Privacy policy

Owner and Data Controller

EXITO S.r.l.
IT13027310013

Strada Commenda 10/B
10072 Caselle Torinese
Torino
Italia

Owner contact email: customercare@chocola.it

Types of Data collected

Among the Personal Data collected by this Website, either independently or through third parties, there are: Tracking Tools; Usage Data; answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events; first name; last name; billing address; shipping address; phone number; payment information; device information; email; purchase history; username; password; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); various types of Data; Data communicated while using the service; country; gender; date of birth; geographical location; VAT Number; company name; Tax Code; province; ZIP/Postal code; city; house number.

Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific explanatory texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Website.
Unless specified otherwise, all Data requested by this Website is mandatory. If the User refuses to provide it, it may be impossible for this Website to provide the Service. In cases where this Website states that some Data is not mandatory, Users are free not to communicate this Data without any consequences on the availability or the functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and declares that they have the right to communicate or broadcast them, thus releasing the Owner from all responsibility to third parties.

Mode and place of processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Legal basis of processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes. Note: Under some legislations the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply whenever the processing of Personal Data is subject to European data protection law;
• provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Place

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.
Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.

Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquire with the Owner using the information provided in the contact section.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

Therefore:

• Personal Data collected for purposes related to the performance of an agreement between the Owner and the User shall be retained until such agreement has been fully performed.
• Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests or demands, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Analytics, Displaying content from external platforms, SPAM protection, Platform services and hosting, Payment processing, Tag Management, Remarketing and behavioral targeting, Advertising, Registration and authentication, Interaction with live chat platforms, Data collection and online surveys, Interaction with social networks and external platforms, Contacting the User, Managing contacts and sending messages, Interaction with data collection platforms and other third parties, Location-based interactions, Registration and authentication provided directly by this Website, Transfer of Data outside the EU and Privacy preference management.

For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data”.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

• Contacting the User

  Contact by phone (this Website)

  Users who have provided their phone number might be contacted for commercial or promotional purposes related to this Website, as well as for fulfilling support requests.

  Personal Data processed: phone number.

  Mailing list or newsletter (this Website)

  By registering to the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this Website. Your email address might also be added to this list as a result of signing up to this Website or after making a purchase.

  Personal Data processed: last name; date of birth; email; country; first name; phone number; gender.

  Contact form (this Website)

  By filling in the contact form with their Data, the User authorizes this Website to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

  Personal Data processed: last name; email; first name; phone number.

• Managing contacts and sending messages

  This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
  These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

  Mailchimp (Intuit Inc.)

  Mailchimp is an email address management and message sending service provided by Intuit Inc.

  Personal Data processed: last name; date of birth; email; country; first name; phone number; gender.

  Place of processing: United States – Privacy Policy.

• Payment processing

  Unless otherwise specified, this Website processes all payments by credit card, bank transfer or other means through external payment service providers. In general, and unless stated otherwise, Users are requested to provide their payment details and personal information directly to such payment service providers. This Website is not involved in the collection and processing of such information: instead, it will only receive a notification by the applicable payment service provider as to whether payment has been successfully completed.

  Google Pay (Google Ireland Limited)

  Google Pay is a payment service provided by Google Ireland Limited that allows the User to make online payments using their Google credentials.

  Personal Data processed: last name; purchase history; Usage Data; email; billing address; shipping address; payment information; first name; phone number; Tracking Tools; various types of Data as specified in the privacy policy of the service.

  Place of processing: Ireland – Privacy Policy.

  Apple Pay (Apple Inc.)

  Apple Pay is a payment service provided by Apple Inc., which allows the User to make payments using their mobile phone.

  Personal Data processed: last name; purchase history; Usage Data; email; billing address; shipping address; payment information; first name; phone number; Tracking Tools; various types of Data as specified in the privacy policy of the service.

  Place of processing: United States – Privacy Policy.

  Amazon Payments (Amazon)

  Amazon Payments is a payment service provided by Amazon.com, Inc. that allows the User to make online payments using their Amazon credentials.

