Policy Summary
Personal data collected for the following purposes and using the following services:
-
-
Access to accounts on third-party services
-
-
-
-
-
Data collection and online survey management
-
Interaction with live chat platforms
-
Interaction with social networks and external platforms
-
-
-
Registration and authentication
-
Registration and authentication provided directly by this Website
-
Remarketing and behavioral targeting
-
Platform and hosting services
-
-
Content and functionality performance testing (A/B testing)
-
Viewing content from external platforms
-
YouTube Video Widget, Google Site Search with AdSense, Google Site Search, Google Maps Widget and Instagram Widget
Personal Data: Cookies; Usage data
-
Google Fonts
Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service
-
Font Awesome
Personal Data: Usage Data
Further information on Personal Data
-
-
Analysis of User Data and Predictions (“Profiling”)
The Owner may process the usage data collected through this Website to create or update user profiles. This type of processing allows the Owner to evaluate choices, preferences and behavior of the User for the purposes specified in the respective sections of this document.
User profiles can also be created using automated tools, such as algorithms, which can also be offered by third parties. To obtain further information on the profiling activity, the User can refer to the respective sections of this document.
The User has the right to object to such profiling activity at any time. To learn more about the User's rights and how to exercise them, the User can refer to the section of this document relating to User rights.
-
Personal Data collected through sources other than the User
The Owner of this Website may have legitimately collected Personal Data relating to the User without his involvement, drawing on sources provided by third parties, in accordance with the legal bases described in the section relating to the legal bases of the processing.
If the Owner has collected Personal Data in this way, the User may find specific information regarding the sources in the respective sections of this document or by contacting the Owner.
-
User identification via universally unique identifier (UUID)
This Website may track Users by saving the so-called "universally unique identifier" (UUID) for statistical analysis purposes or to store Users' preferences. This identifier is generated with the installation of this Application, it is not deleted when the Application is closed or updated but is permanently removed only if the User decides to uninstall the Application from their device. If the application is reinstalled, a new UUID is generated.
-
Unique device identification
This Website may track Users by saving a unique identification code of their device, for statistical purposes or to store User preferences.
-
Push notifications
This Website may send push notifications to the User to achieve the purposes described in this privacy policy.
In most cases, Users may choose not to receive push notifications by consulting their device settings, such as notification settings for mobile phones, and then changing those settings for this Website or for some or all applications on the device in question.
Users should be aware that disabling push notifications may negatively impact the use of this Website.
-
Push notifications based on the User's geographic location
This Website may use the User's geographic location to send push notifications in order to achieve the purposes described in this privacy policy.
In most cases, Users can choose not to receive push notifications by visiting their device settings, such as the notification settings for mobile phones, and then changing those settings for some or all applications on that device.
Users should be aware that disabling push notifications may negatively impact the use of this Website.
-
Push notifications for direct marketing
This Website may send push notifications to the User for direct marketing purposes (in order to offer services and products provided by third parties or unrelated to the service or product provided by this Website).
In most cases, Users may opt out of receiving push notifications by visiting their device settings, such as notification settings for mobile phones, and then changing those settings for this Website, or for all applications on that device.
Users should be aware that disabling push notifications may negatively impact the use of this Website.
In addition to the applicable device settings, the User may also avail himself of the rights described in the relevant section of this privacy policy.
-
-
Data Controller
Gielle srl
Via Vincenzo Capelli, 6
20124 MILAN (MI)
ITALY
Owner's email address: customerservice@gielleitalia.com
Full Policy
Data Controller
Gielle srl
Via Vincenzo Capelli, 6
20124 MILAN (MI)
ITALY
Owner's email address: customerservice@gielleitalia.com
Types of Data collected
Among the Personal Data collected by this Website, either independently or through third parties, there are: Cookies; Usage Data; email address; first name; last name; phone number; ZIP/Postal code; gender; city; address; VAT number; company name; Fiscal Code; province; billing address; street number; Data communicated while using the service.
Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data are collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.
Users who have doubts about which Data are mandatory are encouraged to contact the Owner.
Any use of Cookies – or other tracking tools – by this Website or by the owners of third-party services used by this Website, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and guarantees that he/she has the right to communicate or disseminate them, freeing the Owner from any liability towards third parties.
