Privacy policy


In this section, in accordance with the new European legislation introduced by EU Regulation 679/2016 and with Italian legislation (Legislative Decree n. 196/2003), information is provided on the processing of the personal data of Users who consult the pages of the website (hereinafter: "Site") or who take advantage of the purchasing services made available on the Site (hereinafter: "Users" or "Interested Parties").

This information is provided exclusively for the Site and not for other websites that the User may consult via links within the Site.

A - Type of data processed

I. Identification data

In accordance with the new European legislation introduced by EU Regulation 679/2016 and Italian legislation (Legislative Decree n. 196/2003), the consultation of the Site and the possible purchase of products sold on the Site may involve the processing of data capable of directly or indirectly identifying a natural person, such as: name, surname, residential address, email address, telephone number, IP address.

The Site does not require the data subject to provide so-called "special" data, i.e., in accordance with the provisions of the GDPR (art. 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning the health or sex life or sexual orientation of the person. If the service requested requires the processing of such data, the data subject shall be informed in advance and asked for his or her explicit consent..

II. Bank details

When purchasing products on the Site, bank details such as the number of the card or bank account indicated for payment, the card holder and the holder of the bank account will also be processed.

These data may be processed exclusively by third party companies that manage the payment methods used on the Site.

Please note that the Site uses the following payment services, for the processing of whose data please refer to their respective privacy policies:

- Shopify Payments: [](
- Apple Pay:
- Visa: [](
- American Express: [](
- Amazon Pay:

III. Browsing data

Browsing data are data automatically acquired by the systems and programs used for the operation of the Site and are necessary for the use of web services [for example IP addresses, the browser used, the domain names of the systems used by users to connect to the web portal, the URI (*Uniform Resource Identifier*) addresses of the resources requested, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment]. ) and other parameters relating to the user's operating system and computing environment].

These data are acquired even in the absence of registration on the Site or of a request for information.

Browsing data are only used in aggregate form to compile anonymous statistics on the consultation of the Site and to check its correct functioning, and do not allow the users concerned to be identified. They are deleted immediately after processing in anonymous form.

My Work, [22/03/2023 08:30].
They may, however, be used to establish liability in the event of computer crimes committed against the website.

IV. Data provided voluntarily by the user

The personal data voluntarily provided by the User (such as name, surname, telephone number, e-mail address) for the purpose of sending messages to the Site and/or purchasing the products made available are used for the sole purpose of satisfying the needs of the interested party and complying with legal obligations.

The legal basis for such processing is the fulfilment of the services inherent to the requests made and purchases made, as well as the fulfilment of legal obligations.

The information that the Site User decides to make public through the services and tools made available to him/her, is provided by the User consciously and voluntarily, exempting the Site from any liability for any breach of the law.

It is the user's responsibility to check that he/she has permission to enter personal data of third parties or content protected by national and international regulations.

V. Data collected through analytical cookies

The Site also acquires data relating to the user through the use of cookies.

For more information on the data processed through cookies, the types of cookies that are active and how to disable them, please refer to the cookie policy.

These cookies are used to keep track of the user's browsing preferences and to collect statistical data. Users can disable these cookies by accessing their browser settings, as indicated in the Site's cookie policy.

B - Purpose of processing

The personal data collected is used to

- enable the shipment of products purchased by the User;
- obtain anonymous statistical information on the use of the web portal
- to check the correct functioning of the web portal
- send communications and newsletters, both in paper and electronic format, to the e-mail address provided by the User;
- to determine responsibilities in the event of hypothetical computer crimes to the detriment of the web portal;
- compliance with any other legal obligation not included in the above purposes.

The communication of data may only be made at the request of the Judicial Authority under the terms provided for in the law.

- **

C. Legal basis for processing

I. Performance of a contract

The legal basis for the processing of personal data is the performance of the services inherent to the relationship established with the purchase of products, the signing of the Terms and Conditions, the fulfilment of legal obligations and the legitimate interest of the Site in carrying out the processing necessary for these purposes.

II. Consent of the data subject

The optional, explicit and voluntary sending of e-mails, WhatsApp messages or any other type of communication to the addresses indicated on this Site entails the subsequent collection of the sender's address, telephone number or any other personal data that will be used to respond to requests. Such processing is carried out on the basis of the consent of the data subject.