  Personal Data processed: last name; purchase history; Usage Data; email; billing address; shipping address; payment information; first name; phone number; password; Tracking Tools; username; various types of Data as specified in the privacy policy of the service.

  Place of processing: Please see Amazon's privacy policy – Privacy Policy.

  PayPal (Paypal)

  PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.

  Personal Data processed: last name; purchase history; Usage Data; email; billing address; payment information; device information; first name; phone number; password; Tracking Tools; username; various types of Data as specified in the privacy policy of the service.

  Place of processing: Please see Paypal's privacy policy – Privacy Policy.

  Stripe ( Stripe Technology Europe Ltd)

  Stripe is a payment service provided by Stripe Technology Europe Ltd.

  Personal Data processed: last name; purchase history; Usage Data; email; billing address; payment information; first name; Tracking Tools; various types of Data as specified in the privacy policy of the service.

  Place of processing: Ireland – Privacy Policy.

• Tag Management

  This type of service helps the Owner to manage the tags or scripts needed on this Website in a centralized fashion.
  This results in the Users' Data flowing through these services, possibly resulting in the retention of this Data.

  Google Tag Manager (Google Ireland Limited)

  Google Tag Manager is a tag management service provided by Google Ireland Limited.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

• Data collection and online surveys

  This type of service allows this Website to manage the creation, deployment, administration, distribution and analysis of online forms and surveys in order to collect, save and reuse User Data who respond to them.
  The Personal Data collected depends on the information requested and provided by Users in the corresponding online form.

  These services may be integrated with a wide range of third-party services to allow the Owner to take follow-up actions with the processed Data – e.g. managing contacts, sending messages, analytics, advertising and payment processing.

  Facebook Lead Ads (Meta Platforms Ireland Limited)

  Facebook Lead Ads is an advertising and data collection service provided by Meta Platforms Ireland Limited that displays advertising in the form of forms that are already pre-filled with the User's Personal Data from their Facebook profiles, such as names and email addresses. Depending on the type of advertisement, Users may be asked to provide additional information.

  Submitting the form implies the collection and processing of this Data by the Owner according to this privacy policy and solely for the specific purpose indicated in the form and/or within this privacy policy, where applicable.

  The User can exercise their rights at any time, including the right to withdraw consent to the processing of their Data, as specified in the section containing information on User rights in this privacy policy.

  Personal Data processed: last name; email; first name; phone number.

  Place of processing: Ireland – Privacy Policy – Opt out.

• Interaction with live chat platforms

  This type of service allows interaction with live chat platforms, managed by third parties, directly from the pages of this Website, in order to contact and be contacted by this Website’s support service.
  If a service for interacting with live chat platforms is installed, it is possible that, even if Users do not use the service, it will collect Usage Data relating to the pages where it is installed. In addition, live chat conversations may be recorded.

  Facebook Messenger Customer Chat (Meta Platforms Ireland Limited)

  Facebook Messenger Customer Chat is a service for interacting with the Facebook Messenger live chat platform provided by Meta Platforms Ireland Limited.

  Personal Data processed: Data communicated while using the service; Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

• Interaction with data collection platforms and other third parties

  This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Website for the purpose of saving and reusing data.
  If one of these services is installed, it is possible that, even if Users do not use the service, it will collect Usage Data relating to the pages where it is installed.

  Mailchimp widget (Intuit Inc.)

  The Mailchimp widget allows interaction with the Mailchimp email address management and message sending service provided by Intuit Inc.

  Personal Data processed: email.

  Place of processing: United States – Privacy Policy.

• Interaction with social networks and external platforms

  This type of service allows interaction with social networks, or other external platforms, directly from the pages of this Website.
  The interactions and information acquired by this Website are in any case subject to the User’s privacy settings for each social network.
  This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
  It is recommended to log out from the respective services to ensure that the data processed on this Website is not reconnected to the User’s profile.

  PayPal button and widgets (Paypal)

  The PayPal button and widgets are services for interacting with the PayPal platform, provided by PayPal Inc.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Consult PayPal's privacy policy – Privacy Policy.