Method and place of processing of the collected data
Treatment methods
The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using computer and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Owner, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal, system administration personnel) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Owner. The updated list of Data Processors may always be requested from the Data Controller.
Legal basis for processing
The Data Controller processes Personal Data relating to the User if one of the following conditions exists:
- the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be allowed to process Personal Data without the User's consent or any other of the legal bases specified below, until the User objects (“opts-out”) to such processing. However, this does not apply when the processing of Personal Data is regulated by European legislation on the protection of Personal Data;
- processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
- processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the pursuit of the legitimate interest of the Owner or third parties.
However, it is always possible to ask the Owner to clarify the specific legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.
Place
The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section concerning the details on the processing of Personal Data.
The User has the right to obtain information regarding the legal basis of the transfer of Data outside the European Union or to an international organization governed by public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Owner to protect the Data.
The User can verify whether one of the transfers described above is taking place by checking the section of this document relating to the details on the processing of Personal Data or by asking the Owner by contacting him at the contact details provided at the beginning.
Retention period
The Data is processed and stored for the time required by the purposes for which it was collected.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until the performance of such contract is completed.
- Personal Data collected for purposes related to the legitimate interest of the Owner will be retained until such interest is fulfilled. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.
When the processing is based on the User's consent, the Owner may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of such period, the right of access, deletion, rectification and the right to portability of the Data can no longer be exercised.
Purpose of the Processing of Collected Data
The User's Data is collected to allow the Owner to provide its Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activity, as well as the following: Analytics, Contacting the User, Interaction with external social networks and platforms, Access to third-party accounts, Handling payments, Tag Management, SPAM protection, Advertising, Registration and authentication, Registration and authentication provided directly by this Website, Remarketing and behavioral targeting, Platform services and hosting, Content performance and functionality testing (A/B testing), Displaying content from external platforms, Content commenting, Interaction with live chat platforms and Managing data collection and online surveys.
To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data”.
Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
-
Access to accounts on third-party services
This type of service allows this Website to collect Data from your accounts on third-party services and perform actions with them.
These services are not activated automatically, but require the express authorization of the User.
Stripe Account Access (Stripe Inc)
This service allows this Website to connect with the User's account on Stripe, provided by Stripe, Inc.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Comment on content
Commenting services allow Users to formulate and make public their comments regarding the content of this Website.
Users, depending on the settings decided by the Owner, can also leave comments anonymously. If the Personal Data released by the User includes an email address, this could be used to send notifications of comments regarding the same content. Users are responsible for the content of their comments.
In the event that a commenting service provided by third parties is installed, it is possible that, even if the Users do not use the commenting service, the same collects traffic data relating to the pages in which the commenting service is installed.
Facebook Comments (Facebook, Inc.)
Facebook Comments is a service managed by Facebook, Inc. that allows the User to leave their own comments and share them within the Facebook platform.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Contact the User
Mailing list or newsletter (this Website)
By registering on the mailing list or for the newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to this Website may be transmitted. The User's email address may also be added to this list as a result of registering on this Website or after making a purchase.
Personal Data processed: CAP; city; last name; email; address; name; phone number; gender.
Category of personal data collected according to CCPA: identifiers; biometric information.
Contact form (this website)
By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header.
Personal Data processed: CAP; city; surname; email; first name; phone number.
Category of personal data collected under CCPA: identifiers.
-
Payment Management
Unless otherwise specified, this Website processes all payments by credit card, bank transfer or other means through external payment service providers. In general and unless otherwise stated, Users are requested to provide their payment details and personal information directly to such payment service providers.
This Website is not involved in the collection and processing of such information: it will instead only receive a notification from the relevant payment service provider that payment has been made.
PayPal (Paypal)
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: See Paypal privacy policy – Privacy Policy .
Category of personal data collected according to CCPA: Internet information.
Stripe (Stripe Inc.)
Stripe is a payment service provided by Stripe Inc.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
-
Tag Management
This type of service is functional to the centralized management of the tags or scripts used on this Website.
The use of such services involves the flow of User Data through them and, if applicable, their retention.
Google Tag Manager
Google Tag Manager is a tag management service provided by Google LLC or Google Ireland Limited, depending on the location from which this Website is used.
