1. Identity and contact details of the data controller
The data controller is Eurotessuti S.r.l. As the Controller is established in Italy, no representative has been appointed.
2. Processing methods
Cookies are small text strings that the website visited by the data subject sends to the browser, which stores them in order to transmit them to the same website when the data subject visits it again. Cookies make it possible to collect browsing information, can be stored permanently on the computer of the data subject and have a variable duration (so-called persistent cookies), just as they can disappear when the browser is closed or have a limited duration (so-called session cookies). Cookies may be installed by the website that the data subject is visiting or may be installed by other websites that provide services of various kinds to said website (so-called third-party cookies).
2.1 Technical cookies
- Navigation, functional and session cookies: navigation cookies allow the Site to function properly. The use of so-called session cookies (which are not permanently stored on the data subject’s device and are automatically deleted when the browser is closed) is strictly limited to the transmission of individual session identifiers. These cookies are used in order to allow the safe and effective use of the Site.
|wp-wpml_current_language||eurotessuti.com||Cookie used by WordPress, stores the current language set for the site.||Session|
|aviaCookieConsent, aviaPrivacyEssentialCookiesEnabled, aviaPrivacyRefuseCookiesHideBar||eurotessuti.com||Used by the site to store the choice of cookies.||1 year|
|PHPSESSID||eurotessuti.com||Cookie used to keep track of sessions, preserves the user’s status on different pages of the website, contains a unique identifier for the session on the website.||Session|
The Controller uses, by way of example:
- Statistical cookies: the Site uses statistical cookies created directly by the Data Controller, as the first party, or provided by third parties. In the latter case, appropriate tools have been adopted to reduce their identifying power, also by masking significant portions of the IP addresses thus processed. Moreover, the use of such third-party statistical cookies has been made subject to contractual constraints that commit the third party to use them exclusively for the provision of the service, to store them separately and not to “enrich” or “cross-reference” them with other information available to them.
- Navigation data and environmental variables: in the course of their natural operation, the computer systems and procedures used to operate the Site automatically acquire certain personal data relating to the navigation of the data subject, including environmental variables. This category of data includes, by way of example:
- the IP addresses of the computers used by the users of the service;
- the number of accesses;
- the pages used;
- the date and time when the access took place;
- the URL where the browser was before displaying our page;
- the type of browser;
- the operating system.
2.2 Non-technical cookies
|_ga||.google.com||Cookie used by the Google Analytics service, records a unique ID used to generate statistical data on how the visitor uses the site.||2 years|
|_gid||.google.com||Cookie used by the Google Analytics service, records a unique ID used to generate statistical data on how the visitor uses the site.||1 day|
|_gat||.google.com||Cookie used by the Google Analytics service, is used to limit the frequency of requests.||1 minute|
|NID||.google.com||Used to unlock Google Maps content||6 months|
3. Delete and deactivate cookies
Since cookies are normal text files, they can be accessed using word processing programs.
In any case, you can configure your own browser to prevent it from processing cookies. The following are examples of how to deactivate and delete cookies in the main web browsers:
Delete/deactivate cookies with Firefox:
Delete/deactivate cookies with Explorer:
Delete/deactivate cookies with Chrome:
4. Data provided voluntarily
The data voluntarily and freely provided by the data subject by sending electronic mail to the addresses indicated on the Site may be acquired for the purposes indicated from time to time.
In particular, in addition to the email address needed to reply to the sender, any other personal data contained in the relevant communication will be processed.
The data collected in this way will be stored and processed solely for the purpose of keeping correspondence and will not be used for any other purpose.
5. Purpose of processing and legal basis of processing
With regard to personal data processed by means of technical cookies in order to allow the proper use of the Site, the provision of personal data is a contractual obligation; without such processing, the Site could not be made available in full working order in accordance with the terms and conditions of use, while it is optional with regard to non-technical cookies. In the latter case, failure to provide such data will only result in the impossibility of providing a personalised service. In the latter case, the legal basis is the consent of the data subject, expressed in accordance with the legislation in force. With regard to data provided voluntarily by email, the processing of personal data is not an obligation of a contractual nature, but a processing based on the legitimate interest of the Controller to respond to the data subjects; without such processing it would not be possible to respond to the requests made by the data subject.
6. Consent modalities
- Consent to the processing of personal data by means of non-technical cookies may be given:
by clicking on a specific box presented in a banner.
7. Source from which personal data originate and categories of data
Only data provided by the data subject in accordance with this policy, collected through the Site or by sending an email by the data subject, will be processed. Data from publicly available sources will not be processed. The personal data of the data subject will be processed. Special data pursuant to Article 9 of the GDPR will not be processed.
