Privacy policy
Albapluma Srl Privacy Policy
DATA CONTROLLER
albaPluma s.r.l. - Via IV Novembre 1,
30025 - Teglio Veneto (VE)
Data Controller email address: ciao@albapluma.com
TYPES OF DATA COLLECTED
Among the Personal Data collected by this Website, either independently or through third parties, are: first name; last name; email address; various types of Data; Trackers; Usage Data; payment information; billing address; shipping address; phone number; device information; profession; physical address; purchase history; point of sale data; financial information.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the Data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. Failure to provide this Data may make it impossible for this Website to provide its Services. In cases where this Website specifies some Data as optional, Users are free not to provide such Data, without any consequences on the availability or operation of the Service.
Users who are unsure about which Data is mandatory are encouraged to contact the Owner.
Any use of Cookies - or other tracking tools - by this Website or by the owners of third-party services used by this Website is intended to provide the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website.
METHOD AND PLACE OF PROCESSING OF COLLECTED DATA
METHODS OF PROCESSING
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using computer and/or IT tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the operation of this Website (administrative, sales, marketing, legal, and system administration personnel) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, and communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may be requested from the Data Controller at any time.
PLACE
The Data is processed at the Data Controller's operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than their own. For further information on the place of processing, the User can refer to the section containing details on the processing of Personal Data.
RETENTION PERIOD
Unless otherwise stated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be retained for a longer period due to any legal obligations or based on the Users' consent.
PURPOSE OF PROCESSING COLLECTED DATA
The User's Data is collected to allow the Owner to provide its Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, as well as the following: Contacting the User, Advertising, Content and feature performance testing (A/B testing), Traffic optimization and distribution, Payment management, Platform services and hosting, Analytics, Interaction with data collection platforms and other third parties, and Displaying content from external platforms.
To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User may refer to the section “Details on the Processing of Personal Data”.
DETAILS ON THE PROCESSING OF PERSONAL DATA
Personal Data is collected for the following purposes and using the following services:
CONTACTING THE USER
CONTACT FORM
By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other request as indicated by the form header.
Personal Data processed: last name; email address; first name; various types of Data.
Category of Personal Information collected pursuant to the CCPA: identifiers.
MAILING LIST OR NEWSLETTER
By registering for the mailing list or newsletter, the User's email address will be automatically added to a contact list to which email messages containing information, including commercial or promotional information, relating to this Website may be sent. The User's email address may also be added to this list as a result of registering on this Website or after making a purchase.
Personal Data processed: last name; Usage Data; email address; physical address; first name; phone number; profession; Tracking Tools.
Category of Personal Information collected pursuant to the CCPA: identifiers; information relating to internet or other network activities; information relating to the employment relationship.
PAYMENT HANDLING
Unless otherwise specified, this Website processes all payments by credit card, bank transfer, or other means through external payment service providers. In general, and unless otherwise specified, Users are requested to provide their payment details and personal information directly to such payment service providers.
This Website is not involved in the collection and processing of such information: instead, it will only receive a notification from the payment service provider in question that the payment has been completed.
GOOGLE PAY (GOOGLE LLC)
Google Pay is a payment service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller handles the processing, which allows the User to make online payments using their Google credentials.
Personal Data processed: payment information; various types of Data as specified in the service's privacy policy.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Category of Personal Information collected pursuant to the CCPA: identifiers; commercial information.
PAYPAL (PAYPAL)
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.
Personal Data processed: payment information; various types of Data as specified in the service's privacy policy.
Place of processing: See the PayPal privacy policy – Privacy Policy.
Category of Personal Information collected pursuant to the CCPA: identifiers; commercial information.
APPLE PAY (APPLE INC.)
Apple Pay is a payment service provided by Apple Inc., which allows the User to make payments using their mobile phone.
Personal Data processed: last name; purchase history; Usage Data; email address; billing address; shipping address; payment information; first name; phone number; Trackers; various types of Data as specified in the service's privacy policy.
