to content, tools or other means of other suppliers (hereinafter commonly referred to as "third party suppliers") and their declared headquarters is in a third State, it shall take into account that the data transfer takes place in the State where the third-party supplier is located. Third countries are defined as countries where the GGD does not constitute a directly applicable right, ie in principle countries outside the EU and the European Economic Area. The transmission of data in third States occurs in the presence of an adequate level of data protection, user consent or legal authorization.
4.1. We process personal data (eg name and addresses and contact details of users), contract data (eg services to be provided, names of contacts, payment information) for the purpose of fulfilling our contractual obligations and the provision of our services pursuant to art. 6, par. 1, lett. b of the RGPD.
4.2. Users have the option to create a user account in which they can consult their orders in particular. When registering to users, the required mandatory data is communicated. User accounts are not public and can not be indexed by search engines. If users have revoked their user account, their data used for the user account are deleted, unless their archiving is required by commercial or tax reasons pursuant to art. 6, par. 1, lett. c of the RGPD. It is the responsibility of the users to save their data in case of revocation that occurred before the contract expires. We have the right to irreversibly delete all user data stored during the validity of the contract.
4.3. Upon registration and new accesses as well as when using our online services, we store the IP address and time of the individual operation of the user. Archiving is done both for the pursuit of our legitimate interests, and for the users' interest to protect them from the use of incorrect data or other unauthorized use. In principle, the transmission of this data to third parties does not occur, unless it is necessary to meet our needs or to fulfill a legal obligation pursuant to art. 6, par. 1, lett. c of the RGPD.
4.4. We process usage data (eg the pages of our online offer you visit, interest in our products) and content data (eg data entered in the contact forms or user profile) for advertising purposes in a user profile , to show users indications of products starting from the services they used up to that moment.
5.1. At the time of contact with our company (via contact form or by e-mail), the user's data are processed for the purpose of processing the contact request and its follow-up pursuant to art. 6, par. 1, lett. b of the RGPD.
5.2. The indications of the users can be stored in our CRM (Customer-Relationship Management System) or on a similar organization of contact requests.
6.1. If users leave comments or other contributions, their IP addresses are stored for the pursuit of our legitimate interests pursuant to art. 6, par. 1, lett. f of the RGPD for 7 days.
6.2. This happens for our safety, if someone leaves in the comments and contributions illicit contents (insults, prohibited political propaganda, etc.). In this case we can be denounced ourselves for the comment or contribution and we are therefore interested in the identity of the author.
7.1. For the pursuit of our legitimate interests pursuant to art. 6, par. 1, lett. f of the RGPD we find the data related to each access to the server on which this service is located (the so-called server log files). The name of the displayed page, the file, the date and time of the consultation, the quantity of data transmitted, the message on the correct consultation, the type of browser and the version, the user's operating system, are part of the access data. , the URL Referrer (the page visited previously), the IP address and the requesting provider.
7.2. For security reasons (eg to clarify any improper or fraudulent transactions), the log file information is archived for a maximum duration of seven days and then deleted. Data that require prolonged storage for evidential purposes are excluded from the cancellation until the definitive clarification of the event in question.
8.1. Cookies are information that is transmitted by our web server or third-party web servers to users' browsers and that are stored for later consultation. Cookies can be made up of small files or other types of information storage.
8.2. We use "session cookies", archived only for the duration of the current visit on our website (eg to save your access status or the Cart function and thus allow the use of our online offer). In a session cookie, a randomly generated unique identification code is stored, a so-called session ID. A cookie also contains an indication of its origin and the expiration of storage. These cookies can not archive other data. Session cookies are deleted when you end up using our online offer and log out or when you close your browser.
8.4. If users do not want cookies to be stored on their computer, they are requested to deactivate the corresponding option in their browser's system settings. Archived cookies can be deleted in the browser system settings. The exclusion of cookies may determine limitations of the functions of this online offer.
9.2. Google is a certified member of the "Privacy Shield" agreement under which it guarantees compliance with European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
9.3. Google will use this information on our behalf to analyze the use of our online offer by users, to report on activities within our online offer and to provide other services related to the use of the online offer and the Internet. To do so, it can create user usage profiles in the form of a pseudonym based on the data processed.
9.4. We use Google Analytics to show ads placed by Google and its partners in advertising services only to those users who have shown interest in our online offer or that have certain characteristics (eg interest in certain topics or products, defined on basis of the pages visited) that we transmit to Google (the so-called "remarketing audiences" or "Google Analytics audiences"). With remarketing audiences, we would also like to make sure that our listings correspond to users' potential interests and are not inappropriate.
9.5. We use Google Analytics only with IP anonymisation enabled. This means that users' IP addresses will be shortened by Google within the member states of the European Union or in other signatory states of the agreement on the European Economic Area. Only in exceptional cases will the IP address be communicated entirely to a Google server in the United States and shortened there.