Personal Data processed: Usage Data.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Data collection and online survey management
This type of service allows this Website to manage the creation, implementation, administration, distribution and analysis of online forms and surveys in order to collect, save and reuse the Data of the Users who respond.
The Personal Data collected depends on the information requested and provided by Users in the corresponding online form.
These services can be integrated with a wide range of third-party services to allow the Owner to perform subsequent actions with the processed Data - for example, contact management, sending messages, statistics, advertising and payment processing.
Facebook Lead Acquisition Ads (Facebook, Inc.)
Facebook Lead Acquisition Ads is an advertising and data collection service provided by Facebook, Inc. that allows Users to be shown advertisements in the form of forms already pre-populated with Personal Data from their Facebook profiles, such as names and email addresses. Depending on the type of advertisement, Users may be asked to provide additional information.
Sending the form involves the collection and processing of this Data by the Owner in accordance with this privacy policy and only for the specific purpose indicated in the form and/or within this privacy policy, where applicable.
The User may exercise his/her rights, at any time, including the right to withdraw consent to the processing of his/her Data, as specified in the section containing information on the User's rights in this privacy policy.
Personal Data processed: CAP; city; surname; email; address; name; telephone number.
Place of processing: United States – Privacy Policy – Opt out . Subject adhering to the Privacy Shield.
Category of personal data collected under CCPA: identifiers.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Interaction with live chat platforms
This type of service allows you to interact with live chat platforms, managed by third parties, directly from the pages of this Website. This allows the User to contact the support service of this Website or this Website to contact the User while he is browsing its pages.
If an interaction service with live chat platforms is installed, it is possible that, even if Users do not use the service, it collects Usage Data relating to the pages in which it is installed. Furthermore, live chat conversations may be recorded.
Facebook Messenger Customer Chat (Facebook, Inc.)
Facebook Messenger Customer Chat is an interaction service with the Facebook Messenger live chat platform, provided by Facebook, Inc.
Personal Data processed: Cookies; Data communicated while using the service; Usage data.
Place of processing: United States – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Interaction with social networks and external platforms
This type of service allows interaction with social networks, or other external platforms, directly from the pages of this Website.
The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out from the respective services to ensure that the data processed on this Website are not linked to the User's profile.
Facebook Like button and social widgets (Facebook, Inc.)
The “Like” button and Facebook social widgets are services of interaction with the social network Facebook, provided by Facebook, Inc.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
PayPal button and widget (Paypal)
The PayPal button and widgets are interaction services with the PayPal platform, provided by PayPal Inc.
Personal Data processed: Cookies; Usage data.
Place of processing: See Paypal privacy policy – Privacy Policy .
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
SPAM Protection
This type of service analyzes the traffic of this Website, potentially containing Personal Data of Users, in order to filter it from parts of traffic, messages and contents recognized as SPAM.
Akismet (Automattic Inc.)
Akismet is a SPAM protection service provided by Automattic Inc.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy .
Category of personal data collected according to CCPA: Internet information.
Google reCAPTCHA
Google reCAPTCHA is a SPAM protection service provided by Google LLC or Google Ireland Limited, depending on the location from which this Website is used.
The use of the reCAPTCHA system is subject to the privacy policy and to terms of use by Google.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
-
Advertising
This type of service allows you to use the User's Data for commercial communication purposes. These communications are displayed on this Website in the form of banners and other forms of advertising, also in relation to the User's interests.
This does not mean that all Personal Data is used for this purpose. Data and conditions of use are indicated below.
Some of the services listed below may use Cookies or other Identifiers to identify the User or use the behavioral retargeting technique, i.e. display personalized advertisements based on the interests and behavior of the User, also detected outside of this Website. For more information on this, we suggest you check the privacy policies of the respective services.
In addition to the opt-out features offered by the services listed below, the User may opt-out by visiting the Network Advertising Initiative opt-out page .
Users may also opt-out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or advertising settings in general .
Google AdSense
Google AdSense is an advertising service provided by Google LLC or by Google Ireland Limited, depending on the location from which this Website is accessed. This service uses the “DoubleClick” Cookie, which tracks the use of this Website and the User's behavior in relation to the advertisements, products and services offered.
The User can decide at any time to disable all DoubleClick cookies by going to: Ad Settings .
