PRIVACY AND COOKIE POLICY OF THE SITE WWW.NONNASILIVI.COM

Dear Interested Party,

below is all the information relating to the data processing carried out on the e-commerce site www.nonnasilvi.com (hereinafter the Site) or which originate from orders, contact requests and other operations carried out by you using its functions.

This document (hereinafter the "Information") has been drawn up in order to allow you to understand how your personal data will be processed within of the use of the Site and to provide you with all the information so that you can also express explicit and informed consent to the processing carried out, where necessary.

Preliminarily, the collections and processing of your personal data that you provide or are collected through the Site will take place according to the principles and rules established by the Reg. EU 679/2016 and the Italian legislation on the matter, and therefore meeting the criteria of lawfulness, correctness, transparency, purpose and storage limitation, data minimization, accuracy, integrity and confidentiality.

Index of information

1. The processing and data collected, purposes and legal bases
2. The Data Controller
3. The Data Protection Officer
4. The recipients of the data
5. The data retention period
6. The rights of the interested party
7. Site cookie policy
8. Changes to this information

1. The processing and data collected, purposes and legal bases

1.a Conclusion of the contract and execution of sales contracts through the functionality of the Site

On the Site, in application of the general contract conditions (https://nonnasilvi.com/pages/termini-e-condizioni), the following personal data is collected: name and surname of the Buyer, data for invoicing and issuing the relevant tax documents, data for shipping, such as the recipient's name, residence or domicile addresses, contact details such as telephone number and email. It is specified that online payments are managed by external platforms (Paypal/Shopify) and not by the owner of the Site; these merchants are therefore the sole and exclusive Data Controllers carried out in relation to the payment and the interested party is invited to read the privacy policies of those platforms and the banking services used.

The purpose of this collection is to allow the conclusion of the sales contract between the Owner and the Interested Purchaser, as well as the execution of the contract thus formed, including the phases of preparation and execution of the shipment of the purchased goods as well as those of after-sales assistance. The collection is also aimed at maintaining contact with the customer in all the aforementioned phases, according to the specific needs possibly reported by the interested party.

Furthermore, the collection and processing of personal details and other data necessary for invoicing are aimed at correct bookkeeping. Failure to provide these data completely may prevent or significantly delay the execution of the sales contract for the goods ordered.

The legal bases of the collection and processing in question are: the establishment and full and exact execution of the contract with the interested party (see art. 6, § 1, letter. b) of the Reg. EU 2016/679); the fulfillment of the legal obligations incumbent on the Data Controller, for example by reason of the statute, Italian fiscal and tax legislation, legislation on public procurement and anti-mafia (art. 6, § 1, letter. c) of the Reg. EU 2016/679)

1.b General newsletter of the products on sale on the Site 

On the Site the interested party can decide to join the general newsletter service relating to the products present or promoted on the Site. Only the following personal data is collected: name, email address, through CAPTCHA protection.

The purpose of this collection is to send a newsletter containing general promotional information, and therefore in no way personalized in relation to the purchases and interests of the interested party. Subscribing to the newsletter does not also involve the creation of a personal profile on the Site, which can be requested separately by the interested party.

The legal basis of the collection and processing in question is the sole express consent of the interested party (art. 6, § 1, letter. a) of the Reg. EU 2016/679) In case of failure to provide consent, the interested party can always order products on the Site.

 

1.c Navigation data, statistical surveys and analyzes with data in aggregate form on the interaction and use of the Site

For detailed information relating to this collection and processing, please refer to the Site's Cookie Policy (https://nonnasilvi.com/pages/politica-sulla-privacy). The data in question may include cookies, Site usage data, anonymized data such as numeric identifiers (ISP) which in no way allow us to trace the identity of the interested party.

The purpose of the processing is to allow the manager of the Site to optimize its functioning and the offering of products to the public, also for the planning of marketing and remarketing campaigns of the Site and the products offered on it in sale.

