Privacy Policy

This page describes how the site is managed with regard to the processing of the personal data of the users who consult it. Following consultation of this site, data relating to identified or identifiable persons may be processed. 

This notice is provided pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR 2016/679), to those who interact with web services of PvrCom S.a.s. di Casarini Barbara (hereinafter also only PrvCom), for the protection of personal data accessible by computer from the address: www.ecobioshopping.it

This information is provided only for the PvrCom website and not for any other websites which the user may visit via links.

Place

The Personal Data related to the services of this website are processed at the Company’s operational headquarters and in any other place where the parties involved in the processing are located and are handled only by specifically appointed personnel. All data pertaining to the website, as well as back-up copies thereof, are stored on servers hosted in data centres within the European Union and compliant with current EU regulations. We do not exclude that the same data may be processed or stored in countries outside the European Union, if an adequate level of protection is guaranteed or in the presence of a specific adequacy decision of the European Commission regarding the recipient country or if adequate contractual guarantees are provided by the foreign Data Controllers and Managers involved, including standard data protection clauses (Art. 46, para. 2, lett. c and lett. d of the EU Data Protection Regulation 2016/679).

Storage periods 

Data are processed for the time necessary to carry out the service requested by the user, or required by the purposes described in this document and, in any case, within the terms of the law. 

With specific reference to the profiling activity, this will be limited to a period of 5 years starting from the manifestation of consent by the interested party. The user may always request the interruption of the processing or the deletion of data.

Purposes

The personal data collected will be processed for a variety of purposes, which are described in the individual paragraphs of this information notice. We invite all those who may have doubts regarding the purposes pursued by the company, to contact the Data Controller at the contact details indicated at the bottom of the page.

Commenting on content

When Users leave comments on the Site, we collect the data shown in the comment form in addition to the visitor’s IP address and browser user agent string to facilitate spam detection. Depending on the settings decided by the Owner, Users may also leave the comment anonymously. Users are responsible for the content of their comments. In the event that a commenting service provided by third parties is installed, it is possible that, even if Users do not use the commenting service, it may collect traffic data relating to the pages where the commenting service is installed.

Lawfulness of Processing: the personal data entered will be used to fulfil an explicit request by the data subject; Art. 6 paragraph 1 letter B, EU Regulation 2016/679.

Directly managed comment system (This Website)

This Website has its own content commenting system.

Personal Data collected: surname, cookie, usage data, email, first name and username.

Contacting the User

Lawfulness of Processing: the personal data entered will be used to follow up an explicit request from the data subject for contact activities / newsletter subscription, mailing list or SMS list; Art. 6 paragraph 1 letter B, EU Regulation 2016/679.

Contact form

The user, by filling in the contact form with his/her data, is aware that such data will be used to respond to requests for information, quotations, or any other nature indicated in the header of the form.

Personal data collected: Name, Surname, Email, Address, Telephone number and any other type of data as specified by the privacy policy of the service.

Contact by telephone (this Website)

Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Web Site, as well as to fulfil support requests.

Personal data collected: telephone number.

Newsletter, Mailing List or SMS list

By registering for the Newsletter, Mailing List or SMS list service, the user’s e-mail address and/or telephone number will automatically be added to a contact list to which e-mail and/or SMS messages containing information, including of a commercial and promotional nature, relating to this site may be sent. The user’s e-mail address may be added to this list following a purchase made by the interested party on the website.

Personal data collected: Name, Surname, Email, Address, Telephone number and any other type of data as specified by the service’s privacy policy.

Payment management

Payment processing services enable this Website to process payments by credit card, bank transfer or other means. The data used for payment are acquired directly from the operator of the payment service requested without being processed in any way by this Web Site.

Some of these services may also allow for the scheduled sending of messages to the User, such as emails containing invoices or payment notifications.

Lawfulness of Processing: the personal data entered will be used to fulfil the legal or regulatory obligations applicable to the processing and storage of payment data, including applicable anti-money laundering and identity verification obligations, Art. 6 paragraph 1 letter C, EU Regulation 2016/679.

