PRIVACY AND COOKIE POLICY OF THE SITE WWW.NONNASILIVI.COM

Dear Interested Party,

Below is all the information relating to the data processing carried out on the e-commerce site www.nonnasilvi.com (hereinafter the Site) or that originate from orders, contact requests and other operations carried out by you using the features of the same.

This document (hereinafter the "Information") has been drawn up in order to allow you to understand how your personal data will be processed in the context of the use of the Site and to provide you with all the information so that you can also express explicit and informed consent to the processing carried out, where necessary.

As a preliminary matter, the collection and processing of your personal data that you provide or will be collected through the Site will take place according to the principles and rules established by EU Reg. 679/2016 and by the Italian legislation on the matter, and therefore responding to criteria of lawfulness, correctness, transparency, limitation of purposes and conservation, data minimization, accuracy, integrity and confidentiality.

Information Index

1. The processing and data collected, purposes and legal bases
2. The Data Controller
3. The Data Protection Officer
4. Data Recipients
5. The data retention period
6. The rights of the interested party
7. Cookie policy of the Site
8. Changes to this Policy

1. The processing and data collected, purposes and legal bases

1.a Conclusion of the contract and execution of sales contracts through the functions of the Site

On the Site, in application of the general contract conditions (https://nonnasilvi.com/pages/termini-e-condizioni), the following personal data are collected: name and surname of the Buyer, data for invoicing and issuing the related tax documents, data for shipping, such as the name of the recipient, residential or domicile addresses, contact data such as telephone number and email. It is specified that online payments are managed by external platforms (Paypal/Shopify) and not by the owner of the Site; these operators are therefore the sole and exclusive Owners of the data processing carried out in relation to the payment and the Interested Party is invited to read the privacy policies of those platforms and the banking services used.

The purpose of this collection is to allow the conclusion of the sales contract between the Owner and the Interested Party-Purchaser, as well as the execution of the contract thus formed, including the phases of preparation and execution of the shipment of the purchased goods as well as those of after-sales assistance. The collection is also aimed at maintaining contact with the customer in all the aforementioned phases, according to the specific needs possibly reported by the Interested Party.

Furthermore, the collection and processing of personal details and other data necessary for invoicing are aimed at correct accounting. Failure to provide this data in full may prevent or significantly delay the execution of the sales contract for the goods ordered.

The legal bases of the collection and processing in question are: the establishment and full and exact execution of the contract with the interested party (see art.6, § 1, letter b) of EU Reg. 2016/679); the fulfillment of legal obligations incumbent on the Data Controller, for example by virtue of the statute, Italian tax and fiscal legislation, public procurement and anti-mafia legislation (art. 6, § 1, letter c) of EU Reg. 2016/679).

1.b General newsletter of products on sale on the Site

On the Site the Interested Party can decide to join the general Newsletter service relating to the products present or promoted on the Site. Only the following personal data are collected: name, email address, through CAPTCHA protection.

The purpose of this collection is to send a newsletter containing general promotional information, and therefore in no way personalized in relation to the purchases and interests of the Interested Party. Subscription to the newsletter does not also imply the creation of a personal profile on the Site, which can be requested separately by the Interested Party.

The legal basis for the collection and processing in question is the sole express consent of the Interested Party (art. 6, § 1, letter a) of EU Reg. 2016/679). In the event of failure to provide consent, the Interested Party may always order products on the Site.

1.c Browsing data, Statistical surveys and analyses with data in aggregate form on the interaction and use of the Site

For detailed information on this collection and processing, please refer to the Site's Cookie Policy(https://nonnasilvi.com/pages/politica-sulla-privacy). The data in question may include cookies, Site usage data, anonymized data such as numeric identifiers (ISP) that do not allow in any way to trace the identity of the interested party.

The purpose of the processing is to allow the Site manager to optimize its operation and the offer of products to the public, also for the planning of marketing and remarketing campaigns of the Site and the products offered for sale on it.