• Location-based interactions

  Non-continuous geolocation (this Website)

  This Website may collect, use and share the User's geographical location data in order to provide location-based services.
  Most browsers and devices provide tools to deny geographic tracking by default. If the User has expressly authorized this possibility, this Website may receive information about their actual geographical location.
  The User's geographical location is not continuously tracked, but upon the User's specific request or when the User does not indicate their location in the appropriate field and allows the application to automatically detect the location.

  Personal Data processed: geographical position.

• SPAM protection

  This type of service analyzes the traffic of this Website, potentially containing Users' Personal Data, in order to filter it from parts of traffic, messages and content recognized as SPAM.

  Google reCAPTCHA (Google Ireland Limited)

  Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.
  The use of the reCAPTCHA system is subject to Google's privacy policy and terms of use.

  Personal Data processed: clicks; Usage Data; keypress events; motion sensor events; touch events; mouse movements; scroll position; answers to questions; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

• Advertising

  This type of service allows the use of User Data for commercial communication purposes. These communications are shown on this Website in the form of banners and other advertising forms, also in relation to the User's interests.
  This does not mean that all Personal Data is used for this purpose. Data and conditions of use are indicated below.
  Some of the services listed below may use Tracking Tools to identify the User or use the behavioral retargeting technique, i.e., display personalized advertisements based on the User's interests and behavior, detected even outside this Website. For more information, we suggest you check the privacy policies of the respective services.
  Generally, services of this type offer the possibility to disable such tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can read more about how to disable interest-based advertising in the "How to disable interest-based advertising" section of this document.

  Google Ads Similar Audiences (Google Ireland Limited)

  Similar audiences is an advertising and behavioral targeting service provided by Google Ireland Limited that uses Google Ads Remarketing Data to display advertisements to Users with similar behavior to other Users who are already on the remarketing list due to their previous use of this Website.
  Based on this Data, personalized ads will be shown to Users suggested by Google Ads Similar Audiences.

  Users who do not want to be included in similar audiences can opt out and disable the use of advertising Tracking Tools by visiting: Google Ad Settings.

  For an understanding of Google's use of Data, please refer to Google's partner policies.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

  Meta Audience Network (Meta Platforms Ireland Limited)

  Meta Audience Network is an advertising service provided by Meta Platforms Ireland Limited. For an understanding of Facebook's data usage, please refer to Facebook's data policy.

  To enable Meta Audience Network to function, this Website may use certain mobile device identifiers (including Android Advertising ID or Advertising Identifier for OS) or cookie-like technologies. Among the ways Audience Network proposes advertising messages to the User is also the use of the User's advertising preferences. The User can control the sharing of their advertising preferences within Facebook Ad settings.

  The User can opt-out of some Audience Network targeting functions through their device settings. For example, they can change the advertising settings available for mobile devices, or follow the instructions applicable to Audience Network if present within this privacy policy.

  Personal Data processed: Usage Data; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

  Facebook Lookalike Audiences (Meta Platforms Ireland Limited)

  Facebook Lookalike Audiences is an advertising and behavioral targeting service provided by Meta Platforms Ireland Limited that uses Data collected through the Facebook Custom Audiences service to display advertisements to Users with similar behavior to Users who are already in a Custom Audience list based on their previous use of this Website or their interaction with relevant content through Facebook applications and services.
  Based on this Data, personalized ads will be shown to Users suggested by Facebook Lookalike Audiences.

  Users can choose not to use Facebook Tracking Tools for ad personalization by visiting this opt-out page.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

• Collection of privacy preferences

  This type of service allows this Website to collect and save Users' preferences regarding the collection, use and processing of their personal information, as required by applicable privacy legislation.

  iubenda Cookie Solution (iubenda srl)

  The iubenda Cookie Solution allows the Owner to collect and save Users' preferences regarding the processing of personal data and in particular the use of Cookies and other Tracking Tools on this Website.

  Personal Data processed: Tracking Tools.

  Place of processing: Italy – Privacy Policy.