Place of processing: United States – Privacy Policy.
Category of Personal Information collected pursuant to the CCPA: identifiers; commercial information; information relating to internet or other network activities.
AMERICAN EXPRESS (AMERICAN EXPRESS COMPANY)
American Express is a payment service provided by American Express Company, which allows the User to make online payments.
Personal Data processed: point of sale data; payment information; financial information.
Place of processing: United States – Privacy Policy.
Category of Personal Information collected pursuant to the CCPA: personal information; commercial information.
VISA (VISA INC.)
Visa is a payment service provided by Visa Inc., which allows the User to make online payments.
Personal Data processed: Usage data; point of sale data; payment information; financial information; Tracking Tools.
Place of processing: United States – Privacy Policy.
Category of Personal Information collected pursuant to the CCPA: personal information; commercial information; information relating to internet or other network activities.
MASTERCARD (MASTERCARD INC.)
Mastercard is a payment service provided by Mastercard Inc., which allows the User to make online payments.
Personal Data processed: Usage data; payment information; Tracking Tools.
Place of processing: United States – Privacy Policy.
Category of Personal Information collected pursuant to the CCPA: commercial information; information relating to internet or other network activities.
INTERACTION WITH DATA COLLECTION PLATFORMS AND OTHER THIRD PARTIES
This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Website for the purpose of saving and reusing data.
If one of these services is installed, it may collect Usage Data relating to the pages on which it is installed, even when Users do not use it.
TRAFFIC OPTIMIZATION AND DISTRIBUTION
This type of service allows this Website to distribute its content via servers located across the country and optimize its performance.
The Personal Data processed depends on the characteristics and implementation method of these services, which by their nature filter communications between this Website and the User's browser.
Given the distributed nature of this system, it is difficult to determine the locations to which content, which may contain the User's Personal Data, is transferred.
ADVERTISING
This type of service allows User Data to be used for commercial communication purposes. These communications are displayed on this Website in the form of banners and other forms of advertising, including those related to the User's interests.
This does not mean that all Personal Data is used for this purpose. Information and conditions of use are provided below.
Some of the services listed below may use Tracking Tools to identify the User, or use behavioral retargeting, i.e., displaying personalized ads based on the User's interests and behavior, or measure ad performance.
For more information, we recommend checking the privacy policies of the respective services.
These services typically allow Users to opt out of this tracking. Users can learn how to opt out of interest-based advertising by visiting the opt-out section in this document.
META ADS CONVERSION TRACKING (META PIXEL) (META PLATFORMS, INC.)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing, which connects data from the Meta advertising network with actions performed within this Website. The Meta pixel tracks conversions that can be attributed to Facebook, Instagram, and Audience Network ads.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt-out; Ireland – Privacy Policy – Opt-out.
Category of Personal Information collected pursuant to the CCPA: information relating to activity on the Internet or other networks.
This type of processing constitutes:
Sale in the United States
PLATFORM AND HOSTING SERVICES
These services are intended to host and operate key components of this Website, enabling the provision of this Website from a single platform. These platforms provide the Owner with a wide range of tools, such as analytics tools, user registration management, comment and database management, e-commerce, payment processing, etc. The use of these tools involves the collection and processing of Personal Data.
Some of these services operate through servers geographically distributed in different locations, making it difficult to determine the exact location where the Personal Data is stored.
SHOPIFY (SHOPIFY INC.)
Shopify is a platform provided by Shopify Inc., Shopify Commerce Singapore Pte. Ltd, or Shopify International Limited, depending on how the Owner manages the Data processing, which allows the Owner to develop, operate, and host an e-commerce website.
Personal Data processed: last name; Usage data; email address; billing address; shipping address; payment information; device information; name; phone number; Trackers.
Place of processing: Canada – Privacy Policy; Singapore – Privacy Policy; Ireland – Privacy Policy.
Categories of Personal Information collected under the CCPA: identifiers; commercial information; information relating to internet or other network activity.
