In compliance with the obligations deriving from the national (Privacy Code) and community legislation (European General Regulation n. 679/2016) regarding the protection of personal data, Imolafilo respects and protects the privacy of visitors and users.
This privacy statement applies both to the collection of information from the website and from other channels.
1 – LEGAL BASIS OF THE PROCESSING
With the use or consultation of this site, visitors and users explicitly approve this privacy statement and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service.
The provision of data and therefore the Consent to the collection and processing of data is optional, the User can deny consent, and can revoke a consent already provided at any time. However, denying consent may make it impossible to provide certain services and the browsing experience on the site would be compromised.
The data of registered customers are processed on the basis of relationships in progress with Imolafilo, from the moment the contract was concluded.
2 – PURPOSE OF THE TREATMENT
Personal data processing means: registration, storage, organization, consultation, selection, extraction, comparison, processing, use, modification, interconnection, blocking, communication, cancellation and destruction, transfer or dissemination, or the combination of two or more such operations.
The processing of data collected by the site, in addition to the related, instrumental and necessary purposes for providing the service, is aimed at the following purposes:
2.1 – STATISTICS
Collection of data and information in an exclusively aggregated and anonymous form in order to verify the correct functioning of the site, to improve the online store and the platform.
None of this information is related to the physical person-user of the site, and does not allow identification in any way.
2.2 – SECURITY
Collection of data and information in order to protect the security of the site and users (spam filters, firewalls, virus detection) and to prevent or unmask fraud or abuse to the detriment of the website.
The data are recorded automatically and may possibly also include personal data (IP address) which could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the site itself or to damage other users, or in any case harmful activities or constituting a crime. These data are never used for the identification or profiling of the User and are periodically deleted.
2.3 – MARKETING / ADVERTISING
Collection of data and information in general and in particular on the orientations and preferences of the User; send information and advertising material, including from third parties; send commercial communications, including interactive ones; perform direct sales or placement of products or services; to develop studies and statistical research on sales, customers and other information, and possibly communicate the same to third parties; transfer the data collected and processed for commercial purposes to third parties also for the sale or attempted sale, or for all those legitimate commercial and / or statistical purposes, publish reviews of our services.
These data, including possibly the IP and other identification data, are used in order to allow third parties to send advertisements relevant to the User’s interests through this site to the User’s browser and to measure the effectiveness of advertising messages. These advertisements can also be presented on other sites in the advertising circuit (remarketing or retargeting).
The advertisements published on the site are provided on the basis of agreements with third-party companies, which use data collected from them directly, for which collection our site acts as a mere intermediary. These data do not include the name, address, email address or telephone number, and are used to provide personalized advertisements on products and services. For more information on these services, please read the information provided by third-party companies, which also indicates the options to possibly disable the collection of information by these companies.
More information on the following web pages:
– Google advertising circuit: https://www.google.com/policies/technologies/ads/
– Facebook advertising circuit: https://www.facebook.com/about/privacy/
2.4 – SHOPPING / SUPPLY OF SERVICES
Collection of data to manage orders, provide products and services, process payments, communicate with users about orders, products, services and promotional offers, update registers and, in general, manage users’ accounts, show content such as lists customer wishes and reviews and recommend products and services that may be of interest to users.
2.5 – ANCILLARY ACTIVITIES
Communicate data to third parties who perform functions necessary or instrumental to the operation of the service, and to allow third parties to carry out technical, logistical and other activities on our behalf.
This site uses suppliers to carry out certain activities, such as processing orders, delivering parcels, sending traditional mail, analyzing data, providing marketing assistance, making payments with credit cards and providing services to customers.
Suppliers have access only to personal data that is necessary to perform their duties, and undertake not to use the data for other purposes, and are required to process personal data in accordance with current regulations.
This category of data is kept only for the period of time necessary for the provision of the service.
3 – DATA COLLECTED
This site collects user data in two ways.