The legal bases of the collection and processing provided here are: the express consent of the interested party for all navigation data other than technical cookies and necessary for the functioning of the site (art. 6, § 1, letter. a) of the Reg. EU 2016/679); the legitimate interest of the Owner for all other cookies, as they are necessary for the correct and optimal display and navigation of the Site, for its functioning, and to improve both the user experience and the offer of the goods thus offered for sale , also taking into account the chosen device of the interested party, and without prejudice to the pre-eminent interests, rights or fundamental freedoms of the interested party who, as a user of the Site, by browsing also gives explicit consent to such automated processing and/or anonymous and which can delete or disable cookies at any time, as indicated in the Cookie Policy (art. 6, § 1, letter. a) and f) of the Reg. EU 2016/679) In case of failure to provide consent, disabling or deleting cookies or other navigation data, the interested party may be prevented from browsing the Site or its correct functioning.

Beyond the collections and processing indicated above and the relative limits, no collection or processing of different personal data is underway on the Site and the interested party will always be updated in time and in advance of any changes to the collected or the processing to which your personal data is subjected on the Site.

 

2. The Data Controller

The Data Controller is solely and exclusively the company Nonna Silvi S.rthe Benefit Company, in the person of the legal representative pro tempore, with registered office in Via delle Cascine, 1/a – 50051 Castelfiorentino (FI), VAT no.VAT and C.F 07347870482, registration with R.ANDTO of the C.CTHETOTO Florence n. FI-697257, PEC nonnasilvisrl@pec.it. For communications regarding the personal data of interested parties, the email address is active: [nonnasilvicommerciale@gmail.com].

 The Data Protection Officer (DPO)

The processing carried out on the Site does not require the appointment of any DPO because the Data Controller and its Data Processors do not carry out any regular or systematic monitoring, nor large-scale processing of the data necessary to carry out the services provided, even simply connected with or incidental to the Owner's main activities. For any information you can always contact the Owner at the following email address: [insert email for privacy].

 

4. The recipients of the data

Your Personal Data may be shared with the subjects indicated below (the "Recipients"): subjects who typically act as data controllers (internal and external), i.e.: i) people, companies or firms professionals who provide assistance and consultancy to the Owners in accounting, administrative, legal, tax and financial matters; owners of websites connected to the Site through cookies and other features; subjects with whom it is necessary to interact for the provision of the Services (e.g. Newsletter); subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communications networks); persons authorized by the Data Controllers to process Personal Data necessary to carry out activities strictly related to the provision of the Services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees of the Data Controllers); subjects, bodies or authorities to whom it is mandatory to communicate your Personal Data for Compliance purposes, or to repress Abuse or Fraud, or by orders of the authorities.

Your data is normally processed and stored within the territory of the EU. In the event that a Data Controller needs to transfer, even partially, your data outside the EU, such transfer will only take place to countries for which there is express recognition that they offer a level of protection equivalent to the EU one or such transfer takes place on the basis of appropriate safeguards, in particular according to the standard contractual clauses approved by the EU Commission.

For any information you can always contact the Data Controller at the following email address: [nonnasilvicommerciale@gmail.com].

 

5. The data retention period

All personal data collected are kept for the period of time necessary and sufficient for the correct performance of the service requested by the interested party and in any case no later than thirty days from receipt of your legitimate request for cancellation.

Without prejudice to the above, the data relating to the execution of the purchase contract will be retained for the correct delivery of the goods to the interested party and, in particular, the data used for the issuing of invoices or other documentation of transport or tax will be kept until the expiration of the applicable provisions and forfeitures, also to allow the Owner to be able to provide after-sales and warranty services, or to defend their legitimate rights and interests in extrajudicial and judicial procedures (e.g. debt collection or other disputes relating to the products).

The data relating to the newsletter and the navigation data (cookies) will be stored until the interested party revokes consent, without prejudice to the fact that the interested party may suspend the processing at any time and resume it in the future by providing it again. your personal data. In the event of revocation of consent, a specific log will be kept to be able to demonstrate the granting and revocation of said consent in the event of a request by the interested party or the competent supervisory authority.