• Registration and authentication

  By registering or authenticating, the User allows this Website to identify them and give them access to dedicated services.
  Depending on what is indicated below, registration and authentication services may be provided with the help of third parties. If this occurs, this Website may access certain Data stored by the third-party service used for registration or identification.
  Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to learn more, please refer to the description of each service.

  Google OAuth (Google Ireland Limited)

  Google OAuth is a registration and authentication service provided by Google Ireland Limited and linked to the Google network.

  Personal Data processed: various types of Data as specified by the service's privacy policy.

  Place of processing: Ireland – Privacy Policy.

  Facebook Oauth (Meta Platforms Ireland Limited)

  Facebook Oauth is a registration and authentication service provided by Meta Platforms Ireland Limited and connected to the Facebook network.

  Personal Data processed: Tracking Tools; various types of Data.

  Place of processing: Ireland – Privacy Policy.

  Facebook Authentication (Meta Platforms Ireland Limited)

  Facebook Authentication is a registration and authentication service provided by Meta Platforms Ireland Limited and connected to the Facebook social network.

  Personal Data processed: Tracking Tools; various types of Data as specified by the service's privacy policy.

  Place of processing: Ireland – Privacy Policy.

  Instagram Authentication (Meta Platforms Ireland Limited)

  Instagram Authentication is a registration and authentication service provided by Meta Platforms Ireland Limited and connected to the Instagram social network.

  Personal Data processed: various types of Data as specified by the service's privacy policy.

  Place of processing: Ireland – Privacy Policy.

• Registration and authentication provided directly by this Website

  By registering or authenticating, the User allows this Website to identify them and give them access to dedicated services. Personal Data is collected and stored solely for registration or identification purposes. The Data collected is only that necessary to provide the service requested by the User.

  Direct registration (this Website)

  The User registers by filling out the registration form and directly providing their Personal Data to this Website.

  Personal Data processed: ZIP/Postal code; city; Tax ID code; surname; date of birth; email; billing address; country; name; house number; phone number; VAT number; password; province; company name; gender.

• Remarketing and behavioral targeting

  This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the User's past use of this Website.
  This activity is facilitated by tracking Usage Data and by using Tracking Tools to collect information that is then transferred to partners who manage remarketing and behavioral targeting activities.
  Some services offer a remarketing option based on email address lists.
  Generally, services of this type offer the possibility to disable such tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can read more about how to disable interest-based advertising in the "How to disable interest-based advertising" section of this document.

  Remarketing with Google Analytics (Google Ireland Limited)

  Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google Ireland Limited that connects the tracking activity carried out by Google Analytics and its Tracking Tools with the Google Ads advertising network and the Doubleclick Cookie.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt OutOpt Out.

  Google Ads Remarketing (Google Ireland Limited)

  Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google Ireland Limited that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.

  For an understanding of Google's use of Data, please refer to Google's partner policies.

  Users can choose not to use Google's Tracking Tools for ad personalization by visiting Google Ad Settings.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

  Facebook Remarketing (Meta Platforms Ireland Limited)

  Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms Ireland Limited that connects the activity of this Website with the Facebook advertising network.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

  Facebook Custom Audience (Meta Platforms Ireland Limited)

  Facebook Custom Audience is a remarketing and behavioral targeting service provided by Meta Platforms Ireland Limited that connects the activity of this Website with the Facebook advertising network.

  Users can opt out of Facebook's Tracking Tools for ad personalization by visiting this opt-out page.

  Personal Data processed: email; Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

• Platform services and hosting

  These services are intended to host and operate key components of this Website, making it possible to provide this Website from a single platform. These platforms provide the Owner with a wide range of tools such as, for example, analytical tools, for user registration management, for comment and database management, for e-commerce, for payment processing, etc. The use of such tools involves the collection and processing of Personal Data.
  Some of these services operate through servers located geographically in different places, making it difficult to determine the exact location where Personal Data is stored.

  Shopify (Shopify International Limited)

  Shopify is a platform provided by Shopify Inc. that allows the Owner to develop, operate, and host an e-commerce website.