PayPal

PayPal is a payment service provided by PayPal Inc., which enables the User to make online payments.

Personal Data collected: various types of Data as specified by the privacy policy of the service.

Nexi XPay

Nexi XPay is a payment service provided by Nexi Payments SpA.

Personal Data processed: various types of Data as specified by the privacy policy of the service.

Place of processing: Italy – Privacy Policy.

Tag management

This type of service is functional for the centralised management of tags or scripts used on this Website.

The use of these services involves the flow of the User’s Data through them and, where appropriate, their retention.

Google Tag Manager (Google LLC, Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google LLC or Google Ireland Limited, depending on how the Owner manages the processing of the Data.

Personal Data Collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

Managing addresses and sending email messages

This type of service enables the management of a database of email contacts, telephone contacts or contacts of any other type used to communicate with the User.

These services may also allow the collection of data relating to the date and time the User views the messages, as well as the User’s interaction with them, such as information on clicks on links in the messages.

Lawfulness of Processing: the data subject has consented to the processing art. 6 paragraph 1 letter A, EU Regulation 2016/679.

Amazon Simple Email Service (Amazon)

Amazon Simple Email Service is an address management and email messaging service provided by Amazon.com Inc.

Personal data collected: email.

Place of processing: United States – Privacy Policy.

Interaction with social networks and external platforms

These types of services allow for interactions with social networks, or other external platforms, directly from the pages of this Website.

The interactions and information acquired by this Website are in each case subject to the User’s privacy settings relating to each social network.

If a social network interaction service is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages where it is installed.

The interactions and information acquired by this Website are in any case subject to the User’s privacy settings relating to each social network.

Lawfulness of Processing: the data subject has given consent to the processing art. 6 paragraph 1 letter A, EU Regulation 2016/679.

Linkedin social button and widgets (LinkedIn Corporation)

LinkedIn social button and widgets are services for interaction with the Linkedin social network, provided by LinkedIn Corporation.

Personal Data Collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Storage Duration:

– AnalyticsSyncHistory: 1 month

– JSESSIONID: session duration

– UserMatchHistory: 1 month

– bcookie: 1 year

– bscookie: 1 year

– lang: session duration

– lidc: 1 day

– lissc: 1 year

– lms_ads: 1 month

– lms_analytics: 1 month

Twitter Tweet button and social widgets (Twitter, Inc.)

The Tweet button and Twitter social widgets are services for interaction with the social network Twitter, provided by Twitter, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Storage duration:

– personalisation_id: 2 years

Pinterest “Pin it” button and social widgets (Pinterest)

The Pinterest “Pin it” button and social widgets are services for interacting with the Pinterest platform, provided by Pinterest Inc.

Personal data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Storage Duration:

– _pin_unauth: 1 year

– _pinterest_ct_ua: Session duration

Facebook Like button and social widgets (Facebook, Inc.)

The Facebook “Like” button and social widgets are services for interaction with the social network Facebook, provided by Facebook, Inc.

Personal data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Storage duration:

– _fbp: 3 months

Location-based interactions

Geolocation (this Website)

This Web Site may collect, use and share Data related to the User’s geographic location in order to provide location-based services.

Most browsers and devices provide by default tools to deny geographical tracking. If the User has expressly authorised this possibility, this Website may receive information on his/her actual geographical location.

Lawfulness of Processing: the data subject has given consent to the processing art. 6 paragraph 1 letter A, EU Regulation 2016/679.

Personal Data collected: geographical location.

Protection against SPAM

This type of services analyses the traffic of this Website, potentially containing Users’ Personal Data, in order to filter it from parts of traffic, messages and contents recognised as SPAM.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: USA – Privacy Policy.

Google reCAPTCHA (Google LLC, Google Ireland Limited)

Google reCAPTCHA is a SPAM protection service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data.

Use of the reCAPTCHA system is subject to Google’s privacy policy and terms of use.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

Storage Duration:

– _GRECAPTCHA: session duration

– rc::a: undefined

– rc::b: session duration

– rc::c: session duration

Registration and authentication

By registering or authenticating the User allows the Application to identify him/her and give him/her access to dedicated services.