9.6. The IP address sent by the user's browser will not be related to other Google data. Users can prevent the storage of cookies on their computer by setting the browser software accordingly; users can also prevent the data collected by cookies about the use of the online offer being transmitted to Google and processed by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google. com / dlpage / gaoptout.
10.1. For the pursuit of our legitimate interests (ie interest in the analysis, optimization and economic use of our online offer pursuant to Article 6, paragraph 1, letter f of the RGPD) we use the marketing and remarketing services Google (abbreviated as "Google Marketing Services") of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google").
10.2. Google is a certified member of the "Privacy Shield" agreement under which it guarantees compliance with European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
10.3. Google's marketing services allow us to display advertisements for and on our site in a more targeted way, to present to users only advertisements that potentially correspond to their interests. For example, if a user sees messages for products for which he has shown interest on other sites, this is referred to as "remarketing". For these purposes, when we view our sites or other sites where Google's marketing services are active, Google directly executes its own code and inserts the so-called (re) marketing tags into the site (graphic or invisible code, also called "web beacon"). Thanks to these, a single cookie is stored on the user's device, that is a small file (similar technologies can be used instead of cookies). Cookies can be entered by different domains, such as google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file keeps track of the pages visited by the user, the contents for which he has shown interest and the offers on which he has clicked, and also contains technical information on the browser and the operating system, on the pages of origin, on the time of the visit as well as other data on the use of the online offer. The IP address of the users is also detected, for which we inform you that within the scope of Google Analytics the IP address will be shortened within the Member States of the European Union or in other States signatories of the Agreement on the Economic Area and that only in exceptional cases will be transmitted entirely to a Google server in the United States and shortened there. The IP address is not reconnected to the user's data within other Google offers. The information above may also be linked by Google with similar information from other sources. If the user then visits other sites, it is possible to show him the adverts suitable to him corresponding to his interests.
10.4. User data is treated as a pseudonym in the context of Google's marketing services. This means that Google stores and treats, for example, not the user's name or e-mail address, but the relevant data collected by the cookie in user profiles using a pseudonym. From the point of view of Google then the ads are not managed and shown to a person identified concretely, but to the owner of the cookie, whoever he is. This does not apply if a user has expressly authorized Google to process data without applying this pseudonym. The information collected by Google's marketing services about users is transmitted to Google and stored on Google servers in the United States.
10.5. The "Google AdWords" online advertising program is part of the Google marketing services we use. In the case of Google AdWords, each AdWords customer receives a different "conversion cookie". In this way it is not possible to trace cookies through the websites of the AdWords customers. Information collected through cookies is used to create conversion statistics for AdWords customers who have decided to use conversion tracking. AdWords customers get to know the total number of users who clicked on their listing and were redirected to a page with a conversion tracking tag. However, they do not receive information that allows the user to be personally identified.
10.6. We can also use the "Google Optimizer" service. Google Optimizer allows us to reconstruct, in the context of the so-called "A / B testing", the effects determined by various modifications of a site (eg changes to the input fields, design, etc.). For these test purposes, cookies are stored on users' devices. In these operations, only user data are processed in the form of a pseudonym.
10.7. We can also use the "Google Tag Manager" to integrate and manage Google's marketing analysis services on our site.
10.8. For more information on Google's use of data for marketing purposes, please visit the general presentation page: https://policies.google.com/technologies/ads, Google's data protection statement can be found on site https://policies.google.com/privacy.
10.9. If you wish to oppose advertising tailored to the interests of Google's marketing services, you can use the setting and opt-out possibilities offered by Google: http://www.google.com/ads/preferences.
11.1. For the pursuit of our legitimate interests (ie interest in the analysis, optimization and economic use of our online offer under Article 6, paragraph 1, letter f of the RGPD) we use the social plug-ins ("Plug-in") of the social network facebook.com, managed by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). The plug-ins can be elements of interaction or content (eg video, images or textual content) and are recognizable by one of the Facebook logos ("f" white on a blue background, the concepts "Like", "Like" or the symbol of a "thumbs up") or are marked with the "plug-in social Facebook" suffix. The list and the graphic appearance of Facebook's social plug-ins can be viewed on this website: https://developers.facebook.com/docs/plugins/.
11.2. Facebook is a certified member of the "Privacy Shield" agreement under which it guarantees compliance with European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
11.3. When a user activates an online offer function containing this type of plug-in, his device establishes a direct connection with the Facebook servers. The content of the plug-in is transmitted directly to the user's device and inserted into the online offer. To do so, it can create user usage profiles based on the data processed. We can not take any action on the amount of data that Facebook detects via this plug-in and therefore informs users based on our state of knowledge.