STATISTICS
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.
GOOGLE ANALYTICS (UNIVERSAL ANALYTICS) WITH ANONYMIZED IP (GOOGLE LLC)
Google Analytics (Universal Analytics) is a web analytics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller handles data processing, ("Google"). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services. Google may use the Personal Data to contextualize and personalize the ads of its own advertising network. This integration of Google Analytics anonymizes your IP address. This anonymization works by shortening Users' IP addresses within the member states of the European Union or in other countries participating in the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google servers and shortened within the United States.
To understand Google's use of data, please consult Google's partner policy.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Category of Personal Information collected under the CCPA: Internet or other network activity information.
This type of processing constitutes:
Sale to the United States
CONTENT AND FUNCTIONALITY PERFORMANCE TESTING (A/B TESTING)
The services contained in this section allow the Data Controller to track and analyze User responses, in terms of traffic or behavior, in relation to changes to the structure, text, or any other component of this Website.
VIEWING CONTENT FROM EXTERNAL PLATFORMS
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them. These services are often called widgets, which are small elements inserted into a website or application. They provide specific information or perform a specific function and often allow interaction with the User.
This type of service may still collect web traffic data relating to the pages where the service is installed, even when Users do not use it.
GOOGLE FONTS (GOOGLE LLC)
Google Fonts is a typeface visualization service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller processes the Data, that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Usage Data; Trackers.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Category of Personal Information collected pursuant to the CCPA: information relating to internet or other network activity.
INFORMATION ON HOW TO OPT-OUT OF INTEREST-BASED ADVERTISING
In addition to any opt-out function provided by any of the services listed in this document, Users can learn more about how to opt-out of interest-based advertising in the relevant section of the Cookie Policy.
FURTHER INFORMATION ON THE PROCESSING OF PERSONAL DATA
ONLINE SALE OF GOODS AND SERVICES
The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery. The Personal Data collected to complete the payment may include credit card information, the bank account used for the transfer, or other payment methods. The Payment Data collected by this Website depends on the payment system used.
COOKIE POLICY
This Website uses Tracking Tools. To learn more, Users can consult the Cookie Policy.
FURTHER INFORMATION FOR USERS
LEGAL BASIS FOR PROCESSING
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
The User has given consent for one or more specific purposes.
Processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual obligations;
Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
In any case, the Data Controller may always be asked to clarify the specific legal basis for each processing operation, and in particular to specify whether the processing is a statutory requirement, a contractual requirement, or a requirement necessary to enter into a contract.
FURTHER INFORMATION ON RETENTION PERIOD
Unless otherwise stated in this document, Personal Data is processed and retained for the time required by the purpose for which it was collected and may be retained for a longer period due to legal obligations or based on the User's consent.
Therefore:
Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed.
Personal Data collected for purposes related to the Owner's legitimate interests will be retained until such interests are fulfilled. Users may obtain further information regarding the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.
When processing is based on the User's consent, the Owner may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be required to retain Personal Data for a longer period to fulfill a legal obligation or an order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.
USER RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR)
Users may exercise certain rights with respect to the Data processed by the Data Controller.
In particular, within the limits established by law, the User has the right to:
withdraw consent at any time. The User may withdraw previously expressed consent to the processing of their Personal Data.
object to the processing of their Data. The User may object to the processing of their Data when it occurs pursuant to a legal basis other than consent.
access their Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing, and to receive a copy of the Data processed.
verify and request rectification. The User may verify the accuracy of their Data and request its updating or correction.
obtain restriction of processing. The User may request restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than its storage.
Obtain the deletion or removal of their Personal Data. The User may request the deletion of their Data by the Data Controller.
Receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred to another controller without hindrance.
File a complaint. The User may lodge a complaint with the competent data protection authority or take legal action.
Users have the right to obtain information regarding the legal basis for Data transfers abroad, including to any international organization governed by international law or set up by two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect their Data.