Depending on what is indicated below, the registration and authentication services may be provided with the help of third parties. If this occurs, this application may access some Data stored by the third party service used for registration or identification.

Lawfulness of Processing: the data subject has given consent to the processing art. 6 paragraph 1 letter A, EU Regulation 2016/679.

Direct Registration (This Website)

The User registers by filling in the registration form and directly providing this Website with his/her Personal Data.

Personal Data collected: postcode, city, tax code, surname, email, address, country, name, fax number, telephone number, VAT number, password, profession, province, company name, gender, state and username.

Remarketing and behavioral targeting

This type of service allows this Website and its partners to communicate, optimise and serve advertisements based on the User’s past use of this Website.

This activity is carried out through the tracking of Usage Data and the use of Cookies, information that is transferred to the partners to which the remarketing and behavioral targeting activity is linked.

In addition to the opt-out possibilities offered by the services below, the User may opt out of receiving cookies from a third-party service by visiting the Network Advertising Initiative opt-out page.

Lawfulness of Processing: the data subject has given consent to the processing art. 6 paragraph 1 letter A, EU Regulation 2016/679.

Facebook Custom Audience (Facebook, Inc.)

Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of this Website with the advertising network Facebook.

Personal data collected: Cookies and email.

Place of processing: United States – Privacy Policy – Opt Out.

Storage duration:

– _fbp: 3 months

Remarketing Google Ads (Google LLC, Google Ireland Limited)

Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which links the activity of this Website with the Google Ads advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Opt Out.

Storage Duration:

– AID: 2 years

– ANID: 2 years

– Conversion: 3 months

– DSID: 14 days

– FCNEC: 1 year

– FLC: 10 seconds

– FPAU: 3 months

– FPGCLAW: 3 months

– FPGCLDC: 3 months

– FPGCLGB: 3 months

– IDE: 2 years

– NID: 6 months

– RUL: 1 year

– TAID: 14 days

– __gads: 2 years

– __gsas: 2 years

– _gac_: 3 months

– _gac_gb_: 3 months

– _gcl_au: 3 months

– _gcl_aw: 3 months

– _gcl_dc: 3 months

– _gcl_gb: 3 months

– _gcl_gf: 3 months

– _gcl_ha: 3 months

– id: 2 years

– test_cookie: 15 minutes

Remarketing with Google Analytics (Google LLC, Google Ireland Limited)

Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which links the tracking activities performed by Google Analytics and its Cookies with the Google Ads advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Opt Out.

Storage duration:

– test_cookie: 15 minutes

– IDE: 2 years

– _gcl_*: 3 months

Statistics

The services contained in this section allow the Data Controller to monitor and analyse traffic data and serve to keep track of the User’s behaviour.

Lawfulness of Processing: the data subject has given consent to the processing art. 6 paragraph 1 letter A, EU Regulation 2016/679.

Google Analytics (Google LLC, Google Ireland Limited)

Google Analytics is a web analytics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data (“Google”). Google uses the Personal Data collected in order to track and examine the use of this Website, compile reports and share them with other services developed by Google.

Google may use the Personal Data to contextualise and personalise ads on its advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – Opt Out.

Storage Duration:

– AMP_TOKEN: 1 hour

– _ga: 2 years

– _gac*: 3 months

– _gat: 1 minute

– _gid: 1 day

Directly collected statistics (This Website)

This Website uses an internal statistics system, which does not involve third parties.

Personal data collected: Cookies and Usage Data.

Storage duration:

– awstats: not defined

– webalizer: not defined

Conversion tracking by Google Ads (Google LLC, Google Ireland Limited)

Google Ads conversion monitoring is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which links the data from the Google Ads ad network with the actions performed within this Website.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Storage Duration:

– IDE: 2 years

– test_cookie: 15 minutes

Google Workspace (Google LLC, Google Ireland Limited)

Google Workspace is an integrated set of cloud-based productivity, collaboration and storage services provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data. Gmail or other Google Workspace services are not analysed by Google for advertising purposes. Furthermore, Google does not collect or use data within these services for advertising purposes in any other way.