11.4. By inserting the plug-ins, Facebook gets the information that a user has consulted on the case page of the online offer. If the user has logged in on Facebook, Facebook can attribute the visit to his Facebook account. When users interact with plug-ins, for example, click the Like button or enter a comment, the corresponding information is transmitted from their device directly to Facebook and stored there. If a user is not registered with Facebook, there is still the possibility that Facebook will be aware of its IP address and store it. According to Facebook, only an anonymous IP address is stored in Germany.
11.5. To know the purpose and the extent of data collection, the subsequent processing and use of data by Facebook as well as the related rights and setting options to protect the privacy of users, see the information on data protection of Facebook : https://www.facebook.com/about/privacy/.
11.6. If a user is subscribed to Facebook and does not want Facebook to collect data on him via this online offer and link them to the subscriber data stored on Facebook, he must log out of Facebook before using our online offer and deleting cookies . You can make further settings and objections to the use of data for advertising purposes within the Facebook profile settings https://www.facebook.com/settings?tab=ads or on the US page http: // www. aboutads.info/choices/ or on the EU http://www.youronlinechoices.com/. Settings are made regardless of the platform, ie they are applied to all devices, such as desktop computers or mobile devices.
12.1. Within our Internet offer, in pursuing our legitimate interests in the analysis, optimization and economic use of our online offer and for these purposes we use the so-called "Facebook pixel" of the Facebook social network, managed by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or, if resident in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook").
12.2. Facebook is a certified member of the "Privacy Shield" agreement under which it guarantees compliance with European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
12.3. With the help of the Facebook pixel, Facebook is able to identify visitors to our online offer as a group of recipients for the representation of advertisements (the so-called "Facebook Ads"). We therefore use the Facebook pixel to show the Facebook-Ads that we activate only to those users of Facebook who have shown interest in our online offer or that have certain characteristics (eg interest in certain topics or products, defined on the basis of pages visited) that we transmit to Facebook (the so-called "personalized audience sectors"). With Facebook pixels we would also like to make sure that our Facebook-Ads correspond to the users' potential interest and are not inappropriate. With the help of the Facebook pixel we can also determine the effectiveness of Facebook advertising for statistical purposes and market research, as we see if users are redirected to our website after clicking on the Facebook advertisement ( the so-called "conversion").
12.4. The Facebook pixel is integrated directly by Facebook when you browse our Internet pages and can store on your device a so-called cookie, which is a small file. If you then log in to Facebook or visit Facebook with an already active access, the visit to our online offer will be noted in your profile. The data collected on you are anonymous for us, therefore they do not allow us to trace the identity of the users. However, the data are stored and processed by Facebook, so that they may be related to the respective user profile and used by Facebook for their advertising and market research purposes. If we transmit data to Facebook for comparative purposes, they will be coded locally in the browser and only subsequently sent via a secure connection (https). This is done for the sole purpose of comparing the data with those similarly encoded by Facebook.
12.6. You can object to the detection and use of data by Facebook pixels for the purpose of presenting Facebook-Ads. To set which type of advertising should be shown in Facebook, you can view the appropriate Facebook page and follow the instructions on how to set up advertising based on use: https://www.facebook.com/settings ? tab = ads. Settings are made regardless of the platform, ie they are applied to all devices, such as desktop computers or mobile devices.
13.1. With the following information we inform you about the contents of our newsletter, the registration process, shipping and statistical analysis as well as your rights of opposition. By subscribing to the newsletter you declare to consent to the reception and the procedures described.
13.2. Content of the newsletter: we send you newsletters, e-mails and other electronic notifications containing advertising information (hereinafter "newsletter") only upon consent of the recipients or legal authorization. If the contents of the newsletter are described in a concrete way, they are decisive for users' consent. For the rest, our newsletters contain information about our products, our offers, our promotions and our company.
13.3. Double-Opt-In and registration: subscription to the newsletter takes place through a process called "Double Opt-In". This means that after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using an e-mail address of others. Subscriptions to the newsletter are registered in order to prove the registration procedure in compliance with the legal requirements. To this end, the time of registration and confirmation and the IP address are stored. Changes to your data stored at the shipping provider are also logged.
13.4. Registration details: to subscribe to the newsletter, simply indicate the e-mail address.
13.5. The recourse to the registration of the registration procedure takes place for the pursuit of our legitimate interests pursuant to art. 6, par. 1, lett. f of the RGPD. Our interest is to use a simple and secure newsletter system that is functional to our business interests and at the same time matches users' expectations.
13.6. Withdrawal / opposition - You can cancel the receipt of our newsletter at any time as well as your consent. These operations simultaneously cancel your consent to the sending by the sending provider and the statistical analyzes. Unfortunately it is not possible to object separately to the sending by the provider responsible for sending or statistical evaluation. At the end of each newsletter you will find a link for the revocation of the newsletter. If users only subscribe to the newsletter and revoke this registration, their personal data will be deleted.
