Privacy

1. Privacy Policy / GDPR (general data protection regulation) EU2016/679

Dear Artist

We thank you for visiting our website. We hereby wish to inform you of the way in which we collect and process personal data pursuant to Art. 13 of the EU2016/679 regulation (hereinafter GDPR), in force since 25 May 2018.

Responsible

The person responsible for collecting and processing the data is declared in the "Info & Legal Notes" section.

Usage data

When you visit our website, so-called temporary usage data is stored by protocol for statistical purposes to improve the quality of our website.

This data consists of:

The page from which the file was requested

The name of the file

The date and time of the query

The amount of data transferred

The access status (file transfer, file not found…)

The description of the type of browser used

The IP address of the computer, which is abbreviated so as not to make any personal reference evident

This data is saved anonymously.

2. Transmission to 3rd parties

Transmission to 3rd parties

Pursuant to Art. 28 GDPR, data is transmitted to providers who, in the context of order processing, support our company with regard to the operation of our website and related processes. Our suppliers are contractually bound to our instructions. We use the services of the following suppliers: Episerver, Scalecommerce, Cloudflare, Saferpay, Google, Facebook.

Transmission of data to third countries

In some cases we transfer personal data to a third country, outside the European Union, guaranteeing in any case a satisfactory level of protection of the aforementioned data. In the case of Cloudflare, Google and Facebook, an adequate level of data protection derives from participation in the Privacy Shield (Art. 45.1 GDPR).

3. Cookies

On our website we use cookies, small text files that can be stored and read on your device. A distinction is made between session cookies, which are always deleted as soon as the browser is closed, and permanent cookies, which are stored beyond the single session. Cookies may contain data that allow the device used to be recognised. In some cases, however, cookies only contain information on some settings, which cannot be personally identifiable.

We use both session cookies and permanent cookies on our site. The data processing is based on Art. 6.1.f of the GDPR and in the interest of optimizing or enabling personalization and improving the representation of our website.

You can set your browser to inform you about the presence of cookies, so that their use is transparent. It is possible to object to the processing at any time and also delete cookies via the appropriate browser setting, as well as prevent the setting of new cookies. Attention: by doing so, our website may not be displayed optimally and some functions may no longer be available.

4. Google Analytics

To design our website appropriately, we create profiles with pseudonyms with the help of Google Analytics. Google Analytics uses cookies, which are stored on your end device and can be read by us. This way we are able to recognize and count repeat visitors. Data processing takes place on the basis of Art. 6.1.f of the GDPR and in the interest of monitoring how often our site is consulted by different users.

The information generated by the cookies about the user's use of the site is normally transmitted to a Google server in the United States and stored there. However, since IP addresses are stored anonymously on our website, your IP address is shortened by Google before you leave the European Union. Only in exceptional cases will the full IP address be transmitted to Google in the United States, which will be shortened once there (in this sense an adequate level of data protection is guaranteed by Art. 45.1 of the GDPR, given Google's participation in the Privacy Shield). Furthermore, we have concluded a data processing contract with Google Inc. (USA) in accordance with Art. 28 of the GDPR. Therefore, Google can use all information exclusively to evaluate the use of our website for us and to compile reports on its activity.

You can object to data processing at any time, using the following options:

a.) It is possible to prevent the storage of cookies via a specific browser setting; however, please note that by doing so you may not be able to use all the features of the website fully.

b.) You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address), as well as the processing of this data by Google, by using the link below (https:// tools.google.com/dlpage/gaoptout?hl=it) to download and install the appropriate browser plugin.

c.) You can also prevent registration on Google Analytics by clicking on the following link. An opt-out cookie (Opt-Out Cookie) will be set which permanently prevents the future collection of your data when you visit our website. Click here to deactivate Google Analytics during data processing.

5. User-based online advertising (Remarketing/Retargeting)

Our site processes your behavior and the way you use the site. It works like this: When you visit our website, it is possible that the advertising network operator obtains recognition functions for your browser or device (e.g. by creating a so-called browser fingerprint), evaluates your IP address or has a function recognition in the form of a small text file that is stored on your device (for example third-party cookies). It is also possible that the advertising network operator connects and stores your visit to our website with one or more of these recognition features, in order to show you our advertising on other websites.