The legal bases for the collection and processing provided here are: the express consent of the interested party for all navigation data other than technical cookies and necessary for the functioning of the site (art. 6, § 1, letter a) of EU Reg. 2016/679); the legitimate interest of the Data Controller for all other cookies, since they are necessary for the correct and optimal display and navigation of the Site, for its operation, and to improve both the user experience and the offer of goods thus proposed for sale, also taking into account the device chosen by the Data Subject, and not hindering this by the overriding interests, rights or fundamental freedoms of the Data Subject who, as a user of the Site, by browsing also gives explicit consent to such automated and/or anonymous processing and who can at any time delete or disable cookies, as indicated in the Cookie Policy (art. 6, § 1, lett. a) and f) of EU Reg. 2016/679). In the event of failure to provide consent, disabling or deleting cookies or other browsing data, the Data Subject may be prevented from browsing the Site or its correct functioning.

Beyond the collections and processing indicated above and the related limits, no other personal data is being collected or processed on the Site and the Interested Party will always be updated in time and in advance of any changes to the collections or processing to which his/her personal data are subjected on the Site.

2. The Data Controller

The Data Controller is solely and exclusively the company Nonna Silvi SrlBenefit Company, in the person of its legal representative pro tempore, with registered office in Via delle Cascine, 1/a – 50051 Castelfiorentino (FI), VAT and Tax Code 07347870482, registration in the REA of the Florence Chamber of Commerce no. FI-697257, PEC nonnasilvisrl@pec.it. For communications concerning the personal data of the interested parties, the following email address is active: [nonnasilvicommerciale@gmail.com].

The Data Protection Officer (DPO)

The processing carried out on the Site does not require the appointment of any DPO because the Data Controller and its Data Processors do not carry out any regular or systematic monitoring, nor large-scale processing of data necessary for the performance of the services provided, not even simply connected with or ancillary to the main activities of the Data Controller. For any information, you can always contact the Data Controller at the following email address: [insert email for privacy].

4. Data Recipients

Your Personal Data may be shared with the subjects indicated below (the "Recipients"): subjects who typically act as data controllers (internal and external) of the processing, namely: i) persons, companies or professional firms that provide assistance and consultancy to the Data Controllers in accounting, administrative, legal, tax and financial matters; subjects who own the websites linked to the Site through cookies and other functions; subjects with whom it is necessary to interact for the provision of the Services (e.g. Newsletter); subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks); persons authorised by the Data Controllers to process Personal Data necessary to carry out activities strictly related to the provision of the Services, who have undertaken to maintain confidentiality or have an adequate legal obligation of confidentiality (e.g. employees of the Data Controllers); subjects, bodies or authorities to whom it is mandatory to communicate your Personal Data for Compliance purposes, or to suppress Abuse or Fraud, or by order of the authorities.

Your data is processed and stored, as a rule, within the territory of the EU. In the event that a Data Controller needs to transfer, even if only in part, your data outside the EU, such transfer occurs only to countries for which there is an express recognition that the same offer a level of protection equivalent to that of the EU or such transfer occurs on the basis of appropriate safeguards, in particular according to the standard contractual clauses approved by the EU Commission.

For any information you can always contact the Owner at the following email address: [nonnasilvicommerciale@gmail.com].

5. Data retention period

All personal data collected are stored for the period of time necessary and sufficient to correctly perform the service requested by the interested party and in any case no longer than thirty days from receipt of your legitimate request for cancellation.

Without prejudice to the above, the data relating to the execution of the sales contract will be retained for the correct delivery of the goods to the interested party and, in particular, the data used for the issuance of invoices or other transport or fiscal documentation will be retained until the expiry of the applicable prescriptions and forfeitures, also to allow the Owner to be able to provide after-sales and warranty services, or to defend its legitimate rights and interests in extrajudicial and judicial procedures (e.g. debt collection or other disputes relating to the products).

The data relating to the newsletter and the navigation data (cookies) will be stored until the consent is revoked by the interested party, without prejudice to the fact that the same may suspend the processing at any time to resume it in the future by providing their personal data again. In the event of revocation of consent, a specific log will be kept in order to be able to demonstrate, in the event of a request by the interested party or the competent supervisory authority, the granting and revocation of said consent.