DETAILS ON THE RIGHT TO OBJECT
When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to such processing for reasons related to their particular situation.
Users are informed that, if their Data is processed for direct marketing purposes, they can object to such processing at any time, free of charge and without providing any justification. If Users object to processing for direct marketing purposes, their Personal Data will no longer be processed for such purposes. To learn whether the Data Controller is processing Data for direct marketing purposes, Users can refer to the relevant sections of this document.
HOW TO EXERCISE YOUR RIGHTS
Any requests to exercise your rights can be directed to the Data Controller using the contact details provided in this document. The request is free of charge, and the Data Controller will respond as quickly as possible, in any case within one month, providing the User with all the information required by law. Any corrections, deletions, or limitations on processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves a disproportionate effort. The Data Controller will inform the User of these recipients upon request.
ADDITIONAL INFORMATION FOR USERS IN SWITZERLAND
This section applies to Users in Switzerland and, for such Users, supersedes any other information that may be divergent or conflicting in this Privacy Policy.
Further details regarding the categories of Data processed, the purposes of processing, the categories of recipients of Personal Data, if any, the retention period, and other information about Personal Data can be found in the section entitled "Detailed Information on the Processing of Personal Data" within this document.
USER RIGHTS UNDER THE FEDERAL DATA PROTECTION ACT
Users may exercise certain rights regarding their data within the limits of the law, including the following:
Right of access to Personal Data;
The right to object to the processing of their Personal Data (which also allows Users to request the restriction of processing, the erasure or destruction of Personal Data, and the prohibition of disclosure of Personal Data to third parties);
The right to receive your Personal Data and to transfer it to another data controller (data portability);
The right to request the rectification of inaccurate Personal Data.
HOW TO EXERCISE THESE RIGHTS
Any requests to exercise User rights can be directed to the Data Controller using the contact details provided in this document. These requests are free of charge, and the Data Controller will respond as quickly as possible, providing Users with the information required by law.
FURTHER INFORMATION FOR USERS IN BRAZIL
This section of the document integrates and supplements the information contained in the rest of the privacy policy and is provided by the entity that operates this Website and, if applicable, its parent company, subsidiaries, and affiliates (for the purposes of this section, collectively referred to as "we," "us," or "our").
This section applies to all Users in Brazil (these Users are referred to below simply as "you," "your," or "yours"), pursuant to the "Lei Geral de Proteção de Dados" (General Data Protection Law), and, for such Users, supersedes any other information contained in this privacy policy that may differ or conflict.
This section of the document uses the term "personal information" as defined by the LGPD.
LEGAL BASIS FOR PROCESSING YOUR PERSONAL INFORMATION
We process your personal information only if one of the legal bases for such processing exists. The legal bases are as follows:
your consent to the processing activities in question;
compliance with legal obligations to which we are subject;
enforcement of provisions of laws or regulations or contracts, agreements, or other similar legal instruments;
studies conducted by research institutions, preferably conducted on anonymized personal information;
performance of a contract and related pre-contractual obligations, if you are a party to such a contract;
exercise of our rights in court, in administrative proceedings, or in arbitration;
defense or physical safety of you or a third party;
health protection - in the context of procedures undertaken by entities or healthcare professionals;
our legitimate interests, provided that your fundamental rights and freedoms do not override those interests; and
credit protection.
To learn more about the legal bases, you can contact us at any time using the contact details provided in this document.
CATEGORIES OF PERSONAL INFORMATION PROCESSED
To learn about the categories of personal information processed, please refer to the "Detailed Information on the Processing of Personal Data" section of this document.
WHY WE PROCESS YOUR PERSONAL INFORMATION
To learn why we process your personal information, please refer to the "Detailed Information on the Processing of Personal Data" and "Purposes of Processing of Collected Data" sections of this document.
