Data Controller

Ottica Aventino Snc – VAT number: IT04413911001 – Viale Aventino 7, 00153 – Rome (RM) – IT – Destination code: KRRH6B9

Data Controller email address: info@otticaventino.com

Types of Data Collected Among the Personal Data collected by this Website, either independently or through third parties, there are: Cookies, Usage Data, name, email, surname, and various types of Data.

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before the data collection.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website. Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequences on the availability or operation of the Service.

Users who have doubts about which Data are mandatory are encouraged to contact the Data Controller.

The possible use of Cookies – or other tracking tools – by this Website or by third-party service providers used by this Website, unless otherwise specified, is intended to provide the Service requested by the User, in addition to further purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website and guarantees to have the right to communicate or disseminate them, releasing the Data Controller from any liability towards third parties.

Mode and place of processing of collected data

Processing methods The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. An updated list of Data Processors can always be requested from the Data Controller.

Legal basis of processing The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, as long as the User does not object (“opt-out”) to such processing. However, this is not applicable if the processing of Personal Data is regulated by European legislation on the protection of Personal Data; processing is necessary for the performance of a contract with the User and/or for the performance of pre-contractual measures; processing is necessary to fulfill a legal obligation to which the Data Controller is subject; processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller; processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

In any case, the User can always request the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract, or necessary to conclude a contract.

Place The Data is processed at the operational offices of the Data Controller and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.

The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the location of the processing, the User can refer to the section relating to the details of the processing of Personal Data.

The User has the right to obtain information regarding the legal basis of the transfer of Data outside the European Union or to an international organization of public international law or constituted by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

The User can verify if one of the transfers just described takes place by examining the section of this document relating to the details of the processing of Personal Data or by requesting information from the Data Controller using the contact details provided in the opening section.

Retention period The Data is processed and stored for the time required by the purposes for which it was collected.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract is fully performed.

Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained until such interests are fulfilled. The User may obtain further information regarding the legitimate interests pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or an order from an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of such period, the right of access, erasure, rectification, and the right to data portability cannot be exercised anymore.

Purposes of processing collected data User Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Statistics, Interaction with social networks and external platforms, Advertising, Contacting the User, Managing contacts and sending messages, User database management, Affiliate marketing, RSS feed management, Payment management, Heat mapping and session recording, Hosting and backend infrastructure, Traffic optimization and distribution, Registration and authentication, Data transfer outside the EU, and Displaying content from external platforms.

For further information on the purposes of processing and on the Personal Data specifically relevant for each purpose, the User may refer to the relevant sections of this document.

Details on the processing of Personal Data Personal Data is collected for the following purposes and using the following services:

Affiliate marketing This type of service allows this Website to display advertisements for products or services offered by third parties. The ads can be displayed in the form of advertising links or in various graphic forms as banners. Clicks on the icon or banner published on this Website are tracked by the third-party services listed below and are shared with this Website. For more information on the data collected, please refer to the privacy policies of each service.

Amazon Affiliation (Amazon) Amazon Affiliation is an affiliate marketing service provided by Amazon.com Inc. Personal Data collected: Cookies and Usage Data.

Location of data processing: United States – Privacy Policy.

ReferralCandy (Anafore Pte. Ltd.) ReferralCandy is a commercial affiliate service provided by Anafore Pte. Ltd. Personal Data collected: last name, Cookies, Usage Data, email, and name.

Location of data processing: Singapore – Privacy Policy.

Contacting the User Contact form (this Website) By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind of request as indicated by the form’s header. Personal Data collected: email and name.

Mailing list or newsletter (this Website) By registering for the mailing list or newsletter, the User’s email address is automatically added to a list of contacts to whom email messages containing information, including commercial and promotional nature, relating to this Website may be transmitted. The User’s email address may also be added to this list as a result of registering for this Website or after making a purchase. Personal Data collected: email and name.

Contact Management and Sending Messages This type of service allows the Owner to manage a database of email contacts, phone contacts or any other contact information to communicate with the User. These services may also collect data concerning the date and time when the User viewed the message, as well as the User’s interaction with them, such as information on clicks on links inserted in the messages.

SendinBlue Email (SendinBlue SAS) SendinBlue is an address management and email message sending service provided by SendinBlue SAS. Personal Data collected: Cookies, Usage Data, and email.

Location of data processing: France – Privacy Policy.

User database management This type of service allows the Owner to build user profiles by starting from an email address, a name, or any other information that the User provides to this Website, as well as to track the User’s activities through statistical functionality. This Personal Data may also be matched with publicly available information about the User (such as profiles on social networks) and used to build private profiles that the Owner can view and use to improve this Website. Some of these services may also allow scheduled messages to be sent to the User, such as email messages based on specific actions taken on this Website.