Personal data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Displaying content from external platforms

This type of service makes it possible to display content hosted on external platforms directly from the pages of this Website and to interact with them.

If a service of this type is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages where it is installed.

Google Fonts (Google LLC, Google Ireland Limited)

Google Fonts is a font style display service operated by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which allows this Website to integrate such content within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Font Awesome (Fonticons, Inc. )

Font Awesome is a font style display service operated by Fonticons, Inc. that allows this Website to integrate such content within its pages.

Personal Data collected: Tracking Tools.

Place of processing: USA – Privacy Policy.

Google Maps Widget (Google LLC, Google Ireland Limited)

Google Maps is a map display service operated by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which enables this Website to integrate such content within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

YouTube Video Widget (Google LLC, Google Ireland Limited)

YouTube is a video content display service operated by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which allows this Website to integrate such content within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Storage Duration:

– PREF: 8 months

– VISITOR_INFO1_LIVE: 8 months

– YSC: Session duration

Vimeo Video (Vimeo, LLC)

Vimeo is a video content viewing service operated by Vimeo, LLC that allows this Website to embed such content within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Storage duration:

– player: 1 year

– vuid: 2 years

Instagram widget (Instagram, Inc.)

Instagram is an image display service operated by Instagram, Inc. that allows this Website to integrate such content within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Google Site Search (Google LLC, Google Ireland Limited)

Google Site Search is a search engine embedding service operated by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, which allows this Website to embed such content within its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

Fonts.com Web Fonts (Monotype Imaging Holdings Inc.)

Fonts.com Web Fonts is a font style display service operated by Monotype Imaging Holdings Inc. that allows this Web Site to integrate such content within its pages.

Personal Data collected: Usage Data and various types of Data as specified by the privacy policy of the service.

Place of processing: United States – Privacy Policy.

Further information on Personal Data

Online sale of goods and services

The Personal Data collected is used for the provision of services to the User or for the sale of products, including payment and possible delivery. The Personal Data collected to finalise payment may be that relating to the credit card, bank account used for the transfer or other payment instruments provided. The Payment Data collected by this Website depends on the payment system used.

Lawfulness of Processing: the personal data entered will be used to fulfil the contractual performance between the parties and to comply with legal or regulatory obligations, Art. 6 paragraph 1 letter B and C, EU Regulation 2016/679.

________________________________________

Profiling of commercial interests

In order to prepare targeted promotional campaigns and provide a tailor-made service to users who browse and purchase products via the Controller’s websites, the personal data collected may be processed to profile the user and enable PrvCom to address targeted advertising campaigns to the user in line with the tastes and interests expressed when purchasing products or browsing the website.  

Lawfulness of the processing: the personal data entered will be processed after obtaining the consent of the data subject, Art. 6 para. 1 letter A, EU Regulation 2016/679.

Cookie Policy

Definition and purpose

Cookies are small pieces of data, stored in text files, that are stored on your computer or other device when websites are loaded into a browser. By default, almost all web browsers are set to automatically accept cookies. They are widely used to ‘remember’ you and your preferences, either for a single visit (using a ‘session cookie’) or for multiple repeated visits (using a ‘persistent cookie’). They ensure a consistent and efficient experience for visitors and perform essential functions such as allowing users to register and stay logged in.

Cookies can be set by the website you are visiting (called ‘proprietary cookies’) or by third parties, i.e. by a website other than the one you are visiting, such as those who provide content or provide advertising or analysis services on the website (‘third-party cookies’). This is because on each site there may be elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers other than that of the site visited. Both websites and HTML e-mails may also contain other tracking technologies such as ‘web beacons’ or ‘pixels’. These are usually small, transparent images that provide statistics, for purposes similar to those of cookies. They are often used in combination with cookies, although they are not stored on your computer in the same way. Consequently, if you disable cookies, web beacons may still load, but their functionality will be limited.

Types of Cookies

Technical’ cookies

These are cookies that are used for navigation or to provide a service requested by the user. They are not used for any other purpose and are normally installed directly by the website owner. Without the use of such cookies, certain operations could not be carried out or would be more complex and/or less secure, since the cookies are indispensable for carrying out and maintaining user identification during the session.