YOUR PRIVACY RIGHTS IN BRAZIL, HOW TO SUBMIT A REQUEST, AND HOW WE WILL HANDLE IT
YOUR PRIVACY RIGHTS IN BRAZIL
You have the right to:
obtain confirmation of the existence of processing activities concerning your personal information;
access your personal information;
obtain the rectification of incomplete, inaccurate, or out-of-date personal information;
obtain the anonymization, blocking, or erasure of unnecessary or excessive personal information, or information processed in violation of the provisions of the LGPD;
obtain information regarding the possibility of granting or refusing your consent and the related consequences;
obtain information regarding the third parties with whom we share your personal information;
Obtain, upon your explicit request, the portability of your personal information (except for anonymized information) to other product or service providers, provided that our commercial and industrial secrets are safeguarded;
Obtain the erasure of personal information processed if the processing was based on your consent, unless one or more of the exceptions set forth in Article 16 of the GDPR applies;
Withdraw your consent at any time;
File a complaint regarding your personal information with the ANPD (National Data Protection Authority) or a consumer protection body;
Object to processing activities in cases where such processing is not carried out in accordance with the law;
Request clear and adequate information regarding the criteria and procedures used in automated decision-making processes; and
Request review of decisions that harm your interests, made solely on the basis of automated decision-making processes involving your personal information. These include decisions to profile you personally, professionally, as a consumer or creditor, or other aspects of your personality.
You will never be discriminated against or subjected to any unfavorable treatment as a result of exercising your rights.
HOW TO SUBMIT A REQUEST
You can submit an explicit request to exercise your rights free of charge at any time using the contact details provided in this document.
HOW AND HOW LONG WE WILL PROCESS YOUR REQUEST
We will do our best to respond to your request as quickly as possible.
In any case, if we are unable to do so, we will ensure that we communicate the factual or legal reasons that prevent us from immediately responding to or following up on your request. If we are not processing your personal information, we will, if we are able to do so, indicate the natural or legal person to whom you should address your requests.
If you decide to submit a request for access or a request to confirm whether we are processing your personal information, please be sure to specify whether you prefer to receive your personal information in electronic or paper format.
You must also let us know whether you require an immediate response, in which case you will receive a simplified response, or whether you require complete disclosure.
In the latter case, we will respond within 15 days of your request, providing you with all the information regarding the source of your personal information, confirmation of whether or not personal information concerning you exists, all the criteria used for processing, and the purposes of such processing, while safeguarding our commercial and industrial secrets.
If you decide to submit a request for rectification, erasure, anonymization, or blocking of personal information, we will ensure that we immediately inform the other parties with whom we have shared your personal information so that they can also comply with your request—except in cases where such communication is impossible or prohibitively burdensome for us.
TRANSFER OF PERSONAL INFORMATION OUTSIDE BRAZIL WHEN PERMITTED BY LAW
We may transfer your personal information outside of Brazil in the following cases:
when the transfer is necessary for international legal cooperation between intelligence services, investigative bodies, and criminal proceedings, as provided for by the instruments made available by international law;
when the transfer is necessary to protect your life or physical safety or that of third parties;
when the transfer is authorized by the ANPD;
when the transfer arises from an obligation undertaken in the context of an international cooperation agreement;
when the transfer is necessary for the enforcement of public order or the performance of a public service;
when the transfer is necessary for the fulfillment of a legal obligation, the execution of a contract and related pre-contractual obligations, or the normal exercise of rights in judicial, administrative, or arbitration proceedings.
FURTHER INFORMATION FOR USERS IN THE UNITED STATES
This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running this Website and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
The information contained in this section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are residents in the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana.
For such Users, this information supersedes any other possibly divergent or conflicting provisions contained in the privacy policy.
This part of the document uses the term Personal Information (and Sensitive Personal Information).
NOTICE AT COLLECTION
The following Notice at Collection provides you with timely notice of the categories of Personal Information collected or disclosed in the past 12 months so that you can exercise meaningful control over our use of that Information.