3.1 – DATA COLLECTED IN AN AUTOMATED MANNER
While users are browsing, the following information can be collected which is kept in the site’s log files:
- Internet protocol (IP) address;
- Browser type;
- Device parameters used to connect to the site;
- Name of the internet service provider (ISP);
- Visit date and time;
- Web page of origin of the visitor (referral) and of Exit;
- Possibly the number of clicks.
These data are used to analyze user trends and collect data in aggregate form, administer and guarantee the security of the site, and are in no way attributable to the identity of the User.
3.2 – DATA PROVIDED VOLUNTARILY
The site may collect other data in the event of voluntary use of services by users, such as commenting, communication (chat, contact and email sending), purchase (shopping cart) services:
- name and surname;
- date of birth;
- email address;
- physical residence address;
- VAT number and / or tax code;
- credit card number and / or current account and / or IBAN;
- company and headquarters;
- image (avatar);
- social profiles;
- geographic location.
These data are provided voluntarily by the User when requesting the service, or when entering the comment, and will be used exclusively for the provision of the requested service and processed only for the time necessary to provide the service.
The email address is also used in order to send promotional material to users who are already customers, therefore in the context of an existing commercial relationship. The customer can always oppose the sending of such communications. For users who are not yet customers, the sending of promotional material is subject to the collection of consent, which can be revoked later.
Tax data are necessary in order to use the services provided for a fee, and for billing purposes.
The data collected by the site are not provided to third parties, unless it is a legitimate request by the judicial authority and only in the cases provided for by law. However, the data may be provided to third parties if this is necessary for the provision of a specific service requested by the User, or for tax purposes or for carrying out security checks or site optimization.
5 – DATA RETENTION PERIOD
The collected data are processed for the times necessary for the purposes for which they were collected, and in any case not beyond the times prescribed by law.
The data necessary for tax purposes are kept until the assessments relating to the corresponding tax period are defined, therefore for at least 10 years and more if the relative year is not yet prescribed for tax purposes.
Upon expiry, the data will be deleted or anonymised, unless there are additional purposes for the conservation of the same (e.g. guarantee supply obligations, tax obligations).
6 – TRANSFER OF DATA COLLECTED TO THIRD PARTIES AND TO NON-EU COUNTRIES
The personal data of users / customers are an essential component of our work and the transfer to third parties is not among our activities. However, in carrying out its activities and in carrying out the services requested by users, this site may have to transfer some data to third parties that perform specific instrumental and related tasks to those of the site, including: order fulfillment, mail delivery, data analysis , marketing assistance, credit card payments, etc … Suppliers have access only to the data necessary for the performance of their specific task, and are required to process it in accordance with this Policy.
In the case of a transfer of a company or production units, the personal data of the Clients fall within the corporate assets that are transferred, but remain subject to the commitments set out in this Notice, except for requests for new consent.
In the event that the data is transferred to companies located outside the European Union (for example Google, Facebook and Microsoft –
for LinkedIn and Skype), we make sure that they are transferred in compliance with the regulations in force on the matter and in particular with the provisions of the General Regulations for the protection of personal data. The transfer is authorized on the basis of specific decisions of the European Union and of the Guarantor for the protection of personal data http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento- of-data-to-third-countries, in particular the decision 1250/2016 (Privacy Shield http://eur-lex.europa.eu/legal-content/IT/TXT/?uri=CELEX%3A32016D1250 – here the page information from the Italian Guarantor http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/5306161), for which further consent is not required.
By activating the contract, the user expressly consents to the transfer of data in the cases indicated above.
7 – COOKIES
This site uses the following categories of cookies:
The cookies in this category include both persistent and session cookies, allow you to distinguish between connected users avoiding that a service is provided to the wrong User and therefore are the consequence of an express request from the user, and are also used for security of the site and of the users themselves. Without these cookies, the site or some portions of it may not work properly. Cookies in this category are always sent from our domain, and consent is not required for them.
Cookies in this category are used to collect information on the correct use of the site and on user behavior for statistical analysis purposes, to improve the site and simplify its use. This type of cookie collects anonymous information on the activity of users on the site and on the way in which they arrived at the site and the pages visited. Cookies in this category are sent from the site itself or from third-party domains.