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out . Privacy Shield participant.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Registration and authentication
By registering or authenticating, the User allows this Website to identify him/her and give him/her access to dedicated services.
Depending on what is indicated below, registration and authentication services may be provided with the help of third parties. If this occurs, this Website will be able to access some Data stored by the third party service used for registration or identification.
Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to learn more, please refer to the description of each service.
WordPress.com Single Sign On (Automattic Inc.)
WordPress.com Single Sign On is a registration and authentication service provided by Automattic Inc. and connected to the WordPress.com network.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy .
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale of data” (“sale”) under the CCPA. In addition to the information contained in this clause, the User can consult the section describing the rights of Californian consumers, for information regarding the methods to opt-out of the sale.
-
Registration and authentication provided directly by this Website
By registering or authenticating, the User allows this Website to identify him/her and give him/her access to dedicated services. Personal Data is collected and stored exclusively for registration or identification purposes. The Data collected is only that necessary to provide the service requested by the User.
Direct registration (this Website)
The User registers by filling out the registration form and providing this Website with his/her Personal Data directly.
Personal Data processed: city; company name; email address; first name; last name; phone number; province; VAT number; ZIP code; Tax ID.
Category of personal data collected according to CCPA: identifiers; commercial information.
-
Remarketing and behavioral targeting
This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the User's past use of this Website.
This activity is facilitated by tracking Usage Data and by using Cookies and other Identifiers to collect information that is then transferred to partners that manage remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
In addition to the opt-out features offered by the services listed below, the User may opt-out by visiting the Network Advertising Initiative opt-out page .
Users may also opt-out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or advertising settings in general .
Google Ads Remarketing
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on the location from which this Website is accessed, which connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
Users can choose not to use Google cookies for ad personalization by visiting the Ad Settings by Google.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out . Privacy Shield participant.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy – Opt Out . Privacy Shield participant.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Platform and hosting services
These services have the purpose of hosting and running key components of this Website, making it possible to provide this Website from a single platform. These platforms provide the Owner with a wide range of tools such as, for example, analytical tools, for managing user registration, for managing comments and databases, for e-commerce, for payment processing, etc. The use of such tools involves the collection and processing of Personal Data.
Some of these services work through servers geographically distributed in different locations, making it difficult to determine the exact location where the Personal Data is stored.
WordPress.com (Automattic Inc.)
WordPress.com is a platform provided by Automattic Inc. that allows the Owner to develop, operate and host this Website.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy .
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.
Google Analytics
Google Analytics is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on the location from which this Website is accessed, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the advertisements of its own advertising network.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out . Privacy Shield participant.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Google Analytics with anonymized IP
Google Analytics is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on the location from which this Website is accessed, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the advertisements of its own advertising network.
This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the IP address of the Users within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to a Google server and shortened within the United States.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out . Privacy Shield participant.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Facebook Analytics for Apps (Facebook, Inc.)
Facebook Analytics for Apps is a statistics service provided by Facebook, Inc.
Personal Data processed: Usage Data; various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Content and functionality performance testing (A/B testing)
The services contained in this section allow the Data Controller to track and analyze the response by the User, in terms of traffic or behavior, in relation to changes in the structure, text or any other component of this Website.
Google Optimize
Google Optimize is an A/B testing service provided by Google LLC or Google Ireland Limited, depending on the location from which this Website is used, (“Google”).
Google may use Personal Data to contextualize and personalize the ads of its advertising network.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Google Optimize 360
Google Optimize 360 is an A/B testing service provided by Google LLC or Google Ireland Limited, depending on the location from which this Website is used, (“Google”).
This service allows the Owner to target groups of Users based on their past use of this Website. Users who disable Tracking by Google Analytics will not be included in experiments created within Google Optimize 360.
Google may use Personal Data to contextualize and personalize the ads of its advertising network.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
-
Viewing content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service may still collect data on web traffic relating to the pages where the service is installed, even when users do not use it.
YouTube Video Widgets
YouTube is a video content viewing service managed by Google LLC or by Google Ireland Limited, depending on the location from which this Website is used, which allows this Website to integrate such content within its pages.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Google Fonts
Google Fonts is a typeface visualization service managed by Google LLC or by Google Ireland Limited, depending on the location from which this Website is used, which allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Google Site Search with AdSense
Google Site Search is a search engine embedding service managed by Google LLC or by Google Ireland Limited, depending on the location from which this Website is accessed, which allows this Website to integrate such content within its pages.