While this categorization of Personal Information is primarily based on California privacy laws, it can also be helpful for anyone who is not a California resident to get a general idea of what types of Personal Information are collected.
IDENTIFIERS
Personal Information collected or disclosed: first name, last name, email address, various types of Data, various types of Data as specified in the service's privacy policy, billing address, shipping address, telephone number, device information, Tracking Tools, Usage Data, profession, physical address, purchase history
Sensitive Personal Information collected or disclosed ℹ️: Payment information
Purposes:
Contacting the User
Traffic optimization and distribution
Payment management
Platform and hosting services
Further information on Personal Data
Interaction with data collection platforms and other third parties
Retention period: for the time necessary to fulfill the purpose
Sold or Shared ℹ️: Yes
Targeted Advertising: ℹ️: No
Third-parties: Intuit Inc.
Service providers or contractors: Cloudflare, Inc., Google LLC, PayPal, Shopify Inc., Apple Inc.
INTERNET OR OTHER ELECTRONIC NETWORK ACTIVITY INFORMATION
Personal Information collected or disclosed: Trackers, Usage Data, first name, last name, billing address, shipping address, phone number, device information, email address, profession, physical address, various types of Data as specified in the privacy policy Service, purchase history, point-of-sale data
Sensitive Personal Information collected or disclosed (ℹ️): payment information, financial information
Purposes:
Advertising
Content and functionality performance testing (A/B testing)
Traffic optimization and distribution
Platform and hosting services
Contacting the User
Payment management
Statistics
Interaction with data collection platforms and other third parties
Displaying content from external platforms
Retention period: for the time necessary to fulfill the purpose
Sold or Shared (ℹ️): Yes
Targeted Advertising (ℹ️): No
Third-parties: Meta Platforms, Inc., Google LLC, Visa Inc., Mastercard Inc., Intuit Inc.
Service providers or contractors: Shopify Inc., Apple Inc.
COMMERCIAL INFORMATION
Personal Information collected or disclosed: various types of Data as specified in the service's privacy policy, name, surname, address Billing address, shipping address, phone number, device information, Trackers, Usage Data, email, purchase history, point-of-sale data
Sensitive Personal Information collected or disclosed ℹ️: Payment information, financial information
Purposes:
Payment processing
Platform and hosting services
Retention period: for the time necessary to fulfill the purpose
Sold or Shared ℹ️: Yes
Targeted Advertising: ℹ️: No
Third-parties: American Express Company, Visa Inc., Mastercard Inc.
Service providers or contractors: Google LLC, PayPal, Shopify Inc., Apple Inc.
EMPLOYMENT-RELATED INFORMATION
Personal Information collected or disclosed: email, first name, last name, Trackers, Usage Data, phone number, profession, physical address
Purposes:
Contacting the User
Retention period: for the time necessary to fulfill the purpose purpose
Sold or Shared ℹ️: Yes
Targeted Advertising: ℹ️: No
PERSONAL INFORMATION
Personal Information collected or disclosed: point of sale data, tracking tools, usage data
Sensitive Personal Information collected or disclosed ℹ️: payment information, financial information
Purposes:
Payment management
Retention period: for the time necessary to fulfill the purpose
Sold or Shared ℹ️: Yes
Targeted Advertising: ℹ️: No
Third-parties: American Express Company, Visa Inc.
ℹ️ You can read the definitions of these concepts inside the “Definitions and legal references section” of the privacy policy.
To know more about your rights in particular to opt out of certain processing activities and to limit the use of your sensitive personal information (“Limit the Use of My Sensitive Personal Information”) you can refer to the “Your privacy rights under US state laws” section of our privacy policy.
For more details on the collection of Personal Information, please read the section “Detailed information on the processing of Personal Data” of our privacy policy.
We won't process your Information for unexpected purposes, or for purposes that are not reasonably necessary to and compatible with the purposes originally disclosed, without your consent.
WHAT ARE THE SOURCES OF THE PERSONAL INFORMATION WE COLLECT?
