Privacy Policy-EN - Morena Giordani

Privacy Policy of www.ipnosiperlafelicita.it

This Application collects some Personal Data of its Users.

This document can be printed using the print command in the settings of any browser.

Data Controller

Sole proprietorship Morena Giordani, Patita Iva n° 03512711205

Data Controller’s email address: info@ipnosiperlafelicita.it

Types of Data Collected

Among the Personal Data collected by this Application, independently or through third parties, are: Tracking Tool; Usage Data; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); Data communicated during the use of the service; name; email.

Full details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before the Data is collected. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Applicazione.Se unless otherwise specified, all Data required by this Application is mandatory. If the User refuses to communicate with them, it may be impossible for this Application to provide the Service. In cases where this Application indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation. Users who have doubts about which Data are mandatory are encouraged to contact the Data Controller. Any use of Cookies – or other tracking tools – by this Application or by the owners of the third-party services used by this Application has the purpose of providing the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application.

Methods and place of processing of the Data collected

Processing methods

The Data Controller adopts the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of the Data Personali.Il processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Application (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may be requested at any time from the Data Controller.

Place

The Data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For more information, please contact the Data Controller.Your Personal Data may be transferred to a country other than the one in which you are located. To obtain further information on the place of processing, the User may refer to the section relating to the details on the processing of Personal Data.

Retention period

Unless otherwise stated in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained for a longer period due to any legal obligations or on the basis of Users’ consent.

Purpose of the Processing of the Data collected

The User’s Data is collected to allow the Owner to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activities, as well as for the following purposes: Statistics, Viewing content from external platforms, Tag Management, Advertising, Interaction with Live Chat Platforms, Remarketing and Behavioral Targeting, Data Collection and Online Survey Management, and Hosting and Backend Infrastructure.

To obtain detailed information on the purposes of the processing and the Personal Data processed for each purpose, the User may refer to the section “Details on the processing of Personal Data”.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Tag management
This type of service is functional to the centralized management of the tags or scripts used on this Application. The use of these services involves the flow of User Data through them and, where appropriate, their retention.

· Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Usage Data.
Place of processing: Ireland – Privacy Policy.
Management of data collection and online surveys
This type of service allows this Application to manage the creation, implementation, administration, distribution and analysis of online forms and surveys in order to collect, save and reuse the Data of the Users who respond. The Personal Data collected depends on the information requested and provided by Users in the corresponding online form.
These services may be integrated with a wide range of third-party services to allow the Data Controller to perform subsequent actions with the Data processed – for example, contact management, message sending, statistics, advertising and payment processing.

· Facebook Lead Ads (Facebook Ireland Ltd)

Facebook Lead Ads is an advertising and data collection service provided by Facebook Ireland Ltd that allows Users to be shown advertisements in the form of forms already pre-populated with Personal Data from their Facebook profiles, such as names and email addresses. Depending on the type of advertisement, Users may be required to provide additional information.
The submission of the form involves the collection and processing of this Data by the Data Controller by this privacy policy and only for the specific purpose indicated in the form and/or within this privacy policy, where applicable.
You may exercise your rights at any time, including the right to withdraw your consent to the processing of your Data, as specified in the section containing information on your rights in this privacy policy.
Personal Data processed: email; name.
Place of processing: Ireland – Privacy Policy – Opt-out.
Hosting and backend infrastructure
This type of service has the function of hosting Data and files that allow this Application to function, allow its distribution and provide a ready-to-use infrastructure to provide specific functionalities of this Application.
Some of the services listed below, if any, may operate on geographically distributed servers, making it difficult to determine the actual location where Personal Data is stored.

· Amazon Web Services (AWS) (Amazon Web Services, Inc.)

Amazon Web Services (AWS) is a hosting and backend service provided by Amazon Web Services, Inc.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy.
Interaction with live chat platforms
This type of service allows you to interact with the live chat platforms managed by third parties, directly from the pages of this Application, to be able to contact and be contacted by the support service of this Application. even if Users do not use the service, it collects Usage Data relating to the pages on which it is installed. In addition, live chat conversations may be recorded.

· Facebook Messenger Customer Chat (Facebook Ireland Ltd)

The Facebook Messenger Customer Chat is a service for interacting with the Facebook Messenger live chat platform, provided by Facebook Ireland Ltd
Personal Data processed: Data communicated during the use of the service; Usage Data; Tracking Tool.
Place of processing: Ireland – Privacy Policy.
Advertising
This type of service allows the use of the User’s Data for commercial communication purposes. These communications are shown on this Application in the form of banners and other forms of advertising, also about the User’s interests. This does not mean that all Personal Data is used for this purpose. Data and terms of use are set out below. Some of the services indicated below may use Trackers to identify the User or use the technique of behavioural retargeting, i.e. display personalized advertisements based on the User’s interests and behaviour, also detected outside of this Application. For more information on this, we suggest that you check the privacy policies of the respective services. Generally, services of this type offer the option to opt out of such tracking. In addition to any opt-out features provided by any of the services listed in this document, you can read more about how to opt out of interest-based advertising in the “How to opt out of interest-based advertising” section in this document.