SendinBlue Marketing Automation (SendinBlue SAS) SendinBlue is a User database management service provided by SendinBlue SAS. Personal Data collected: Cookies, Usage Data, and email.

Location of data processing: France – Privacy Policy.

RSS feed management This type of service allows for the management of RSS feeds and the distribution of their contents. Depending on the features of the service used, these services may also be used to insert advertisements within the contents and collect statistical data on them.

Feedburner (Google Inc.) Feedburner is an RSS feed management service provided by Google Inc. that allows for the collection of statistical data on the consultation of the contents and the integration of advertisements within them. Personal Data collected: Cookies and Usage Data.

Location of data processing: United States – Privacy Policy.

FeedPress (Beta Et Compagnie Sarl) FeedPress is an RSS feed management service provided by Beta Et Compagnie Sarl that allows for the collection of statistical data on the consultation of the contents. Personal Data collected: Usage Data.

Location of data processing: France – Privacy Policy.

Payment management Payment management services allow this Website to process payments via credit card, bank transfer, or other tools. The data used for payment is acquired directly by the payment service manager requested without being processed in any way by this Website. Some of these services may also allow scheduled messages to be sent to the User, such as email messages containing invoices or payment-related notifications.

PayPal (Paypal) PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments. Personal Data collected: various types of Data as specified by the privacy policy of the service.

Location of data processing: Refer to PayPal’s privacy policy – Privacy Policy.

Heat mapping and session recording Heat mapping services are used to identify which areas of a page are subject to cursor movement or mouse clicks in order to detect which ones attract the most interest. These services allow for the monitoring and analysis of traffic data and are used to track User behavior. Some of these services may record sessions and make them available for later viewing.

Hotjar Heat Maps & Recordings (Hotjar Ltd.) Hotjar is a heat mapping and session recording service provided by Hotjar Ltd. Hotjar respects generic “Do Not Track” headers. This means that the browser can indicate to the script not to collect any User data. This is a setting that is available in all major browsers. More information on opting out of Hotjar is available here. Personal Data collected: Cookies, Usage Data, and various types of Data as specified by the privacy policy of the service.

Location of data processing: Malta – Privacy Policy – Opt Out.

Hosting and backend infrastructure This type of service is intended to host Data and files that allow this Website to function, enable its distribution, and provide a ready-to-use infrastructure to deliver specific functionalities of this Website. Some of these services operate through servers geographically located in different places, making it difficult to determine the exact location where Personal Data is stored.

DigitalOcean (DigitalOcean Inc.) DigitalOcean is a hosting service provided by DigitalOcean Inc. Personal Data collected: various types of Data as specified by the privacy policy of the service.

Location of data processing: United States – Privacy Policy; United Kingdom – Privacy Policy. Subject to Privacy Shield.

Interaction with social networks and external platforms This type of service allows interactions with social networks or other external platforms directly from the pages of this Website. The interactions and information acquired by this Website are in any case subject to the User’s privacy settings for each social network. In the event that an interaction service with social networks is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed.

Facebook Like button and social widgets (Facebook, Inc.) The Facebook Like button and social widgets are interaction services with the Facebook social network, provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data.

Location of data processing: United States – Privacy Policy. Subject to Privacy Shield.

Twitter Tweet button and social widgets (Twitter, Inc.) The Twitter Tweet button and social widgets are interaction services with the Twitter social network, provided by Twitter, Inc. Personal Data collected: Cookies and Usage Data.

Location of data processing: United States – Privacy Policy. Subject to Privacy Shield.

LinkedIn social button and widgets (LinkedIn Corporation) The LinkedIn social button and widgets are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data collected: Cookies and Usage Data.

Location of data processing: United States – Privacy Policy.

PayPal button and widget (Paypal) The PayPal button and widget are interaction services with the PayPal platform, provided by PayPal Inc. Personal Data collected: Cookies and Usage Data.

Location of data processing: Consult the privacy policy of Paypal – Privacy Policy.

YouTube social button and widgets (Google Inc.) The YouTube social button and widgets are interaction services with the YouTube social network, provided by Google Inc. Personal Data collected: Usage Data.

Location of data processing: United States – Privacy Policy. Subject to Privacy Shield.

Traffic optimization and distribution This type of service allows this Website to distribute its content through servers located in different territories and optimize its performance. The Personal Data processed depends on the characteristics and mode of implementation of these services, which by their nature filter communications between this Website and the User’s browser. Given the distributed nature of this system, it is difficult to determine the locations to which the content, which may contain the User’s Personal Data, is transferred.