We collect the above-mentioned categories of Personal Information, either directly or indirectly, from you when you use this Website.
For example, you directly provide your Personal Information when you submit requests via any forms on this Website. You also provide Personal Information indirectly when you navigate this Website, as Personal Information about you is automatically observed and collected.
Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of this Website and features thereof.
YOUR PRIVACY RIGHTS UNDER US STATE LAWS
You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:
the right to access Personal Information: the right to know. You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information;
the right to correct inaccurate Personal Information. You have the right to request that we correct any inaccurate Personal Information we maintain about you;
the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;
the right to obtain a copy of your Personal Information. We will provide your Personal Information in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible;
the right to opt out from the Sale of your Personal Information; We will not discriminate against you for exercising your privacy rights.
the right to non-discrimination.
ADDITIONAL RIGHTS FOR USERS RESIDING IN CALIFORNIA
In addition to the rights listed above common to all Users in the United States, as a User residing in California, you have:
The right to opt out of the Sharing of your Personal Information for cross-context behavioral advertising;
The right to request to limit our use or disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods, as is reasonably expected by an average consumer. Please note that certain exceptions outlined in the law may apply, such as, when the collection and processing of Sensitive Personal Information is necessary to verify or maintain the quality or safety of our service.
ADDITIONAL RIGHTS FOR USERS RESIDING IN VIRGINIA, COLORADO, CONNECTICUT, TEXAS, OREGON, NEVADA, DELAWARE, IOWA, NEW HAMPSHIRE, NEW JERSEY, NEBRASKA, TENNESSEE, MINNESOTA, MARYLAND, INDIANA, KENTUCKY, RHODE ISLAND AND MONTANA
In addition to the rights listed above common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana you have
The right to opt out of the processing of your personal information for Targeted Advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
The right to freely give, deny or withdraw your consent for the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer. In Maryland, your Sensitive Personal Information will be collected or processed only if strictly necessary to provide or maintain a specific product or service requested by you.
In Minnesota and Maryland Users also have the right to obtain a list of the specific third parties to which the controller has disclosed the consumer's personal data
* Note that in some states like Minnesota you have the following specific rights connected to profiling:
The right to question the results of the profiling;
The right to be informed of the reason that the profiling resulted in the decision; if feasible
The right to be informed of what actions the consumer might have taken to secure a different decision and the actions that the consumer might take to secure a different decision in the future;
The right to review personal data used in the profiling;
If inaccurate, the right to have the data corrected and the profiling decision reevaluated based on the corrected data;
ADDITIONAL RIGHTS FOR USERS RESIDING IN UTAH AND IOWA
In addition to the rights listed above common to all Users in the United States, as a User residing in Utah and Iowa, you have:
The right to opt out of the processing of your Personal Information for Targeted Advertising;
The right to opt out of the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.
HOW TO EXERCISE YOUR PRIVACY RIGHTS UNDER US STATE LAWS
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we must know who you are. We will not respond to any request if we are unable to verify your identity and therefore confirm the Personal Information in our possession relates to you. You are not required to create an account with us to submit your request. We will use any Personal Information collected from you in connection with the verification of your request solely for verification and shall not further disclose the Personal Information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
HOW TO EXERCISE YOUR RIGHTS TO OPT OUT
In addition to what is stated above, to exercise your right to opt-out of Sale or Sharing and Targeted Advertising you can also use the privacy choices link provided on this Website.
If you want to submit requests to opt out of Sale or Sharing and Targeted Advertising activities via a user-enabled global privacy control, such as for example the Global Privacy Control (“GPC”), you are free to do so and we will abide by such request in a frictionless manner.
HOW AND WHEN WE ARE EXPECTED TO HANDLE YOUR REQUEST
We will respond to your request without undue delay, but in all cases within the timeframe required by applicable law. Should we need more time, we will explain to you the reasons why, and how much more time we need.
Should we deny your request, we will explain to you the reasons behind our denial (where envisaged by applicable law, you may then contact the relevant authority to submit a complaint).