· jsDelivr (jsdelivr.com)

jsDelivr is a traffic optimization and distribution service provided by jsdelivr.com.
Personal Data processed: Usage Data; Tracking Tool.
Place of processing: Poland – Privacy Policy.

· Facebook Audience Network (Facebook Ireland Ltd)

Facebook Audience Network is an advertising service provided by Facebook Ireland Ltd. For an understanding of Facebook’s use of data, please see Facebook’s data policy.
To enable the Facebook Audience Network to function, this Application may use certain identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for OS) or technologies similar to cookies. One of how Audience Network serves advertising messages to you is to use your advertising preferences. You can control the sharing of your advertising preferences within Facebook’s Ad settings.
You can opt out of certain Audience Network targeting features through your device settings. For example, you can change the advertising settings available for mobile devices, or follow the instructions applicable to Audience Network that may be included in this privacy policy.
Personal Data processed: Usage Data; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); Tracking Tool.
Place of processing: Ireland – Privacy Policy – Opt Out.

· Facebook Lookalike Audiences (Facebook Ireland Ltd)

Facebook Lookalike Audiences is an advertising and behavioural targeting service provided by Facebook Ireland Ltd that uses Data collected through Facebook’s Custom Audiences service to show advertisements to Users with similar behaviour to Users who are already on a Custom Audience list based on their previous use of this Application or their interaction with relevant content through Facebook’s Custom Audiences applications and services. Based on this Data, personalized ads will be shown to Users suggested by Facebook Lookalike Audiences.
Users may opt out of Facebook’s use of cookies for ad personalization by visiting this opt-out page.
Personal Data processed: Usage Data; Tracking Tool.
Place of processing: Ireland – Privacy Policy – Opt Out.
Remarketing and behavioral targeting
This type of service allows this Application and its partners to communicate, optimize and serve advertisements based on the User’s past use of this Application. This activity is facilitated by the tracking of Usage Data and the use of Trackers to collect information that is then transferred to partners who manage remarketing and behavioural targeting activities. Some services offer a remarketing option based on email address lists. In addition to the opt-out features offered by the services below, you may opt out by visiting the Network Advertising Initiative’s opt-out page.
Users may also opt out of certain advertising features through the corresponding device configuration options, such as mobile device advertising configuration options or generic advertising configuration.

· Facebook Remarketing (Facebook Ireland Ltd)

Facebook Remarketing is a remarketing and behavioural targeting service provided by Facebook Ireland Ltd that links the activity of this Application with the Facebook advertising network.
Personal Data processed: Usage Data; Tracking Tool.
Place of processing: Ireland – Privacy Policy – Opt Out.

· Facebook Custom Audiences (Facebook Ireland Ltd)

Facebook Custom Audiences is a remarketing and behavioural targeting service provided by Facebook Ireland Ltd that links the activity of this Application with the Facebook advertising network.
Users may opt out of the use of Facebook cookies for ad personalization by visiting this opt-out page.
Personal Data processed: email; Tracking Tool.
Place of processing: Ireland – Privacy Policy – Opt Out.

Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of the User’s behaviour.

· Google Analytics (Google Ireland Limited)

Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize the ads of its advertising network.
Personal Data processed: Usage Data; Tracking Tool.
Place of processing: Ireland – Privacy Policy – Opt Out.

· Advertising reporting capabilities in Google Analytics (Google Ireland Limited)

Google Analytics on this Application has enabled advertising reporting features, which collect additional information from the DoubleClick cookie (web activity) and device advertising IDs (application activity). This allows the Data Controller to analyze specific Data relating to the behaviour and interests of Users (Traffic Data and Ad Interaction Data by Users) and, if enabled, Demographic Data (information on age and gender).
Users may opt out of Google’s use of cookies by visiting Google’s [Ads Settings] (https://adssettings.google.com/authenticated).
Personal Data processed: unique identifiers of devices for advertising (Google Advertiser ID or IDFA identifier, for example); Tracking Tool; various types of Data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy – Opt Out.

· Facebook Ads Conversion Tracking (Facebook Pixel) (Facebook Ireland Ltd)

Facebook Ads Conversion Tracking (Facebook Pixel) is a statistics service provided by Facebook Ireland Ltd that links data from the Facebook ad network with actions taken within this Application. The Facebook pixel tracks conversions that can be attributed to Facebook, Instagram and Audience Network ads.
Personal Data processed: Usage Data; Tracking Tool.
Place of processing: Ireland – Privacy Policy.
Viewing content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Application and to interact with it. This type of service may still collect data about web traffic related to the pages where the service is installed, even when users are not using it.

· Google Fonts (Google Ireland Limited)

Google Fonts is a font-style display service operated by Google Ireland Limited that allows this Application to integrate such content into its pages.
Personal Data processed: Usage Data; various types of Data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy.