 

6.The Rights of the Interested Party

The interested party can exercise all the following rights:

1. Access your personal data pursuant to art. 15 Reg. EU 2016/679 This right also includes the right to obtain a copy of the personal data collected and processed by the Data Controller. After verifying the legitimacy of the request, the Data Controller will release the requested information and a copy of the data. In the event of manifestly unfounded or excessive requests, also due to their repetition, the interested party must pay the Data Controller an appropriate expense contribution, to be compared to the administrative costs incurred by the Data Controller for processing the request.
2. Request rectification of your personal data pursuant to art. 16 Reg. EU 2016/679 The Data Controller will communicate this correction to any recipients of the personal data pursuant to art. 19 Reg. EU 2016/679, unless this is impossible or involves disproportionate efforts, the interested party retaining the right to know the identity of the recipients themselves.
3. Request the deletion of your personal data (so-called. right to be forgotten) pursuant to and within the limits established by the art. 17 Reg. EU 2016/679 The Data Controller will communicate this cancellation request to any recipients of the personal data pursuant to art. 19 Reg. EU 2016/679, unless this is impossible or involves disproportionate efforts, the interested party retaining the right to know the identity of the recipients themselves.
4. Request the limitation on the processing of your personal data pursuant to and within the limits established by art. 18 Reg. EU 2016/679 The Data Controller will communicate this request for limitation to any recipients of the personal data pursuant to art. 19 Reg. EU 2016/679, unless this is impossible or involves disproportionate efforts, the interested party retaining the right to know the identity of the recipients themselves.
5. Object to the processing of your personal data pursuant to and within the limits set out in art. 21 Reg. EU 2016/679
6. Request the portability of your personal data, pursuant to and within the limits established by art. 20 Reg. EU 2016/679 The Data Controller reserves the right to verify the technical feasibility of transmission to another data controller indicated by the interested party on a case-by-case basis.
7. Without prejudice to processing that has already taken place, revoke any consent already given at any time for processing that is based on this legal basis.
8. Propose a complaint to a supervisory authority pursuant to art. 77 Reg. EU 2016/679

 

The interested party may address their requests to the Data Controller, using the contact details provided above.

 

7. Site cookie policy

A cookie is a small file that a website asks the browser used by the user to store on the device, so as to remember some information, such as the preferred language or login data. These cookies are called first-party cookies. The Data Controller also uses third-party cookies - i.e. cookies created and made available by a person other than the Data Controller - for example to make effective promotional and online marketing initiatives for our products possible.

Below is information relating to the various cookies used by the Site and which may be installed on your devices while browsing the Site.

 Strictly necessary cookies

These cookies are necessary for the functioning of the Site and cannot be deactivated. They are usually set in response to actions you take on the Site that constitute a request for services, such as setting privacy preferences, logging in or filling out forms. You can set your browser to block or receive warnings about these cookies, but if you block some parts of the Site may not work.

These cookies do not store your personal information and therefore do not require your express consent. 

Performance cookies

These cookies allow us to count visits to the Site and their origin: these data allow us to measure and improve the performance of the Site, to know which pages are the most and least popular, to see how visitors interact with the Site. All this information collected by cookies is automatically aggregated and analyzed anonymously.

You have the possibility to refuse consent to the use of these cookies. 

Social media cookies

These cookies are created by a number of social media services that we have added to the site to allow you to share our content with your friends and connections. With these cookies it is possible to monitor the activity of your Internet browser on other sites and thus create a profile of your interests. These cookies are those that impact the content and advertising messages you see on other websites you visit.

You have the possibility to refuse consent to the use of these cookies. 

Functionality cookies

These cookies make it possible for the Site to provide advanced functionality and customization. They allow us to offer you additional services, alone or with the help of third parties who make their services available on our Site.

If you do not consent to these cookies, some or all of these services may not work. 

Cookies for targeted advertising

These cookies are set by our advertising partners.

They can be used by these companies to build a profile of your interests and show you relevant adverts on other sites. They do not directly store personal information and are based only on identifying your browser and device.

If you reject these cookies, you will receive less targeted advertising on sites other than the Site.

  

To disable cookies, with the exception of those strictly necessary, you can refuse them when you first access the Site using the refuse function on the appropriate banner or by clicking on “x” of the banner itself. Alternatively, after a previous acceptance, you can disable the Site's cookies through the functions of the internet browser you have chosen for navigation. For further information, please refer to the support information of the most popular internet browsers, with the clarification that this information has not been verified by us as it relates to third-party services:

The list of cookies:

Cookies Domain Description Duration Type keep_alive nonnasilvi.com The keep_alive cookie is used to maintain a user's session active on a website, preventing automatic logout during periods of inactivity. 1 hour Necessary secure_customer_sig nonnasilvi.com Shopify sets this cookie to be used in connection with customer login. 1 year Necessary localization nonnasilvi.com The localization cookie stores user preferences for language and region to provide a personalized browsing experience. 1 year Necessary cart_currency nonnasilvi.com Shopify sets this cookie to remember the user's country of origin and populate the correct transaction currency. 14 days Necessary _tracking_consent .grandmothersilvi.com Shopify sets this cookie to store a user's preferences if a merchant has set up privacy rules in the visitor's region. 1 year Necessary _cmp_a .grandmothersilvi.com The _cmp_a cookie is typically used for consent management, helping websites comply with legal requirements by storing user consent preferences. 1 day Necessary _shopify_y .grandmothersilvi.com This cookie is associated with Shopify's analytics suite. 1 year Analytics _shopify_s .grandmothersilvi.com This cookie is associated with Shopify's analytics suite. 1 hour Analytics _orig_referrer .grandmothersilvi.com Shopify sets this cookie to be used in connection with shopping cart. 14 days Analytics _landing_page .grandmothersilvi.com Shopify installs this cookie to track landing pages. 14 days Analytics CLID www.clarity.ms Microsoft Clarity set this cookie to store information about how visitors interact with the website. The cookie helps to provide an analysis report. The data collection includes the number of visitors, where they visit the website, and the pages visited. 1 year Analytics _shopify_sa_t .grandmothersilvi.com Shopify sets this cookie for marketing & referrals. 1 hour Analytics _shopify_sa_p .grandmothersilvi.com Shopify sets this cookie for marketing & referrals. 1 hour Analytics shopify_pay_redirect nonnasilvi.com Shopify sets this cookie to enable secure online payment and checkout. 1 hour Necessary __kla_id nonnasilvi.com Klaviyo sets this cookie to collect information on the visitor's behavior. This information is used for internal analytics and to optimize the website. It also registers if the visitor has subscribed to a news letter. 1 year 1 month 4 days Analytics _clck .grandmothersilvi.com Microsoft Clarity sets this cookie to retain the browser's Clarity User ID and settings exclusive to that website. This guarantees that actions taken during subsequent visits to the same website will be linked to the same user ID. 1 year Analytics _clsk .grandmothersilvi.com Microsoft Clarity sets this cookie to store and consolidate a user's pageviews into a single session recording. 1 day Analytics _fbp .grandmothersilvi.com Facebook sets this cookie to store and track interactions. 3 months Analytics MUID .bing.com Microsoft Bing sets this cookie to identify unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. 1 year 24 days Advertisement MR .cbing.com This cookie, set by Bing, is used to collect user information for analytics purposes. 7 days Analytics SRM_B .cbing.com Used by Microsoft Advertising as a unique ID for visitors. 1 year 24 days Performance SM .cclarity.ms Microsoft Clarity cookie set this cookie for synchronizing the MUID across Microsoft domains. session Analytics MUID .clarity.ms Microsoft Bing sets this cookie to identify unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. 1 year 24 days Advertisement MR .cclarity.ms This cookie, set by Bing, is used to collect user information for analytics purposes. 7 days Analytics ANONCHK .cclarity.ms The ANONCHK cookie, set by Bing, is used to store a user's session ID and also verify the clicks from ads on the Bing search engine. The cookie helps in reporting and personalization as well. 10 minutes Advertisement lastExternalReferrerTime nonnasilvi.com never Other klaviyoOnsite nonnasilvi.com never Other lastExternalReferrer nonnasilvi.com never Other getItem nonnasilvi.com never Other setItem nonnasilvi.com never Other removeItem nonnasilvi.com never Other clear nonnasilvi.com never Other length nonnasilvi.com never Other key nonnasilvi.com never Other user-location-data nonnasilvi.com session Other _cltk nonnasilvi.com session Other klaviyoPagesVisitCount nonnasilvi.com session Other _pay_session shop.app Shopify sets this cookie to enable secure checkout and payment function on the website. session Necessary

 

8. Changes to this information

This information will be reviewed by the Data Controller regularly and corrected in case of changes to be communicated to the interested parties. Any changes will be appropriately reported on the Site and in other ways, where appropriate. In any case, no new or different processing will be undertaken by the Data Controller without first informing the interested parties.