We do not charge a fee to process or respond to your request unless such request is manifestly unfounded or excessive, and in all other cases where it is permitted by applicable law. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.
FURTHER INFORMATION ON DATA PROCESSING
LEGAL DEFENSE
The User's Personal Data may be used by the Data Controller in court or in the preparatory stages leading to possible legal action arising from improper use of this Website or related Services by the User.
The User declares to be aware that the Data Controller may be required to disclose the Data by order of public authorities.
SPECIFIC INFORMATION
Upon request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services or the collection and processing of Personal Data.
SYSTEM LOGS AND MAINTENANCE
For operation and maintenance purposes, this Website and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.
INFORMATION NOT CONTAINED IN THIS POLICY
Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact information.
CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website and, where technically and legally feasible, by sending a notification to Users via any contact information available to the Data Controller. Please check this page frequently, referring to the date of the last modification indicated at the bottom.
If the changes affect processing based on consent, the Data Controller will collect the User's consent again, if necessary.
DEFINITIONS AND LEGAL REFERENCES
PERSONAL DATA (OR DATA) / PERSONAL INFORMATION (OR INFORMATION)
Personal data means any information that, directly or indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
SENSITIVE PERSONAL INFORMATION
Sensitive Personal Information means any Personal Information that is not publicly available and that reveals information considered sensitive under applicable privacy legislation.
USAGE DATA
This information is collected automatically through this Website (including third-party applications integrated into this Website), including: IP addresses or domain names of the computers used by the User who connects to this Website, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal details of the visit (e.g., the time spent on each page), and the details of the path followed within the Application, with particular reference to the sequence of pages visited, Parameters relating to the User's operating system and IT environment.
USER
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
DATA SUBJECT
The natural person to whom the Personal Data refers.
DATA PROCESSOR
The natural person, legal person, public administration, or any other entity that processes Personal Data on behalf of the Data Controller, as described in this privacy policy.
DATA CONTROLLER (OR OWNER)
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools used, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the Owner of this Website.
THIS WEBSITE (OR THIS APPLICATION)
The hardware or software tool by which the Personal Data of Users is collected and processed.
SERVICE
The Service provided by this Website as defined in the relevant terms (if any) on this site/application.
SALE
Sale means any exchange of Personal Information by the Owner to a third party, in exchange for money or other valuable consideration, as defined by applicable U.S. state data protection laws. Please note that the exchange of Personal Information with a service provider pursuant to a written contract that meets the requirements of applicable law does not constitute a Sale of your Personal Information.
SHARING
Sharing means any sharing, rental, release, disclosure, dissemination, making available, transfer, or otherwise communicating, whether verbally, in writing, or by electronic or other means, a consumer's Personal Information by a business to a third party for cross-context behavioral advertising, whether in exchange for payment or other valuable consideration, including transactions between a business and a third party relating to cross-context behavioral advertising to a business where no payment is exchanged, as defined by California privacy laws. Please note that the exchange of Personal Information with a service provider pursuant to a written contract that meets the requirements of California privacy laws does not constitute a sharing of your Personal Information.
TARGETED ADVERTISING
Targeted advertising means displaying ads to a consumer where the ad is selected based on Personal Information obtained from that consumer's activities over time and across unaffiliated websites or online applications to predict that consumer's preferences or interests, as defined by applicable U.S. state data protection law.
EUROPEAN UNION (OR EU)
Unless otherwise specified, any reference to the European Union in this document includes all current member states of the European Union and the European Economic Area.
COOKIES
Cookies are Trackers consisting of small sets of data stored in the User's browser.
TRACKING TOOL
Tracker means any technology—e.g., cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting—that allows tracking Users, for example by accessing or storing information on the User's device.
LEGAL REFERENCES
This policy is drafted based on multiple legislative systems.
Unless otherwise specified, this policy applies exclusively to this Website.
Last updated: June 10, 2026