The recognition features described above are generated as pseudonyms and can be used by the advertising network operator to recognize your device on other websites. For example, when you visit a page that participates in the operator's advertising network (i.e. that displays ads on behalf of the advertising network operator), the latter can recognize your device and your browser based on the features described above.

We can also equip our website with so-called remarketing tags. This means that the site includes keywords that contain information about the content of the page displayed (for example categories of products or services). The keywords we use have neither personal nor sensitive information. The advertising network operator receives and stores these keywords via the above recognition functions. So, if you visit a page that we have tagged with a particular product category, the advertising network operator stores that tag and associates it with your recognition characteristics.

This allows us to involve the advertising network operator in advertising on other websites, based on the pages you have visited on our site. If you visit another website that participates in the operator's advertising network, the operator can use recognition functions and stored keywords to identify whether and which of our advertisements to show you.

If you log in with your credentials, for example on Google, the recognition features of different browsers and devices may be linked. Therefore, if the advertising network operator has created its own recognition criteria for the PC you use, as well as for the tablet, notebook or smartphone, it is possible for it to coordinate all these functions as soon as you log in or use a service of its network. In this way the operator can show you our advertisements in a targeted manner on your various devices. This will only happen if you have previously given your consent to the advertising network operator for this processing of your data.

Data processing is based on Art. 6.1.f of the GDPR. The legitimate interest arises from the interest in optimizing your website to improve the success of advertising campaigns. In order to display ads to the user based on their behavior on the web, we work with various providers. Of course, you can object to this form of advertising at any time.

Partner

Privacy Policy

Links (Opt-out)

Google

https://policies.google.com/privacy?hl=it

https://adssettings.google.com

Facebook

https://www.facebook.com/about/privacy

https://www.facebook.com/settings/?tab=ads

6. Data processing in the context of a purchase order

We store and use your personal data, which you transmit to us during an order procedure, in accordance with Art. 6.1.b of the GDPR exclusively to process your orders. We use your email address to send you messages regarding the status of your order. This also includes customer assistance and any subsequent after-sales guarantee.

If necessary, personal data is transmitted to companies involved in processing the order, such as: PayPal, credit institutions for payment, logistics companies for delivery of the goods.

The contract data will not be deleted as long as any complaints are open and until they are resolved. If there are legal retention periods, the data in question will be archived for the duration of the aforementioned period. Any special contractual conditions to be agreed or particular conditions regarding delivery will be maintained for the entire duration of the retention periods required by law.

Data processing for the protection of legitimate interests

Otherwise the data will be deleted no later than five years after termination of the contract and will until then only be available for any questions or to assign and process new orders as quickly as possible. Data processing is based on Art. 6.1.f of the GDPR. The user has the right to object to the processing of data. For further information in this regard, see the point "Rights of the interested party".

Voluntary information

Some data is not mandatory, but rather voluntary. For example, the indication of the telephone number is voluntary. There are no negative consequences associated with failure to provide this data. However, in individual cases this lack could complicate or delay subsequent communications.

Data processing based on consent

If you have provided voluntary information or have given us separate consent to be informed by us by telephone, in writing or by email about our products and services, the data provided will be processed in accordance with Art. 6.1.f of the GDPR. Your consent can be revoked at any time without affecting the lawfulness of the processing up to that point. If consent is revoked, the corresponding data processing stops.

Data processing by direct mail

We process your data for direct mail purposes, in particular with regard to sending advertising of our products by post or email. The data processing takes place pursuant to Art. 6.1.f of the GDPR and in the interest of keeping you informed about new products and services. Every customer has the right to object to this data processing, the exercise of which leads to the termination of the aforementioned processing for direct mail purposes.

If the data is stored exclusively for direct mail, it will be deleted following the customer's revocation of consent.

Transmission of data to third parties

The data that you have transmitted to us during the procedure for placing an order are provided to third parties (for example credit institutions for payment or transport companies), only upon stipulation of a contract regarding the processing of data as from Art. 28 of the GDPR (for example based on the legal provisions cited above).