Third party cookies
This site also acts as an intermediary for third-party cookies, used to provide additional services and features to visitors and to improve the use of the site itself, such as buttons for social media. Some of these cookies are profiling, i.e. used by third parties to collect information on user behavior and interests in order to provide personalized advertising.
7.2 – REFUSAL OR REVOCATION OF CONSENT TO COOKIES
DISABLING COOKIES COULD PREVENT THE CORRECT USE OF SOME FUNCTIONS OF THE SITE ITSELF, in particular the services provided by third parties may not be accessible, and therefore may not be viewable: YouTube videos or other video sharing services; the social buttons of social networks; Google maps.
Instructions for disabling cookies via a browser, and for the possible elimination of cookies already present on the user’s device, are found on the following web pages:
Windows Internet Explorer
You can find more information about cookies and how to manage them by consulting the website www.aboutcookies.org.
7.3 – THIRD PARTY COOKIES
Generally, the tracking of users does not involve identification of the same, unless the User is already registered with the service and is not already logged in, in which case it is understood that the User has already expressed his consent directly to the third party to the when registering for the relevant service (eg Facebook).
7.3.1 – GOOGLE INC.
– Google Analytics: web analysis tool used in order to allow us to examine the use of the site by users, compile reports on site activities and user behavior, check how often users visit the site, how the site is visited tracked and which pages are visited most frequently. The information is combined by Google with information collected from other sites in order to create a comparative picture of the use of the site compared to other sites in the same category.
Collected data: browser identification, date and time of interaction with the site, page of origin, IP.
Place of data processing: USA.
The data collected do not allow the personal identification of users, and are not crossed with other information relating to the same person. They are processed in aggregate and anonymized form (truncated at the last octet). Under a specific agreement, Google Inc. is prohibited from crossing these data with those obtained from other services.
– DoubleClick: a subsidiary of Google Inc. that provides online advertising services tailored to the behavior and interests of users. Cookies (DART cookies) are set when accessing a site that contains DoubleClick advertising (AdSense), and are used to publish personalized ads based on the interests of the User on this site, and to prevent the ads from being repeated.
Collected data: user behavior, start and arrival pages on the site, exit pages, IP address, browser data, device data, operating system, provider, date and time,
Place of data processing: USA.
DoubleClick cookies do not contain information that allows users to be personally identified. Sometimes the cookie contains an additional identifier used only to identify an advertising campaign to which a User has previously been exposed.
– Google Maps: Google service that offers road maps and location for urban businesses. Set cookies on the pages of the maps.
Collected data: number and behavior of the users of the maps, information relating to the page displayed, preferences on the display (zoom level, etc …).
Place of data processing: USA.
– Youtube: platform, owned by Google, for sharing videos. Cookies are set when accessing the page containing the embed, and when the video is started, and do not allow identification of the User unless he is already logged into the Google profile, in which case it is intended that the User has already expressed consent directly to Google.
For some videos on the site, the “advanced privacy https://support.google.com/youtube/answer/171780?expand=PrivacyEnhancedMode#privacy (no cookie)” option has been activated which does not provide for the storage of information about visitors unless they voluntarily play the video.
Data collected: number and behavior of users of the service, IP address, information linking visits to the site to the Google account for users already logged in, preferences for viewing videos.
Place of data processing: USA.
Disabling Google Inc. cookies
The data transmitted to Google is stored on Google’s servers in the United States. For more information on the use of data and their processing by Google, it is recommended to read Google’s information at the following internet address: https://www.google.com/intl/it/policies/privacy/.
Further information on Google Analytics cookies can be found on the following page: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
The User can selectively disable the action of Google Analytics by installing the appropriate component provided by Google on his browser (opt out). To disable the collection of data by Google Analytics, please refer to the link below: https://tools.google.com/dlpage/gaoptout.
The User can selectively disable the DoubleClick DART Cookie by preventing its connection with his browser, to the appropriate web page: https://adssettings.google.it/authenticated?hl=it#display_optout.