· Font Awesome (Fonticons, Inc. )

Font Awesome is a font style display service operated by Fonticons, Inc. that allows this Application to integrate such content into its pages.
Personal Data processed: Usage Data; Tracking Tool.
Place of processing: United States – Privacy Policy.

Information on how to opt out of interest-based advertising

In addition to any opt-out features provided by any of the services listed in this document, Users can read more about how to opt out of interest-based advertising in the appropriate section of the Cookie Policy.

Cookie Policy

This Application makes use of Tracking Tools. To find out more, Users can consult the Cookie Policy.

Additional information for users

Legal basis for the processing

The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be allowed to process Personal Data without the User’s consent or another of the legal bases specified below, until the User objects (“opt-out”) to such processing. However, this does not apply if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
the processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;
the processing is necessary to comply with a legal obligation to which the Data Controller is subject;
the processing is necessary for the performance of a task carried out in the public interest or for the exercise of official authority vested in the Data Controller;
the processing is necessary for the pursuit of the legitimate interest of the Data Controller or of third parties.

In any case, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.

Learn more about retention time

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of such contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the processing is based on the User’s consent, the Data Controller may retain the Personal Data for longer until such consent is withdrawn. In addition, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

User’s rights

Users may exercise certain rights concerning the Data processed by the Data Controller.

In particular, within the limits provided for by law, the User has the right to:

withdraw your consent at any time. The User may revoke the consent to the processing of his/her Personal Data previously expressed.
object to the processing of their Data. You may object to the processing of your Data when it is done on a legal basis other than consent.
access your Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
verify and ask for rectification. The User can verify the correctness of his/her Data and request that it be updated or corrected.
obtain the restriction of processing. You may request the restriction of the processing of your Data. In this case, the Data Controller will not process the Data for any other purpose than their storage.
obtain the erasure or removal of your Personal Data. The User may request the deletion of his/her Data by the Data Controller.
receive their Data or have them transferred to another Data Controller. The User has the right to receive his/her Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its unhindered transfer to another controller.
You may complain with the competent data protection supervisory authority or take legal action.

Users have the right to obtain information about the legal basis for the transfer of Data abroad, including to any international organization governed by international law or consisting of two or more countries, such as the UN, as well as about the security measures adopted by the Data Controller to protect their Data.

Details on the right to object

When Personal Data are processed in the public interest, in the exercise of official authority vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing on grounds related to their particular situation.

Users are reminded that, if their Data is processed for direct marketing purposes, they may object to the processing at any time, free of charge and without providing any reason. If Users object to processing for direct marketing purposes, Personal Data is no longer processed for such purposes. To find out whether the Data Controller processes Data for direct marketing purposes, Users may refer to the respective sections of this document.

How to exercise your rights

To exercise their rights, Users may address a request to the Data Controller’s contact details indicated in this document. The request can be filed free of charge and the Data Controller will respond as soon as possible, in any case within one month, providing the User with all the information required by law. Any rectification, erasure or restriction of processing will be communicated by the Data Controller to each of the recipients, if any, to whom the Personal Data has been transmitted, unless this proves impossible or involves a disproportionate effort. The Data Controller shall notify the User of these recipients if he/she requests it.

More information about the treatment

Defence in court

The User’s Personal Data may be used by the Data Controller in court or the preparatory stages of its possible establishment for the defence against abuses in the use of this Application or the related Services by the User. The User declares that he/she is aware that the Data Controller may be obliged to disclose the Data by order of public authorities.

Specific disclosures

At the User’s request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System Logs and Maintenance

For needs related to operation and maintenance, this Application and any third-party services used by it may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

Further information about the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Application and, if technically and legally feasible, by sending a notification to Users through one of the contact details in its possession. Please consult this page frequently, referring to the date of the last modification indicated at the bottom.

If the changes affect processing whose legal basis is consent, the Data Controller will collect the User’s consent again, if necessary.

Definitions and legal references

Personal Data (or Data)

Personal data is any information which, directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

This is the information collected automatically through this Application (including by third-party applications integrated into this Application), including the IP addresses or domain names of the computers used by the User who connects with this Application, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of the pages consulted, the parameters relating to the operating system and the User’s IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Interested

The natural person to whom the Personal Data relates.

Data Processor (or Data Processor)

The natural person, legal entity, public administration and any other entity that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller (or Data Controller)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the means adopted, including the security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This application

The hardware or software tool through which Users’ Personal Data is collected and processed.

Service

The Service provided by this Application as defined in the relevant terms (if any) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.

Cookie

Cookies are Tracking Tools that consist of small pieces of data stored within the User’s browser.

Tracking Tool

A Tracking Tool means any technology – e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting – which allows Users to be tracked, for example by collecting or saving information on the User’s device.

Legal References

Unless otherwise specified, this privacy policy applies exclusively to this Application.

Last modified: 1/11/2023