Cloudflare (Cloudflare) Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. The methods of integrating Cloudflare involve filtering all traffic to this Website, i.e., communications between this Website and the User’s browser, and also allow for the collection of statistical data on it. Personal Data collected: Cookies and various types of Data as specified by the privacy policy of the service.

Location of data processing: United States – Privacy Policy.

Advertising These services allow the use of user data for commercial communication purposes in various advertising forms, such as banners, also in relation to the user’s interests. This does not mean that all personal data are used for this purpose. Data and usage conditions are indicated below. Some of the services listed below may use Cookies to identify the User or use the behavioral retargeting technique, i.e., display personalized advertising based on the User’s interests and behavior, also detected outside of this Website. For more information on this, we suggest you check the respective service privacy policies. In addition to the opt-out options offered by the services listed below, the User can opt-out of receiving cookies related to a third-party service by visiting the Network Advertising Initiative opt-out page.

Google AdSense (Google Inc.) Google AdSense is an advertising service provided by Google Inc. This service uses the “Doubleclick” Cookie, which tracks the use of this Website and the User’s behavior in relation to advertisements, products, and services offered. The User can decide to disable the Doubleclick Cookie at any time: google.com/settings/ads/onweb/optout. Personal Data collected: Cookies and Usage Data.

Location of processing: United States – Privacy Policy – Opt Out. Subject to Privacy Shield.

Registration and authentication By registering or authenticating, the User allows the Application to identify them and give them access to dedicated services. Depending on what is described below, registration and authentication services may be provided with the help of third parties. If this happens, this application may access some data stored by the third-party service used for registration or identification.

Facebook Authentication (Facebook, Inc.) Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and linked to the Facebook social network. Personal Data collected: various types of Data as specified in the privacy policy of the service.

Location of processing: United States – Privacy Policy. Subject to Privacy Shield.

Linkedin OAuth (LinkedIn Corporation) LinkedIn OAuth is a registration and authentication service provided by LinkedIn Corporation and linked to the LinkedIn social network. Personal Data collected: various types of Data as specified in the privacy policy of the service.

Location of data processing: United States – Privacy Policy.

Statistics The services in this section allow the Data Controller to monitor and analyze traffic data and track User behavior.

Google Analytics with anonymized IP (Google Inc.) Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. This integration of Google Analytics makes your IP address anonymous. Anonymization works by shortening the IP address of the Users within the member states of the European Union or other countries party to the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google’s servers and shortened within the United States. Personal Data collected: Cookies and Usage Data.

Location of data processing: United States – Privacy Policy – Opt Out. Subject to the Privacy Shield.

Transfer of data outside the EU The Data Controller may transfer the Personal Data collected within the EU to third countries (i.e., all countries not belonging to the EU) only in accordance with a specific legal basis. Therefore, such Data transfers are carried out according to one of the legal bases described below.

The User can request information from the Data Controller regarding the applicable legal basis for each individual service.

Transfer of data from the EU and/or Switzerland to the United States based on the Privacy Shield (this Website) When this is the legal basis, the transfer of Personal Data from the EU or Switzerland to the United States is based on the Privacy Shield EU-US or Swiss-US agreement. In particular, Personal Data is transferred to subjects who have self-certified under the Privacy Shield framework and therefore guarantee an adequate level of protection of the transferred Data. The services affected by the Data transfer are listed in their respective sections of this document. Among them, those that adhere to the Privacy Shield can be identified by consulting their privacy policy or verifying their membership status in the official Privacy Shield list. User rights under the Privacy Shield are described in an updated form on the website of the US Department of Commerce. The transfer of Personal Data from the EU or Switzerland to the United States to subjects who are not (anymore) registered with the Privacy Shield is permissible only according to another valid legal basis. Users can request information from the Data Controller regarding these legal bases.

Personal Data collected: various types of Data.

Transfer of Data to countries with European standards (this website) When this is the legal basis, the transfer of Personal Data from the EU to third countries is based on an adequacy decision adopted by the European Commission. The European Commission adopts adequacy decisions with reference to individual third countries which it considers to provide a level of protection of Personal Data comparable to that provided by European legislation on the protection of Personal Data. Users can view the updated list of adequacy decisions on the European Commission’s website.

Personal Data collected: various types of Data.

Other legal basis for transferring Data to third countries (this website) When no other legal basis applies, Personal Data may be transferred from the EU to third countries only under one of the following conditions: the transfer is necessary for the performance of a contract between the User and the Owner or for pre-contractual measures taken at the User’s request; the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the User by the Owner and another natural or legal person; the transfer is necessary for reasons of public interest; the transfer is necessary to establish, exercise or defend a legal claim; the transfer is necessary to protect the vital interests of the data subject or of other persons, when the data subject is physically or legally incapable of giving consent. In such cases, the Owner will inform the User about the legal basis applicable to the transfer in question through this website.