Your data may also be passed on to external service providers, who support us in data processing as part of order processing in line with our needs.

We do not see or market your personal information to third parties in any way.

7. Newsletters

On our site we offer you the opportunity to subscribe to our newsletter. If you have given us separate consent to inform you via email about our products and services, we will process the data on the basis of Art. 6.1.a of the GDPR. Consent can be revoked at any time, without affecting the lawfulness of previous processing. If consent is revoked, data processing will cease accordingly.

If you no longer wish to receive our newsletter, you can unsubscribe at any time via the link found at the end of each of our newsletters.

8. Contact form

You have the option of contacting us via a web form, to use which we need you to enter your name and email address. It is possible but not mandatory to provide further information. The processing of this data takes place pursuant to Art. 6.1.f of the GDPR.

The legitimate interest arises from the interest in responding to requests from our customers and website visitors and therefore in maintaining and increasing customer satisfaction. Your data will only be processed to respond to your request. A transfer to third parties will not take place.

9. Company Facebook page

We operate an official Facebook page under the URL https://www.facebook.com/ilPennello/ on the basis of Art. 6.1.f of the GDPR. We do not collect, store or process the personal data of our users on this page at any time. Furthermore, no other data processing is undertaken or initiated by us. The data you enter on our Facebook page, such as comments, videos or images, are never used or processed by us for any other purpose.

Data processing by Facebook.

Facebook uses so-called tracking methods on this page. Please note that it is not excluded that Facebook uses your profile data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on the processing of your data by Facebook.

For further information about the processing and processing of data via Facebook you can visit the following link https://www.facebook.com/policy.php

10. Explanation of security measures

Data security

To protect your data from unwanted access as completely as possible, we take technical and organizational measures. We use an encryption process on our site. Your information will be transferred from your computer to our server and vice versa via the internet with a TLS encryption procedure. You will recognize this by the closed padlock symbol in the browser bar and the address line starting with https://.

11. User rights

Regarding the processing of personal data, the GDPR grants certain rights to the user:

a.) Right of access of the interested party (Art. 15 GDPR)

You have the right to obtain confirmation from the data controller as to whether or not personal data concerning you is being processed and, in this case, to obtain access to the personal data and information listed in Art. 15 of the GDPR.

b.) Right to rectification and cancellation (Art. 16 and 17 GDPR)

You have the right to immediately request the correction of personal data concerning you and, if necessary, the integration of incomplete personal data.

You also have the right to request that personal data relating to your account be immediately deleted, provided that one of the reasons listed in Art. 17 of the GDPR is satisfied. For example, when the data is no longer necessary for the purposes pursued.

c.) Right to limit processing (Art. 18 of the GDPR)

You have the right to request the limitation of the processing of your personal data if one of the conditions listed in the Art. 18 of the GDPR is satisfied. For example, if you have contested the processing of personal data for the period necessary for the data controller to verify the accuracy of such data.

d.) Right to data portability (Art. 20 GDPR

In some cases, listed in detail in Art. 20 of the GDPR, you have the right to receive the personal data provided to the data controller in a structured, commonly used and machine-readable format, and you have the right to transmit such data to another data controller without impediments from part of the owner to whom they were supplied.

e.) Right to object (Art. 21 GDPR)

If the data is collected on the basis of Art. 6.1.f (data processing for the pursuit of legitimate interests) you have the right to object to the processing at any time for reasons arising from your particular situation. We will no longer process your personal data unless we have legitimate, compelling and demonstrable reasons for processing which override the interests, rights and freedoms of the data subject, or unless the data processing serves the purpose of 'establishment, exercise or defense of a right in court.

f.) Right of appeal to a supervisory authority

Pursuant to Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates the rules on data protection. In particular, the right of appeal can be exercised with a supervisory authority in the Member State where you live, where you work or in the place where the alleged infringement occurred

20. Contacts

For further information you can contact us via email at info@ilpennello.it or by filling out the form you find on the site.