It is ensured that such processing will be based on the principles of lawfulness, fairness, transparency, adequacy, relevance and necessity as referred to in Article 5(1) of the GDPR. Specific summary information will be progressively reported or displayed on the pages of the sites created for certain on-demand services.

III. Compliance with legal obligations

Personal data may be processed without the data subject's consent if the controller is under a legal obligation to do so.

IV. Optional provision of data

Apart from what is specified for the fulfilment of the contract or legal obligations, in the case of cookies and navigation data, the user is free to provide personal data or not. However, failure to provide the data may result in the impossibility of obtaining the service.

- **

D - Processing methods and duration

Personal data are processed using IT tools and in accordance with EU Regulation no. 679/2016 and Legislative Decree no. 196/2003.

The data processed will be kept for the time necessary for the purposes described in this informative note and, therefore, for the minimum time necessary or until the data subject expressly requests it and, in any case, within the legally established time limits.

The Data Controller undertakes to adopt all appropriate security measures to prevent the loss and alteration of personal data, as well as any illicit and unauthorised use thereof.

The data will be processed exclusively by the persons authorised by the Data Controller, including possible data processors, representatives and public entities for the fulfilment of the obligations provided for by law, who carry out their respective processing activities as autonomous data controllers.

The subjects authorised by the data controller who may process the data include, by way of example: employees of the commercial and legal departments, as well as third party technical service providers, hosting providers and IT companies (this list is not exhaustive). However, the data processed will not be communicated to unspecified recipients.

Finally, data may also be processed by third party companies for the purpose of sending products.

The security of the information collected cannot be guaranteed against hacker attacks and, in general, against breaches of the security rules put in place to protect the data.

However, in the event of attacks or violations, they shall be reported to those affected and to the competent authorities in accordance with the law.

- **

E - Place of processing

The processing relating to the services of the web portal is carried out by personnel identified and expressly designated according to the specific purposes of the services requested and subscribed to.

For the processing in question, the Data Controller may use the assistance of external companies, freight forwarders, consultants, consortia, software and service providers who operate, through identified and designated personnel, within the scope of the intended purposes and in such a way as to ensure maximum security and confidentiality of the data. In all other cases, the personal data collected will not be communicated to third parties, except with the express consent of the data subject, except in cases where communication to third parties is necessary to fulfil obligations imposed by laws, regulations or provisions of the supervisory authorities, or is indispensable to protect the rights of other users or of the website itself.

Personal data will be processed and stored, solely for the purposes set out above and for secure retention and storage, on remote servers operated by industry-leading providers that ensure compliance with strict data protection standards.

This may involve the transfer of data to countries outside the EU, where all or part of such servers may be located.

In particular, personal data may be transferred outside the European Union to the company "Shopify Inc" ([](, an e-commerce plug-in used by the Site operated by the Controller.

The processing and storage of data by the said provider shall take place in a third country that is "adequate" within the meaning of the decision adopted by the European Commission, in particular the decision on the adequacy of the protection provided by the Canadian Personal Information Protection and Electronic Documents Act (*Canadian Personal Information Protection and Electronic Documents Act*) or *Privacy Shield* certification (USA), or on the basis of a contractual obligation or standard contractual clauses approved by the European Commission, or binding corporate rules approved by the European Commission.

Information Protection and Electronic Documents Act*) or *Privacy Shield* certification (USA), or on the basis of a contractual obligation or standard contractual clauses approved by the European Commission, or binding corporate rules approved through the specific procedure of Article 47 of the GDPR.

For the transfer of data to non-EU countries, it is normally not necessary to wait for national authorisation from the Guarantor. However, authorisation from the Guarantor will still be necessary if a controller wishes to use specific contractual clauses that have not been recognised as appropriate by a European Commission decision or administrative agreements concluded between public authorities.