  Personal Data processed: surname; Usage Data; email; billing address; shipping address; payment information; device information; name; phone number; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

• Analytics

  The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

  User ID extension for Google Analytics (Google Ireland Limited)

  Google Analytics on this Website uses a feature called User ID. This allows for more accurate tracking of Users by assigning each a unique ID for various sessions and devices, but in a way that does not allow Google to personally identify an individual or permanently identify a specific device.
  The User ID extension also allows for connecting Data from Google Analytics with other user-related Data collected by this Website.
  The Opt Out link provided below allows you to disable tracking for the device you are using, but it does not exclude further tracking activities carried out by the Owner. To disable these as well, contact the owner via the contact email address.

  Personal Data processed: Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

  Google Analytics with anonymized IP (Google Ireland Limited)

  Google Analytics is a web analysis service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
  Google may use the Personal Data to contextualize and personalize the ads of its own advertising network.
  This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening Users' IP addresses within the borders of the member states of the European Union or in other countries party to the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google's servers and shortened within the United States.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

  Google Ads conversion tracking (Google Ireland Limited)

  Google Ads conversion tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on this Website.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

  Google Analytics Demographics and Interests Reporting (Google Ireland Limited)

  Google Analytics Demographics and Interests Reporting is an advertising reporting feature that makes demographic and interest data available within Google Analytics for this Website (demographic data refers to data on age and gender).

  Users can opt out of Google cookies by visiting Google's [Ad Settings] (https://adssettings.google.com/authenticated).

  Personal Data processed: unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); Tracking Tools.

  Place of processing: Ireland – Privacy Policy – Opt Out.

  Statistics collected directly (this Website)

  This Website uses an internal statistics system, which does not involve third parties.

  Personal Data processed: Usage Data; Tracking Tools.

  Facebook Ads conversion tracking (Facebook pixel) (Meta Platforms Ireland Limited)

  Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Meta Platforms Ireland Limited that connects data from the Meta advertising network with actions performed on this Website. The Facebook pixel tracks conversions that can be attributed to Facebook, Instagram, and Audience Network ads.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

• Transfer of Data outside the EU

  The Controller may transfer Personal Data collected within the EU to third countries (i.e., all countries not part of the EU) only in accordance with a specific legal basis. Therefore, such Data transfers are carried out according to one of the legal bases described below.

  The User may request information from the Controller regarding the legal basis concretely applicable to each individual service.

  Transfer to third countries based on standard contractual clauses (this Website)

  When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place based on standard data protection clauses adopted by the European Commission.
  In such cases, the recipients of the Data have agreed to process the Personal Data in accordance with the levels of protection provided by EU law. Users can request further information by contacting the Owner at the details indicated in this document.

  Personal Data processed: various types of Data.

  Transfer to third countries based on consent (this Website)

  When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place only when the User has expressly consented to such transfer after being informed of the risks due to the absence of an adequacy decision and the appropriate safeguards adopted.
  In such cases, the Controller informs Users and collects their consent through this Website.

  Personal Data processed: various types of Data.

  Transfer of Data to countries guaranteeing European standards (this Website)

  When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place based on an adequacy decision adopted by the European Commission. The European Commission adopts adequacy decisions with reference to individual third countries that it considers to guarantee a level of Personal Data protection comparable to that provided by European legislation on Personal Data protection. The User can view the updated list of adequacy decisions on the European Commission's website.

  Personal Data processed: various types of Data.

• Displaying content from external platforms

  This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
  This type of service might still collect web traffic data for the pages where the service is installed, even when users do not use it.

  Google Fonts (Google Ireland Limited)

  Google Fonts is a typeface visualization service provided by Google Ireland Limited that allows this Website to integrate such content into its pages.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

  Google Maps widget (Google Ireland Limited)

  Google Maps is a map visualization service provided by Google Ireland Limited that allows this Website to integrate such content into its pages.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

  Instagram widget (Meta Platforms Ireland Limited)

  Instagram is an image visualization service provided by Meta Platforms Ireland Limited that allows this Website to integrate such content into its pages.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: Ireland – Privacy Policy.