8. Recipients and possible categories of recipients of personal data
The following categories may be recipients of the personal data of the data subject:
- companies offering information services;
- companies offering hosting services.
9. Data transfer
The Controller intends to transfer personal data to a third country or international organisation. Such entities could be represented, by way of example, by:
- communications companies that carry out communications activities on behalf of the Controller;
- companies offering information society services, including, in particular, those offering hosting services;
- communication society service providers.
The transfer of personal data to such subjects, if established in a third country or an international organisation, is carried out in the presence of an adequacy decision by the European Commission, which has verified that the third country, the territory or one or more specific sectors within the third country, or the international organisation in question guarantee an adequate level of protection of your rights. In the absence of such decisions, the Data Controller – or should it deem it appropriate – reserves the right to conclude specific separate agreements obliging such parties to adopt adequate security measures, including organisational measures, aimed at offering appropriate guarantees regarding rights. In particular, Google Inc. is contractually bound to ensure adequate protection of the rights of the data subject. The data may thus be transferred to the following countries: United States of America.
In order to obtain a copy of such data or the place where they have been made available, it is sufficient to send such a request to the address: firstname.lastname@example.org.
10. Period of retention of personal data
The personal data processed and stored in order to allow the correct use of the Site are processed and stored for a period not exceeding 12 (twelve) months from the date of the individual collection. The Data Controller reserves the right, in any case, to ask the data subject to renew his/her consent to the processing and/or to verify the consents already expressed.
11. Optional nature of consent and consequences of failure to consent
With regard to the personal data processed in order to allow the proper use of the Site, the communication of personal data is a contractual obligation in relation to technical cookies, since without such processing the Site could not be made available in full working order, while it is to be considered optional in relation to technical cookies. In the latter case, failure to provide such data will only result in the impossibility of providing a personalised service.
12. Rights of the data subject
The data subject has the right to object at any time, on grounds relating to his/her particular situation, to the processing of personal data concerning him/her, pursuant to Article 6, paragraph 1, subparagraph e) or f) of the GDPR, including profiling on the basis of those provisions. The Controller shall refrain from further processing the personal data unless he/she demonstrates the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you, carried out for such purposes, including profiling insofar as it is related to such direct marketing.
In case of opposition to the processing of personal data for direct marketing purposes, personal data are no longer processed for such purposes. It is hereby specified that the right of the data subject to object to the processing of his/her personal data for the aforementioned purposes may also be exercised only in part, i.e. by objecting, for example, to the sending of promotional communications by automated and/or digital means, or to the sending of paper communications and/or to receiving telephone communications.
Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, the data subject shall have the right, on grounds relating to his/her particular situation, to object to the processing of personal data relating to him/her, except where the processing is necessary to perform a task carried out for reasons of public interest.
13. Other rights
The Data Controller also wishes to inform the data subject of the existence of the following rights granted to him/her:
- Data subject’s right of access: the data subject has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning him/her is being processed and, if so, to obtain access to the personal data and specific information, in accordance with Article 15 of the GDPR;
- Right of rectification: the data subject shall have the right to obtain from the Controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the supplementation of incomplete personal data, including by providing a supplementary declaration, in accordance with Article 16 of the GDPR;
- Right to deletion: the data subject has the right to obtain from the Controller the deletion of personal data concerning him/her without undue delay and the Controller has the obligation to delete the personal data without undue delay, if the grounds defined in Article 17 of the GDPR exist;
- Right to restriction of processing: the data subject has the right to obtain from the Controller the restriction of processing when the hypotheses defined in Article 18 of the GDPR apply;
- Right to data portability: the data subject has the right to receive in a structured, commonly used and machine-readable format the personal data concerning him/her provided to the Data Controller and has the right to transmit such data to another data controller without hindrance by the Data Controller in the cases and under the conditions specified by Article 20 of the GDPR;
- Data subject’s right to object to commercial communications: the data subject has the right to object at any time, free of charge, to receiving commercial communications.
14. Exercise of rights
Requests for the exercise of the rights indicated in this information notice should be addressed directly to the Data Controller at the email address email@example.com. Alternatively, you can exercise your own rights by sending a registered letter with acknowledgement of receipt to the address with registered office in Via Pilastro 6 – 46019 Cogozzo di Viadana (MN).
15. Accessibility of information
The information is available from the address https://www.eurotessuti.com/cookie-policy/, as well as from the Controller. If expressly requested by the data subject, the information may also be provided verbally, as long as the identity of the data subject is proven, by means of a telephone request to the Controller’s addresses.