Technical cookies can be further divided into:

– Browsing or session cookies, which ensure normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas);

– Analytics cookies, which are assimilated to technical cookies where they are used directly by the website operator to collect information, in aggregate form, on the number of users and how they visit the website;

– Functionality cookies, which allow the user to navigate according to a set of selected criteria (e.g. language, products selected for purchase) in order to improve the service provided to the user.

Profiling’ cookies

These are the cookies used to track the user’s navigation on the web and create profiles on their tastes, habits, choices, etc. With these cookies, advertising messages can be sent to the user’s terminal in line with the preferences already expressed by the same user when browsing online.

Third-party cookies

It may happen that a web page contains cookies coming from other sites and contained in various elements hosted on the page itself, such as advertising banners, images, videos, etc.. We speak, in these cases, of so-called third-party cookies.

Thus, the cookies that you download to your PC, smartphone and tablet can also be read by other parties, other than those who manage the web pages you visit. For detailed information on this, please consult the privacy policies of the services listed.

Use of Cookies by this Site

This site uses technical cookies for navigation, analytics and functionality.

Consent to the use of cookies

When you visit the website for the first time, we will display a notice explaining cookies. By providing consent you give us permission to use the categories of cookies and plugins as described in this statement.

You can disable cookies (except the mandatory ones) through your browser, but please note that our website may no longer function properly.

Managing and Deleting Cookies

In addition to what is set out in this document, please note that Users may wish to restrict the use of cookies or prevent them from being set at all. Most browsers allow you to control the behaviour of cookies, e.g. the length of time they are stored, through built-in features or by using third party plug-ins. Through your browser preferences you can also delete cookies that have been installed in the past, including the cookie in which your consent to the installation of cookies by this site is stored. If you disable cookies, please note that some of the features of our service may not function properly. You can find information on how to manage cookies in your browser at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Windows Explorer. To find out more about how to manage and delete cookies, visit aboutcookies.org. For more details on how your web browsing activity is used for interest-based advertising visit youronlinechoices.eu (EU-based) or optout.aboutads.info (US-based). On a mobile device, you may also change the settings to limit ad tracking. You can deactivate Google Analytics by installing the Google opt-out browser add-on.

In the case of services provided by third parties, users may also exercise their right to object to tracking by informing themselves via the third party’s privacy policy, via the opt-out link if explicitly provided or by contacting the third party directly.

Ownership of the processing of Cookies

Since the installation of Cookies and other tracking systems operated by third parties through the services used within this website cannot be technically controlled by ecobioshopping.it, any specific reference to Cookies and tracking systems installed by third parties is to be considered indicative. For complete information, please consult the privacy policy of any third-party services listed in this document.

Considering the objective complexity connected to the identification of technologies based on Cookies and their very close integration with the functioning of the web, the user is invited to contact ecobioshopping.it should he/she wish to receive any further information on the use of Cookies themselves and on any use of the same – e.g. by third parties – carried out through this website.

Rights of the data subject 

At any time, you may exercise, pursuant to Articles 15-22 of GDPR 2016/679, the right to:

– request confirmation of the existence or otherwise of your personal data; 

– obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the storage period 

– obtain the rectification and erasure of data

– obtain the restriction of processing;

– obtain the portability of the data, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance 

– object to the processing at any time and also in the case of processing for direct marketing purposes; 

– object to an automated decision-making process concerning natural persons, including profiling.

Data Controller, Co-Processor, Data Processor and DPO

The Data Controller is PrvCom S.a.s. di Casarini Barbara, with registered office in Via Martiri di Cervarolo 59 – 42122 – Reggio Emilia – tel. +39 0522 430533, E-mail: info@prvcom.it; the Co-Processor is Beemark srl, with registered office in Largo Marco Gerra, 3 – 42124 – Reggio Emilia – E-mail: info@ecobiobenessere.it.

The list of Data Processors, appointed pursuant to Art. 28 GDPR, is kept at the Data Controller’s registered office.

A DPO has not been appointed.