  Adobe Fonts (Adobe)

  Adobe Fonts is a typeface visualization service provided by Adobe Systems Incorporated that allows this Website to integrate such content into its pages.

  Personal Data processed: Usage Data; various types of Data as specified by the privacy policy of the service.

  Place of processing: United States – Privacy Policy.

  Font Awesome (Fonticons, Inc. )

  Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows this Website to integrate such content into its pages.

  Personal Data processed: Usage Data; Tracking Tools.

  Place of processing: United States – Privacy Policy.

Information on how to opt-out of interest-based ads

In addition to any opt-out features provided by any of the services listed in this document, Users can learn more about how to opt-out of interest-based ads in the relevant section of the Cookie Policy.

Further information about the processing of Personal Data

• Sale of goods and services online

  The Personal Data collected is used to provide services to the User or to sell products, including payment and any delivery. The Personal Data collected to complete the payment may include those relating to the credit card, the bank account used for the transfer or other payment instruments provided. The payment Data collected by this Website depend on the payment system used.

• iubenda Cookie Solution (Cookies for remote consent)

  The iubenda Cookie for remote consent (_iub_cs-X) is installed by the iubenda Cookie Solution and stores User preferences regarding Tracking Tools in the .iubenda.com domain.

• Preference cookies

  Preference cookies store User preferences detected on this Website, such as their time zone and region, in the local domain.

• Analysis of User Data and predictions ("profiling")

  The Owner may process the usage data collected through this Website to create or update user profiles. This type of processing allows the Owner to evaluate the User's choices, preferences and behavior for the purposes specified in the respective sections of this document.
  User profiles can also be created using automated tools, such as algorithms, which may also be offered by third parties. To obtain further information on profiling activity, the User can refer to the respective sections of this document.
  The User has the right to object to such profiling activity at any time. To find out more about User rights and how to exercise them, the User can refer to the section of this document relating to User rights.

User Rights

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, the User has the right to:

• withdraw consent at any time. The User can withdraw consent to the processing of their Personal Data previously expressed.
• object to the processing of their Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below.
• access their Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
• verify and request rectification. The User can verify the correctness of their Data and request its updating or correction.
• obtain the restriction of processing. When certain conditions are met, the User can request the restriction of the processing of their Data. In this case, the Owner will not process the Data for any other purpose than their storage.
• obtain the erasure or removal of their Personal Data. When certain conditions are met, the User can request the erasure of their Data by the Owner.
• receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its unhindered transfer to another controller. This provision is applicable when the Data is processed by automated means and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures related thereto.
• lodge a complaint. The User can lodge a complaint with the competent data protection supervisory authority or take legal action.

Details about the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Controller or for the purposes of the legitimate interests pursued by the Controller, Users have the right to object to the processing on grounds relating to their particular situation.

Users are hereby informed that, should their Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn whether the Controller processes Data for direct marketing purposes, Users may refer to the respective sections of this document.

How to exercise these rights

To exercise their rights, Users can address a request to the contact details of the Controller indicated in this document. Requests are free of charge and will be handled by the Controller as quickly as possible, in any case within one month.

Cookie Policy

This Website uses Tracking Tools. To learn more, the User can consult the Cookie Policy.

Further information about Data processing

Legal defense

The User's Personal Data may be used by the Controller in legal proceedings or in the preparatory stages thereof, arising from improper use of this Website or the related Services by the User.
The User declares to be aware that the Controller may be obliged to reveal the Data upon request of public authorities.

Specific information

Upon the User's request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Website and any third-party services it uses may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further information concerning the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

"Do Not Track" requests

This Website does not support "Do Not Track" requests.
To determine whether any of the third-party services it uses honor "Do Not Track" requests, please read their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and, if possible, on this Website and/or, as far as technically and legally feasible, by sending a notice to Users via any contact information available to the Controller. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed on the basis of the User’s consent, the Controller will collect new consent from the User, where required.