F - Rights of data subjects

During processing, the data subject may at any time exercise the following rights:

- obtain confirmation of the existence or non-existence of the same data and, if so, to know their content and origin
- obtain the restriction of processing in the event of the occurrence of one of the cases provided for in article 18 of the GDPR
- request the erasure of data processed in violation of the law, or in the presence of one of the other conditions provided for in Article 17 (1) (a), (b), (c), (e) and (f) of the GDPR
- object in any case, on legitimate grounds, to their processing, or object to their processing in the other cases provided for in Article 21(2) and (3) and Article 22 of the GDPR;
- withdraw at any time their freely given consent to the processing of personal data for the purposes specified below;
- obtain the release of the personal data undergoing processing in a format compatible with standard software applications, in order to allow their transfer to other platforms of their choice, without any impediment to the direct transmission of the processed data to another controller, where such direct transmission is technically feasible (the so-called right to data portability).

Requests concerning the exercise of the aforementioned rights must be addressed to the Data Controller by e-mail (

In the event of a lack of response or partial response by the Controller to the above requests, the data subject shall have the right to lodge a complaint with the Garante per la protezione dei dati personali ([]( or to lodge a judicial appeal under the terms and according to the procedures provided for under Articles 77 et seq. of EU Regulation 2016/679 (GDPR).

G - Policy updates
Future regulatory updates may lead to the modification of the current informative note, uploaded on the Site on 03.07.2021.

In the event of modification, the Data Controller will notify this on the Site.

- **



Cookies are small text files that are stored on your device when you browse certain websites using your preferred browser and are saved in your browser's file directory. They are used by server-side web applications to store and retrieve client-side information.

Cookies are divided into "technical", "analytical" and "profiling" cookies. Cookies can be further divided into "first-party" and "third-party" cookies.

The use of cookies and related technologies by the Site is carried out in accordance with national and European legislation, as well as in accordance with the Provision of 8 May 2014, entitled "Identification of simplified procedures for the provision of information and acquisition of consent for the use of cookies" of the Italian Privacy Ombudsman.

The Site is hosted on the platform owned by "Shopify Inc". For more information on the cookies used by this platform and to disable them, please refer to the following link: [](

The Site uses the following cookies:

Technical Cookies.

The main purpose of technical cookies is to facilitate navigation on the Site. Almost all browsers are configured to accept cookies, but users can independently modify their browser settings or make use of specific plug-ins and block them: in this case, the use of the web portal and the use of some services may be limited.

Technical cookies are further divided into "session" cookies and "persistent" cookies: both are stored on the user's device, but the former are deleted when the browser is closed, while the latter remain stored until they expire.

The Site uses technical "session" cookies for the functioning of navigation within the pages, such as allowing authentication in reserved areas or temporarily storing the user's preferences; these cookies are deleted once the browser is closed.

The use of session cookies (which, in any case, are not stored persistently on the user's computer and are automatically deleted as soon as the browser is closed) is strictly limited to the transmission of data (consisting of random numbers generated by the server) that identify the specific session and are necessary to allow secure and efficient browsing.

In some cases, the Site also uses "persistent" technical cookies, to store user choices related, for example, to language or device type.

Persistent cookies are stored on the user's device between browser sessions and allow the user's actions on a site to be remembered. Persistent cookies can be used for a variety of purposes, such as remembering user preferences (e.g., site language) when using a site.

Analytical cookies

These cookies are used to track user browsing preferences and collect statistical data in an anonymous form.

The Site only uses third-party analytical cookies from other websites.

You can disable these cookies by accessing your browser settings.

See the links for each browser:

- Internet Explorer: []( ;
- Firefox: [](;
- Safari: [](;
- Chrome: [](;
- Opera: [](

It is also possible to disable cookies from websites by downloading special software (such as Ghostery []( or to activate the "anonymous browsing" mode: this is a function that allows you to browse without leaving any trace of your browsing data in your browser. This function only allows browsing data not to be stored in the browser.

Analytical cookies used by the Site

We inform you that the Site uses the following analytical services to obtain statistical data in relation to the use of the website:

- Google Analytics: [](

Social media plug-in cookies

The Site may also use third-party social media plug-in cookies to enable sharing of content on different social networks. They allow the user to interact through social networks (e.g. sharing function on Facebook, Twitter, YouTube or LinkedIn). These cookies can be disabled through your browser settings (see links above).