6.The Rights of the Interested Party

The interested party may exercise all the following rights:

1. Access your personal data pursuant to art. 15 EU Reg. 2016/679. This right also includes the ability to obtain a copy of the personal data collected and processed by the Data Controller. After verifying the legitimacy of the request, the Data Controller will release the requested information and a copy of the data. In the event of manifestly unfounded or excessive requests, also due to their reiteration, the interested party must pay the Data Controller a reasonable fee, in relation to the administrative costs incurred by the Data Controller for processing the request.
2. Request the rectification of your personal data pursuant to art. 16 EU Reg. 2016/679. The Data Controller will communicate such rectification to any recipients of the personal data pursuant to art. 19 EU Reg. 2016/679, unless this is impossible or involves disproportionate efforts, without prejudice to the right of the Interested Party to know the identity of the recipients themselves.
3. Request the deletion of your personal data (so-called right to be forgotten) pursuant to and within the limits established by art. 17 EU Reg. 2016/679. The Data Controller will communicate this request for deletion to any recipients of the personal data pursuant to art. 19 EU Reg. 2016/679, unless this is impossible or involves disproportionate efforts, without prejudice to the right of the Interested Party to know the identity of the recipients themselves.
4. Request the limitation of the processing of your personal data pursuant to and within the limits established by art. 18 EU Reg. 2016/679. The Data Controller will communicate this request for limitation to any recipients of the personal data pursuant to art. 19 EU Reg. 2016/679, unless this is impossible or involves disproportionate efforts, without prejudice to the right of the Interested Party to know the identity of the recipients themselves.
5. Object to the processing of your personal data pursuant to and within the limits of art. 21 EU Reg. 2016/679.
6. Request the portability of your personal data, pursuant to and within the limits established by art. 20 EU Reg. 2016/679. The Data Controller reserves the right to verify the technical feasibility of the transmission to another data controller indicated by the Interested Party on a case-by-case basis.
7. Without prejudice to any processing that has already taken place, revoke at any time any consent already given, for processing based on this legal basis.
8. Lodge a complaint with a supervisory authority pursuant to art. 77 of EU Regulation 2016/679.

The interested party may address his/her requests to the Owner, using the contact details provided above.

7. Cookie policy of the Site

A cookie is a small file that a website asks the browser used by the user to store on the device, so as to remember some information, such as the preferred language or access data. These cookies are called first-party cookies. The Data Controller also uses third-party cookies - that is, cookies created and made available by a party other than the Data Controller - for example, to make effective promotional and online marketing initiatives for our products possible.

Below is information on the various cookies used by the Site and which may be installed on your devices while browsing the Site.

Strictly Necessary Cookies

These cookies are necessary for the Site to function and cannot be switched off in our systems. They are usually set in response to actions made by you on the Site which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the Site may not work if you block them.

These cookies do not store your personal information and therefore do not require your express consent.

Performance Cookies

These cookies allow us to count visits to the Site and their origin: this data allows us to measure and improve the performance of the Site, to know which pages are most and least popular, to see how visitors interact with the Site. All this information collected by cookies is automatically aggregated and analyzed anonymously.

You have the option to refuse consent to the use of these cookies.

Social Media Cookies

These cookies are created by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. These cookies enable tracking of your internet browser activity on other sites and thus build a profile of your interests. These cookies are those that impact the content and advertisements that you see on other websites you visit.

You have the option to refuse consent to the use of these cookies.

Functional Cookies

These cookies enable the Site to provide enhanced functionality and personalization. They allow us to offer you additional services, either by ourselves or with the help of third parties who make their services available on our Site.

If you do not consent to these cookies, some or all of these services may not function.

Targeting Cookies

These cookies are set by our advertising partners.

They can be used by these companies to build a profile of your interests and show you relevant adverts on other sites.They do not directly store personal information and are based only on identifying your browser and device.

If you reject these cookies, you will experience less targeted advertising on sites other than the Site.

To disable cookies, except those strictly necessary, you can refuse them when you first access the Site using the refuse function on the appropriate banner or by clicking on the "x” of the banner itself. Alternatively, after previous acceptance, you can disable the Site’s cookies through the functions of the internet browser you have chosen for navigation. For further information, please refer to the support information for the most popular internet browsers, with the specification that this information is not verified by us as it relates to third-party services:

The list of cookies:

Cookie Domain Description Duration Type keep_alive nonnasilvi.com The keep_alive cookie is used to maintain a user's session active on a website, preventing automatic logout during periods of inactivity. 1 hour Necessary secure_customer_sig nonnasilvi.com Shopify sets this cookie to be used in connection with customer login. 1 year Necessary localization nonnasilvi.com The localization cookie stores user preferences for language and region to provide a personalized browsing experience. 1 year Necessary cart_currency nonnasilvi.com Shopify sets this cookie to remember the user's country of origin and populate the correct transaction currency. 14 days Necessary _tracking_consent .nonnasilvi.com Shopify sets this cookie to store a user's preferences if a merchant has set up privacy rules in the visitor's region. 1 year Necessary _cmp_a .nonnasilvi.com The _cmp_a cookie is typically used for consent management, helping websites comply with legal requirements by storing user consent preferences. 1 day Necessary _shopify_y .nonnasilvi.com This cookie is associated with Shopify's analytics suite. 1 year Analytics _shopify_s .nonnasilvi.com This cookie is associated with Shopify's analytics suite. 1 hour Analytics _orig_referrer .nonnasilvi.com Shopify sets this cookie to be used in connection with shopping cart. 14 days Analytics _landing_page .nonnasilvi.com Shopify installs this cookie to track landing pages. 14 days Analytics CLID www.clarity.ms Microsoft Clarity sets this cookie to store information about how visitors interact with the website. The cookie helps to provide an analysis report.The data collection includes the number of visitors, where they visit the website, and the pages visited. 1 year Analytics _shopify_sa_t .nonnasilvi.com Shopify sets this cookie for marketing & referrals. 1 hour Analytics _shopify_sa_p .nonnasilvi.com Shopify sets this cookie for marketing & referrals. 1 hour Analytics shopify_pay_redirect nonnasilvi.com Shopify sets this cookie to enable secure online payment and checkout. 1 hour Necessary __kla_id nonnasilvi.com Klaviyo sets this cookie to collect information on the visitor's behavior. This information is used for internal analytics and to optimize the website. It also registers if the visitor has subscribed to a news letter. 1 year 1 month 4 days Analytics _clck .nonnasilvi.com Microsoft Clarity sets this cookie to retain the browser's Clarity User ID and settings exclusive to that website. This guarantees that actions taken during subsequent visits to the same website will be linked to the same user ID. 1 year Analytics _clsk .nonnasilvi.com Microsoft Clarity sets this cookie to store and consolidate a user's pageviews into a single session recording. 1 day Analytics _fbp .nonnasilvi.com Facebook sets this cookie to store and track interactions. 3 months Analytics MUIDS .bing.com Microsoft Bing sets this cookie to identify unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. 1 year 24 days Advertisement MR .c.bing.com This cookie, set by Bing, is used to collect user information for analytics purposes. 7 days Analytics SRM_B .c.bing.com Used by Microsoft Advertising as a unique ID for visitors. 1 year 24 days Performance SM .c.clarity.ms Microsoft Clarity cookie set this cookie for synchronizing the MUID across Microsoft domains. session Analytics MUIDS .clarity.ms Microsoft Bing sets this cookie to identify unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. 1 year 24 days Advertisement MR .c.clarity.ms This cookie, set by Bing, is used to collect user information for analytics purposes. 7 days Analytics ANONCHK .c.clarity.ms The ANONCHK cookie, set by Bing, is used to store a user's session ID and also verify the clicks from ads on the Bing search engine. The cookie helps in reporting and personalization as well. 10 minutes Advertisement lastExternalReferrerTime grandmotherswood.how never Other klaviyoOnsite nonnasilvi.com never Other lastExternalReferrer nonnasilvi.com never Other getItem nonnasilvi.com never Other setItem nonnasilvi.com never Other removeItem nonnasilvi.com never Other clear nonnasilvi.com never Other length nonnasilvi.com never Other key nonnasilvi.com never Other user-location-data nonnasilvi.com session Other _cltk nonnasilvi.com session Other keyboardPagesVisitCount nonnasilvi.com session Other _pay_session shop.app Shopify sets this cookie to enable secure checkout and payment function on the website. session Necessary

8. Changes to this Policy

This information will be reviewed by the Data Controller on a regular basis and corrected in the event of changes to be communicated to the Interested Parties. Each change will be appropriately reported on the Site and in other ways, where appropriate. In any case, no new or different processing will be undertaken by the Data Controller without first having proceeded to inform the Interested Parties.