Versilfungo S.p.A., with registered office in Capezzano Pianore (LU), 55041, via dei Ghivizzani 84, Italy, Tax Code/VAT no. 01205620469, certified e-mail: firstname.lastname@example.org (hereinafter “Versilfungo” or “Data Controller”) is the data controller of the personal data of users who browse the Site (the “Users”) via cookies.
Cookies are small text files that the sites visited by the data subjects send to their terminals, where they are stored before being re-transmitted to the same sites on the next visit. Cookies allow us to collect information on the navigation carried out by the user on the Site and propose it on the next visit to facilitate further browsing. Cookies can be stored permanently on your computer and have a variable duration (so-called permanent cookies), but they can also disappear when the browser is closed or have a limited duration (so-called session cookies). Cookies can be installed by the site you are visiting (so-called first-party cookies) or by other websites (so-called third-party cookies).
Third-party cookies are set by a website other than the one you are visiting and can be installed when the website includes components and/or content provided dynamically by third parties.
The Site uses the following types of cookies.
The Site uses Google Analytics 4 cookies to collect information on the use of the Site by users. The Google Analytics 4 settings provide for the sharing of data with Google in order to use the following services:
(a) benchmarking, i.e. participation in the collection of anonymous data that helps to better understand data trends;
(b) technical support, to enable Google to provide assistance; And
(c) account experts, in order to allow Google marketing experts to provide suggestions to improve configuration and analysis.
For more details and information you can visit the provider page here https://support.google.com/analytics/answer/1011397
By default, the analytical cookies received by Google are anonymous.
You can disable Google Analytics 4 cookies by downloading a specific browser plug-in available here: https://tools.google.com/dlpage/gaoptout
The Site uses profiling cookies with which it is possible to note the preferences detected during each visit and thus create profiles that allow sending messages that are more in line with the User’s preferences and interests, for example allowing you to view the products you are looking for more quickly or to offer you the most similar item. This Site also allows the use of third-party profiling cookies which serve, among other things, to display our commercial proposals to the User even when visiting other sites.
PURPOSE AND LEGAL BASIS
Technical cookies are used for the sole purpose of “carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the contractor or user to provide this service ” (art. 122, paragraph 1 of the Privacy Code). They do not require consent.
The use of third-party cookies for statistical, marketing and analysis, profiling and advertising purposes is carried out on the basis of the data subject’s consent (art. 6, par. 1, letter a GDPR) which is expressed at the time of first access to the Site, via a specific banner.
The characteristics of the cookies used on the Site are illustrated in the following table (“Table“):
Since the installation of cookies and other tracking systems operated by third parties through the services used within the Site cannot be technically controlled by the Data Controller, any specific reference to cookies and tracking systems installed by third parties is to be be considered indicative. To obtain complete information, the User can consult the privacy policies of third party services.
Users can manage cookie preferences directly within their browser by configuring their browser to disable cookies. Below we report the methods offered by the main browsers:
Internet Explorer > https://support.microsoft.com/it-it/help/260971/description-of-cookies
After this operation, however, some functions of the web pages may not work correctly.
Furthermore, users are advised that they can find more information on the main cookies used on the internet (analytical and profiling) and on the related uninstallation methods by visiting the opt-out page of the Alliance Network Initiative, the opt-out page out of the Alliance Digital Advertising, or the site http://youronlinechoices.eu, from which, by accessing the “Your choices” area, it will be possible to view the list of third-party companies that install cookies on our Site, verify the presence and the activity status of the installed cookie (Status) and manage consent selectively (On/Off). By expanding the entry dedicated (Info) to each company you will be able to access more information relating to the company and reach the specific information on privacy and cookies via link.
- CATEGORIES OF RECIPIENTS OF PERSONAL DATA AND TRANSFER OF PERSONAL DATA TO COUNTRIES NOT BELONGING TO THE EEA
The subjects who may become aware of personal data are:
- the subjects indicated in the Table;
- employees and consultants of Versilfungo, who will operate as subjects authorised to process data for the internal organisation of company activities;
- companies that perform for Versilfungo, as data processors, specific technical and organisational services connected to the Site (logistics services, IT services and marketing services).
A complete and updated list of data controllers can be obtained by contacting email@example.com.
The transfer of personal data to countries not belonging to the European Economic Area (“EEA”) or to international organisations is not foreseen.
In particular, with reference to the use of Google Analytics 4, this could involve the transfer of personal data to countries not belonging to the European Economic Area (in particular, to the United States), but in this regard the Data Controller guarantees the adoption of technical and organisational measures suitable to inhibit such transfer.
Should this become necessary for exceptional situations, linked, for example, to defence purposes, the transfer will take place:
- exclusively in the presence of an adequacy decision from the European Commission pursuant to art. 45 GDPR;
- or in the absence of such adequacy decision, exclusively following the adoption, by the Data Controller or any data controller, of adequate guarantees that provide actionable rights and effective means of appeal for the data subjects, pursuant to art. 46 GDPR; or
- in the presence of one of the exceptions provided for by the art. 49 GDPR.
The data collected using cookies will not be disclosed.
Your personal data will be processed with automated tools based on the time periods indicated in the Table relating to the individual cookies installed. Specific technical and organisational security measures have been adopted to prevent data loss, illicit or incorrect use and unauthorised access.
RIGHTS OF THE DATA SUBJECTS
Pursuant to the articles 15-22 GDPR, by contacting the Data Controller, the User will be able to exercise specific rights, including:
(I) Right of access: right to obtain confirmation from the Data Controller as to whether or not personal data is being processed and, if so, to obtain access to the personal data and further information on the origin, purpose, category of data processed, recipients of communication and/or data transfer, etc.
(II) Right of rectification: right to obtain from the Data Controller the rectification of inaccurate personal data without unjustified delay, as well as the integration of incomplete personal data, also by providing a supplementary declaration.
(III) Right to cancellation: right to obtain from the Data Controller the cancellation of personal data without unjustified delay in the event that: – the personal data are no longer necessary for the purposes of the processing; – the consent on which the processing is based is revoked and there is no other legal basis for the processing; – the personal data have been processed unlawfully; – the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the data controller is subject.
(IV) Right to object to processing: right to object at any time, for reasons related to your particular situation, to the processing of personal data referred to in art. 6, co. 1, letter. e) or f) GDPR, including profiling based on these provisions.
(V) Right to limit processing: right to obtain from the Data Controller the limitation of processing, in cases where the accuracy of the personal data is contested (for the period necessary for the data controller to verify the accuracy of such personal data), if the processing is unlawful and/or the data subject has opposed the processing.
(VI) Right to data portability: right to receive personal data in a structured, commonly used and machine-readable format and to transmit such data to another data controller, only for cases in which the processing is based on the consent and only for data processed via electronic tools.
(VII) Right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or jurisdictional appeal, the interested party who believes that the processing concerning him or her violates the GDPR has the right to lodge a complaint with the supervisory authority of the Country in which he/she habitually resides or works, or of the Country n which the alleged infringement occurred.
The rights listed above can be exercised by contacting firstname.lastname@example.org.
Last update: May 2023