Social media cookies are not necessary for navigation. For more information on the use of cookies by social networks, please refer to their respective privacy and cookie policies:

*Facebook*: [](

*Google*: [](

*Twitter*: [](

*Instagram*: [](

LinkedIn: [](

*YouTube*: [](

Alternatively, you can also refuse the use of the relevant cookies by deactivating the use of cookies by third party providers by accessing the Network Advertising Initiative's deactivation page:


and selecting the appropriate settings through the measures provided therein.

Finally, Users are informed that the following sites may be consulted by [YourOnlineChoices]( (EU), [Network Advertising Initiative]( (US) and [Digital Advertising Alliance]( (US), [DAAC]( (Canada) to understand and manage the tracking preferences of most advertisements.

Third party profiling cookies only

Profiling cookies are used to track user browsing and create a profile of the user based on their behaviour, which can then be used to send advertising messages to the user's device. Third-party profiling cookies are cookies from other websites or advertising circuits (Google AdSense, etc.) that may be sent to the user's device after browsing the Site..

Facebook Pixel

The Facebook Pixel is a service of Facebook Inc. 1601 S. California Ave. California Ave, Palo Alto, CA 94204, USA ("Facebook"), which enables the tracking of user behaviour after clicking on a Facebook ad and going to the website of the respective operator. Conversion measurement makes it possible to measure, analyse and optimise the effectiveness of Facebook ads for statistical and market research purposes. The data collected on the Site through the use of the conversion pixel does not allow the Site to draw conclusions about the identity of the user. The data collected (e.g. the IP address of the relevant user) is transmitted via the conversion pixel, and Facebook stores and processes the data for conversion measurement purposes. The website receives anonymous reports from Facebook, and these reports do not contain any reference to the identity of the respective users. However, it cannot be ruled out that Facebook links other individual user data (e.g. user information of a Facebook account) to the user data transmitted via the website, or that Facebook uses the information for its own purposes.

The visitor tracking pixel is a service of a third party company (Facebook), and the Site cannot control or influence the data processing operations of a third party company. You can read about Facebook's privacy policy here [](

Facebook and its partners allow the placement of online advertisements both within and outside the Facebook web space. For this purpose, a cookie may also be stored on the user's personal computer.

In order to declare your consent to the use of the pixel conversion, you must be at least 13 years of age. You hereby declare that you are of legal age for such consent, or that your parent(s) or legal guardian(s) have been previously asked for their consent to the Declaration of Consent.

You can revoke your consent to the use of the conversion measure at any time. To do so, please feel free to use the following link: [](

Alternatively, you can also refuse the use of the relevant cookies by deactivating the use of cookies by third-party providers by accessing the deactivation page of the Network Advertising Initiative:


and selecting the appropriate settings through the measures provided therein.

Finally, Users are informed that the following sites may be consulted by [YourOnlineChoices]( (EU), [Network Advertising Initiative]( (US) and [Digital Advertising Alliance]( (US), [DAAC]( (Canada) to understand and manage the tracking preferences of most advertisements.

Text marketing terms and conditions: We are using a text messaging platform, subject to the following terms and conditions. By subscribing to our text marketing and notifications, you agree to these terms and conditions. By entering your phone number in the checkout process and initiating a purchase, subscribing via our registration form or keyword, you consent to us sending you SMS notifications (for your order, including abandoned cart reminders) and SMS marketing offers. You acknowledge that consent is not a condition of any purchase. Your phone number, name and purchase information will be shared with our SMS platform "SMSBump Inc", a European Union company with office in Sofia, Bulgaria, EU. This data will be used to send you targeted marketing messages and notifications. Once the text messages are sent, your phone number will be transmitted to a text message operator for delivery. If you wish to unsubscribe from receiving marketing text messages and notifications, please reply with STOP to any mobile message sent by us or use the unsubscribe link we have provided in any of our messages. You understand and agree that alternative methods of unsubscribing, such as the use of alternative wording or requests, will not be considered a reasonable means of unsubscribing. If you have any questions, please write "HELP" to the number from which you received the messages. You can also contact us for more information. If you wish to unsubscribe, please follow the procedures outlined above.