7.3.2 – FACEBOOK
Place of data processing: USA.
For more information on the use and purposes of cookies by Facebook, it is recommended to view the information at the following web address: https://www.facebook.com/help/cookies/update.
The User can selectively disable the Facebook Remarketing action on the appropriate page of the Digital Advertising Alliance: http://optout.aboutads.info/.
7.3.3 – PAYPAL INC.
Collected data: user behavior, IP address, browser data, device data, location data, operating system, provider, date and time, name and surname, credit card number and / or current account; email address.
Place of data processing: USA.
For more information on the use and purposes of cookies by PayPal, it is recommended to view the information at the following web address: https://www.paypal.com/it/webapps/mpp/ua/privacy-full.
DISABLING PAYPAL COOKIES MAY RESULT IN THE IMPOSSIBILITY OF PROCESSING PAYMENTS AND THEREFORE PROVIDING SERVICES
7.3.4 – SOCIAL PLUGIN
This site also incorporates plugins and / or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins do not set a cookie, but if it is already present on the visitor’s computer they are able to read it and use it according to its settings. The collection and use of information by these third parties are governed by their respective privacy policies to which please refer.
https://www.facebook.com/about/privacy/ (cookie information link https://www.facebook.com/help/cookies/)
https://twitter.com/privacy?lang=it (cookie information link https://support.twitter.com/articles/20170519-uso-dei-cookie-e-di-altre-tecnologie-simili-da-parte -of-twitter
https://www.linkedin.com/legal/privacy-policy (cookie information link https://www.linkedin.com/legal/cookie-policy)
https://www.google.com/intl/it/policies/privacy// (cookie information link https://www.google.it/intl/it/policies/technologies/cookies/)
7.3.5 – SKYPE
This site also incorporates Skype chat in order to allow a dialogue with customers. Skype sets cookies to recognize the user, and personalize the Skype web pages.
You can disable Skype cookies from the browser: open Skype and select Skype> Privacy, then uncheck the box Accept Skype cookies for the browser. Click on Save. By deactivating Skype cookies, some chat features may not be available.
More information on Skype cookies can be found at: https://support.skype.com/it/faq/FA1390/cosa-sono-i-cookie-di-skype.
8 – SECURITY MEASURES
The Data Controller processes visitor / user data in a lawful and correct manner, adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data, as well as illicit use of data. The treatment is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated, and the data is stored and stored in secure structures with access restrictions and staff verification. Access to information is strictly limited to authorized personnel.
The website is constantly monitored to check for security breaches and to ensure that information is secure.
In addition to the Owner, in some cases, categories of agents involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, may have access to the data). hosting provider, IT companies, communication agencies).
It is important that you adopt suitable protections against unauthorized access to your password and your computer. Always make sure that you are signed out when using a computer shared with other users.
9 – USER RIGHTS
Pursuant to art. 7 of Legislative Decree 30 June 2003, n. 196 http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1311248 and of the General Regulations for the protection of personal data, the User can, according to the modalities and within the limits foreseen by current legislation:
object in whole or in part, for legitimate reasons, to the processing of personal data concerning him for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication;
Request confirmation of the existence of personal data concerning him;
Know its origin;
Receive intelligible communication;
Have information about the logic, methods and purposes of the treatment;
request its updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;
in cases of consent-based processing, receive the data provided to the owner, in a structured and readable form by a data processor and in a format commonly used by an electronic device, only at the cost of any support
the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor – link to the Guarantor page http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524);
As well as, more generally, exercise all the rights that are recognized by the current provisions of the law.
Requests should be addressed to the Data Controller.
10 – SUBJECTS OF THE TREATMENT
The data controller pursuant to applicable laws is: Imolafilo, with registered office in Via Bentivoglio 24, 40026 IMOLA (BO), which can be contacted at the email email@example.com, or at the specified address.
Responsible for the treatment in accordance with applicable laws is: Imolafilo Srl, which can be contacted at the email firstname.lastname@example.org, or at the specified address.
11 – UPDATES