Google Site Search may display AdSense advertisements. To find out what data is collected, please refer to the privacy policies of this service.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out . Privacy Shield participant.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Google Site Search
Google Site Search is a search engine embedding service managed by Google LLC or by Google Ireland Limited, depending on the location from which this Website is accessed, which allows this Website to integrate such content within its pages.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Google Maps Widget
Google Maps is a map viewing service managed by Google LLC or by Google Ireland Limited, depending on the location from which this Website is used, which allows this Website to integrate such content within its pages.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy . Subject adhering to the Privacy Shield.
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Instagram Widgets (Instagram, Inc.)
Instagram is an image visualization service managed by Instagram, Inc. that allows this Website to integrate such content within its pages.
Personal Data processed: Cookies; Usage data.
Place of processing: United States – Privacy Policy .
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Font Awesome (Fonticons, Inc.)
Font Awesome is a font visualization service managed by Fonticons, Inc. that allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data.
Place of processing: United States – Privacy Policy .
Category of personal data collected according to CCPA: Internet information.
This type of processing constitutes a “sale” under the CCPA. In addition to the information in this clause, the User may consult the section describing the rights of Californian consumers for information on how to opt out of the sale.
Further information on Personal Data
-
Analysis of User Data and Predictions (“Profiling”)
The Owner may process the usage data collected through this Website to create or update user profiles. This type of processing allows the Owner to evaluate choices, preferences and behavior of the User for the purposes specified in the respective sections of this document.
User profiles can also be created using automated tools, such as algorithms, which can also be offered by third parties. To obtain further information on the profiling activity, the User can refer to the respective sections of this document.
The User has the right to object to such profiling activity at any time. To learn more about the User's rights and how to exercise them, the User can refer to the section of this document relating to User rights.
-
Personal Data collected through sources other than the User
The Owner of this Website may have legitimately collected Personal Data relating to the User without his involvement, drawing on sources provided by third parties, in accordance with the legal bases described in the section relating to the legal bases of the processing.
If the Owner has collected Personal Data in this way, the User may find specific information regarding the sources in the respective sections of this document or by contacting the Owner.
-
User identification via universally unique identifier (UUID)
This Website may track Users by saving the so-called "universally unique identifier" (UUID) for statistical analysis purposes or to store Users' preferences. This identifier is generated with the installation of this Application, it is not deleted when the Application is closed or updated but is permanently removed only if the User decides to uninstall the Application from their device. If the application is reinstalled, a new UUID is generated.
-
Unique device identification
This Website may track Users by saving a unique identification code of their device, for statistical purposes or to store User preferences.
-
Push notifications
This Website may send push notifications to the User to achieve the purposes described in this privacy policy.
In most cases, Users may choose not to receive push notifications by consulting their device settings, such as notification settings for mobile phones, and then changing those settings for this Website or for some or all applications on the device in question.
Users should be aware that disabling push notifications may negatively impact the use of this Website.
-
Push notifications based on the User's geographic location
This Website may use the User's geographic location to send push notifications in order to achieve the purposes described in this privacy policy.
In most cases, Users can choose not to receive push notifications by visiting their device settings, such as the notification settings for mobile phones, and then changing those settings for some or all applications on that device.
Users should be aware that disabling push notifications may negatively impact the use of this Website.
-
Push notifications for direct marketing
This Website may send push notifications to the User for direct marketing purposes (in order to offer services and products provided by third parties or unrelated to the service or product provided by this Website).
In most cases, Users may opt out of receiving push notifications by visiting their device settings, such as notification settings for mobile phones, and then changing those settings for this Website, or for all applications on that device.
Users should be aware that disabling push notifications may negatively impact the use of this Website.
In addition to the applicable device settings, the User may also avail himself of the rights described in the relevant section of this privacy policy.
User Rights
Users may exercise certain rights with reference to the Data processed by the Owner.
In particular, the User has the right to:
-
revoke consent at any time. The User may revoke the consent to the processing of his/her Personal Data previously expressed.