14.1. For the pursuit of our legitimate interests (ie interest in the analysis, optimization and economic use of our online offer in accordance with Article 6, paragraph 1, letter f of the RGPD) we use within our offer online content and services of third-party providers to integrate content and services, such as videos or fonts (hereinafter commonly referred to as "content"). This always assumes that third-party providers of such content know the IP address of the users, since in the absence of it they could not send content to their browsers. The IP address is therefore necessary to present this content. We endeavor to use only third-party content that uses the IP address only for the transmission of content. Third-party suppliers may also use so-called pixel tags (invisible graphic images also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" allow to analyze information, such as. visitor traffic on the pages of our site. The information used under a pseudonym can also be stored on the user's device in the form of cookies and may contain technical information on the browser and the operating system, on the websites of origin, on the time of visit and other usage data of our online offer and can also be linked to similar information from other sources.
In the event that our customers use third-party payment services (eg PayPal, Amazon Pay or instant bank transfer), the terms of sale and information on the data protection of individual third-party providers apply, which can be consulted within the respective sites or transaction applications.
External fonts of Google Inc., https://www.google.com/fonts ("Google Fonts"). The integration of Google Font is done by consulting the Google server (usually in the US). Data Protection Notice: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
Maps of the "Google Maps" service of the third-party provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data Protection Notice: https://policies.google.com/privacy/, Opt-Out: https://www.google.com/settings/ads/.
Video of the platform "YouTube" of the third-party supplier Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data Protection Notice: https://policies.google.com/privacy/, Opt-Out: https://www.google.com/settings/ads/.
Within our online offer, features of the Google+ service are integrated. These functions are offered by the third-party provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Once you've signed in to your Google+ account, clicking on the Google + button will link the content of our pages to your Google+ profile. In this way, Google can attribute the visit of our pages to your user account. We specify that we, as providers of the pages, are not aware of the content of the transmitted data nor of their use by Google+. Data Protection Notice: https://policies.google.com/privacy/, Opt-Out: https://www.google.com/settings/ads/.
Within our online offer, features of the Instagram service are integrated. These features are offered and supplemented by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. After logging into your Instagram account, clicking on the Instagram button will link the content of our pages to your Instagram profile. In this way, Instagram can attribute the visit of our pages to your user account. We specify that we, as providers of the pages, are not aware of the content of the transmitted data nor of their use by Instagram. Information on data protection: http://instagram.com/about/legal/privacy/.
Our online offer uses functions of the LinkedIn network. The supplier is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you browse one of our LinkedIn-enabled pages, a connection is created to the LinkedIn servers. LinkedIn is informed that you have visited our websites with your IP address. If you click on the "Recommend" button of LinkedIn and you are logged in to LinkedIn, LinkedIn can attribute your visit to our website to you and your user account. We specify that we as suppliers of the pages are not aware of the content of the transmitted data or of their use by LinkedIn. Data protection notice: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
We use the social plug-ins of the Pinterest social network, managed by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest"). If you view a page containing a plug-in of this type, your browser establishes a direct connection with the Pinterest servers. The plug-in transmits protocol data to the Pinterest server in the United States. This data may contain your IP address, the address of the visited sites that also contain the Pinterest functions, the type and settings of the browser, the date and time of the request, the way you use Pinterest and the cookies. Data protection notice: https://policy.pinterest.com/de/privacy-policy.
15.1. Users have the right to obtain information free of charge on the personal data stored by us on their account.
15.2. Users also have the right to request the correction of inaccurate data, the limitation of processing and the deletion of their personal data and, as the case may be, to assert their right to data portability and to file a complaint with the authority competent supervision should they assume that their data is being processed unlawfully.
15.3. Users can also revoke the consent data, usually with future effect.
16.1. The stored data will be deleted as soon as they are no longer necessary for the purposes mentioned, unless there are legal obligations that oppose the cancellation. If user data are not deleted because they are necessary for other purposes permitted by law, their processing will be limited. This means that data will be blocked and will not be used for other purposes. This applies, for example for user data that must be kept for reasons related to commercial or tax law.
16.2. According to the provisions of the law, the data are stored in our systems for an indicative period of 10 years. Without prejudice to the user's right to request a complete cancellation.
17.1. In accordance with the provisions of the law, users may object to the future processing of their personal data at any time. The opposition may be directed in particular against the processing of data for direct advertising purposes.
18.1. We reserve the right to modify the data protection notice to adapt it to a changed legal situation as well as in case of changes to the service or data processing. However, this applies only to information on the processing of data. If user consent is required or if parts of the data protection notice contain clauses regarding the contractual relationship with users, changes will be made only with the consent of users.
18.2. Users are requested to periodically inquire about the contents of the data protection notice.

References: art. 4
 art. 6
 art. 6
 art. 7
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6