-
object to the processing of your Data. The User may object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below.
-
access your Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
-
verify and request rectification. The User can verify the accuracy of his/her Data and request its updating or correction.
-
obtain limitation of processing. When certain conditions apply, the User may request the limitation of the processing of their Data. In this case, the Owner will not process the Data for any purpose other than their conservation.
-
obtain the deletion or removal of your Personal Data. When certain conditions apply, the User may request that the Owner delete their Data.
-
receive your Data or have it transferred to another owner. The User has the right to receive his/her Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain the transfer without hindrance to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it.
-
to lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.
Details on the right to object
When Personal Data is processed in the public interest, in the exercise of public authority vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing for reasons related to their particular situation.
Users are hereby informed that, if their Data is processed for direct marketing purposes, they may object to the processing without providing any justification. To find out whether the Data Controller processes data for direct marketing purposes, Users may refer to the respective sections of this document.
How to exercise your rights
To exercise User rights, Users may direct a request to the Owner's contact details indicated in this document. Requests are filed free of charge and processed by the Owner as soon as possible, in any case within one month.
Cookie Policy
This Website uses Cookies and other Identifiers. To learn more, the User can consult the Cookie Policy .
More information about the treatment
Defense in court
The User's Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this Website or related Services by the User.
The User declares to be aware that the Owner may be required to reveal the Data by order of public authorities.
Specific information
Upon request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For needs related to operation and maintenance, this Website and any third-party services used by it may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.
Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
Response to “Do Not Track” requests
This Website does not support “Do Not Track” requests.
To find out if any third-party services used support them, the User is invited to consult their respective privacy policies.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page and, if possible, on this Website and, if technically and legally feasible, by sending a notification to Users through one of the contact details in its possession. Please therefore consult this page frequently, referring to the date of the last modification indicated at the bottom.
If the changes affect treatments whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.
Information for Californian consumers
This part of the document integrates and completes the information contained in the rest of the privacy policy and is provided by the company that manages this Website and, if applicable, by its parent company and its subsidiaries and affiliates (for the purposes of this section collectively referred to as “we”, “us” or “our”).
The provisions contained in this section apply to all Users who are considered consumers residing in the state of California, United States of America, according to the “California Consumer Privacy Act of 2018″ (such Users are referred to below simply as “you”, “your”, “yours” or “yours”), and, for such Users, these provisions prevail over any other possibly divergent or conflicting provisions contained in this privacy policy.
This part of the document uses the term “personal information” as defined in the California Consumer Privacy Act (CCPA).
Categories of personal information collected, disclosed or sold
This section summarizes the categories of personal information that we have collected, disclosed or “sold” under the CCPA and the purposes for which we process them. You can find detailed information on these activities in the section called “Detailed information on the processing of Personal Data” in this document.
Information we collect: The categories of personal information we collect
We have collected the following categories of personal information about you: identifiers, commercial information, biometric information and internet information.
We will not collect additional categories of personal information without first notifying you of a new notice.
How we collect information: What are the sources of the personal information we collect?
We collect the above categories of personal information, either directly or indirectly, from you when you use this Website.
For example, you directly provide your personal information when you submit requests via any forms on this Website. You also provide personal information indirectly when you navigate this Website, as personal information about you is automatically observed and collected. Finally, we may collect your personal information from third parties that work with us in connection with the Service or with the functioning of this Website and features thereof.
How we use the information we collect: sharing and disclosing your personal information with third parties for a business purpose.
We may disclose your personal information to third parties for business and service purposes. In this case, we enter a written agreement with such third party that requires the recipient to both keep the personal information confidential and not use it for any purpose(s) other than those necessary for the performance of the agreement.
We may also disclose your personal information to third parties when you ask or authorize us to do so in order to provide you with our Service.
For further information on the purposes of the processing, please consult the relevant section of this document.
Sale of your personal information
For purposes of this document, the term “sale” means any “selling, renting, releasing, disclosing, disseminating, making available, transferring or otherwise communicating orally, in writing, or by electronic means, a consumer's personal information by the business to another business or a third party, for monetary or other valuable consideration.”
This means that, for example, a sale can occur whenever an application publishes advertisements, performs statistical analyses on its traffic or views, or simply uses tools such as social network plug-ins and similar tools.
Your right to opt out of the sale of your personal information
You have the right to opt out of the sale of your personal information. This means that whenever you request us to stop selling your data, we will abide by your request.
Such requests may be made freely, at any time, and without submitting any verifiable request, simply by following the instructions below.
Instructions to opt out of the sale of personal information
If you would like further information or exercise your right to opt-out in relation to all the sales carried out by this Website, both online and offline, you can contact us using the contact details provided in this document.
What are the purposes for which we use your personal information?
We may use your personal information to enable the proper functioning of this Website and its features (“operational purposes”). In such cases, your personal information will be processed in a manner appropriate and proportionate to the purposes for which it was originally collected and strictly within the limits of compatible purposes.
We may also use your personal information for other reasons, such as for commercial purposes (as indicated in the section “Detailed information on the processing of Personal Data” within this document), as well as for complying with the law and defending our rights before the competent authorities when our rights or interests are threatened or when we suffer damage.
We will not use your personal information for different, unrelated, or incompatible purposes without notifying you of a new policy.
Your California Privacy Rights and How to Exercise Them
Right to know and portability
You have the right to know the following:
- the categories and sources of the personal information that we collect about you, the purposes for which we use your personal information and with whom such information is shared;
- In case of sale or disclosure of personal information to third parties for a business purpose, we will provide you with two separate lists in which we will disclose:
- for sales, the categories of personal information disclosed to each category of recipient; and
- for disclosure to third parties for a business purpose, the categories of personal information obtained by each category of recipient;
The information above will be limited to personal information collected or used in the past 12 months.
If we deliver our response electronically, the information enclosed will be “portable”, i.e. delivered in an easily usable format to enable you to transmit the information to another entity without hindrance – provided that this is technically feasible.
Right to request deletion of your personal information
You have the right to request the deletion of any of your personal information, subject to exceptions set forth by law (such as, by way of example and not limited to, where the information is used to identify and repair errors on this Website, to detect security incidents, to protect against fraudulent or illegal activities, to exercise certain rights, etc.).
If no legal exception applies, following the exercise of your right, we will delete your personal information and direct any of our service providers to do the same.
How to exercise your rights
To exercise the rights described above, you need to submit a verifiable request to us by contacting us using the details provided in this document.
In order to respond to your request, it is necessary for us to be able to identify you. Therefore, you can only exercise the above rights by submitting a verifiable request which must:
- provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative;
- describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We will not respond to any request if we are unable to verify your identity and therefore confirm that the information in our possession actually relates to you.
If you cannot personally submit a verifiable request, you may authorize a person registered with the California Secretary of State to submit a verifiable request on your behalf.
If you are an adult, you can make a verifiable request on behalf of a minor under your parental authority.
You can submit a maximum of 2 requests in a 12-month period.
How and when will we handle your request?
We will confirm receipt of your request within 10 days and provide information on how we will process it.
We will respond to your request within 45 days of receiving it. If we need more time, we will explain why and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Our communications will cover the preceding 12 month period.
If we deny your request, we will explain the reasons for our denial.
We do not charge a fee to process or respond to your verifiable request unless such request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind it.
Definitions and legal references
Personal Data (or Data)
Personal data is any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
Usage Data
This information is collected automatically through this Website (including third-party applications integrated into this Website), including: the IP addresses or domain names of the computers utilized by the User who connects to this Website, the URI (Uniform Resource Identifier) addresses, the time of the request, the method utilized to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system utilized by the visitor, the various temporal connotations of the visit (for example, the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages visited, the parameters relating to the operating system and the User's IT environment.
User
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
Interested
The natural person to whom the Personal Data refers.
Data Controller (or Controller)
The natural person, legal person, public administration or any other entity that processes personal data on behalf of the Owner, as set out in this privacy policy.
Data Controller (or Owner)
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools used, including the security measures relating to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.
This Website (or this Application)
The hardware or software tool by which the Personal Data of Users is collected and processed.
Service
The Service provided by this Website as defined in the relevant terms (if any) on this site/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.
Cookie
Small portion of data stored within the User's device.
Legal references
This privacy policy is drafted on the basis of multiple legislative systems, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy policy applies exclusively to this Website.