Personal Data collected: various types of Data.

Transfer to third countries based on consent (this website) When this is the legal basis, the transfer of Personal Data from the EU to third countries only takes place when the User has expressly consented to such transfer after being informed about the risks due to the absence of an adequacy decision and the adequate guarantees adopted. In such cases, the Owner informs Users and obtains their consent through this website.

Personal Data collected: various types of Data.

Transfer of data to countries that guarantee European standards (this Website)

When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place based on an adequacy decision adopted by the European Commission. The European Commission adopts adequacy decisions concerning individual third countries that it considers to provide a level of protection for Personal Data comparable to that provided by European legislation on the protection of Personal Data. Users can view the updated list of adequacy decisions on the European Commission’s website. Personal Data collected: various types of Data.

Other legal basis for the transfer of data to third countries (this Website)

When no other legal basis applies, Personal Data may be transferred from the EU to third countries only under one of the following conditions:

• the transfer is necessary to perform a contract concluded between the User and the Data Controller or pre-contractual measures taken at the User’s request;
• the transfer is necessary to conclude or perform a contract concluded in the interest of the User by the Data Controller and another natural or legal person;
• the transfer is necessary for reasons of public interest;
• the transfer is necessary to establish, exercise or defend a legal claim;
• the transfer is necessary to protect the vital interests of the data subject or of other persons, where the data subject is physically or legally incapable of giving consent. In such cases, the Data Controller will inform the User of the legal basis applicable to the transfer in question through this Website. Personal Data collected: various types of Data.

Transfer to third countries based on standard contractual clauses (this Website)

When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place based on standard contractual clauses for the protection of Personal Data adopted by the European Commission. In such cases, the recipients of the Data have agreed to treat the Personal Data in compliance with the levels of protection required by the law. Users can request further information by contacting the Data Controller at the contact details provided in this document. Personal Data collected: various types of Data.

Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and to interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, the same may collect traffic data relating to the pages on which it is installed.

Google Fonts (Google Inc.)

Google Fonts is a font style visualization service managed by Google Inc. that allows this Website to integrate such content within its pages. Personal Data collected: Usage Data and various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy. Participant in the Privacy Shield.

Vimeo Video (Vimeo, LLC)

Vimeo is a video content visualization service managed by Vimeo, LLC that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy.

YouTube Video Widget (Google Inc.)

YouTube is a video content visualization service managed by Google Inc. that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy. Participant in the Privacy Shield.

YouTube Video Widget without cookies (Google Inc.)

YouTube is a video content visualization service managed by Google Inc. that allows this Website to integrate such content within its pages. This widget is set up so that YouTube does not save information and cookies regarding Users on this Website, unless they play the video. Personal Data collected: Usage Data.

Location of the processing: United States – Privacy Policy. Subject adhering to Privacy Shield.

Further information on Personal Data Sale of goods and services online The Personal Data collected is used to provide services to the User or to sell products, including payment and any delivery. The Personal Data collected to complete the payment may be related to the credit card, the bank account used for the transfer, or other payment instruments provided. The payment data collected by this Website depends on the payment system used. User rights Users may exercise certain rights with reference to the Data processed by the Data Controller.

In particular, the User has the right to:

withdraw consent at any time. The User can withdraw consent to the processing of their Personal Data previously expressed. object to processing of their Data. Users can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are provided in the section below. access their Data. Users have the right to obtain information on the Data processed by the Controller, on certain aspects of the processing and to receive a copy of the Data processed. verify and ask for rectification. Users can verify the correctness of their Data and ask for it to be updated or corrected. obtain the limitation of processing. When certain conditions are met, Users can request the limitation of the processing of their Data. In this case, the Controller will not process the Data for any other purpose than their storage. obtain the erasure or removal of their Personal Data. When certain conditions are met, Users can request the erasure of their Data by the Controller. receive their Data or have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable when the Data is processed by automated means and the processing is based on the User’s consent, on a contract which the User is part of or on contractual measures connected to it. lodge a complaint. Users can lodge a complaint with the competent data protection authority or bring an action before the competent court. Details on the right to object When Personal Data is processed in the public interest, in the exercise of an official authority vested in the Controller or for the purposes of the legitimate interests pursued by the Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are reminded that if their Data is processed for direct marketing purposes, they can object to the processing without providing any reasons. To find out if the Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise your rights To exercise their rights, Users may address a request to the contact details of the Controller indicated in this document. Requests are processed free of charge and handled by the Controller as soon as possible, in any case within one month.

Further information on processing Legal defense The User’s Personal Data may be used by the Controller in court or in the stages leading to possible legal action arising from improper use of this Website or the related Services. The User declares to be aware that the Controller may be required to disclose the Data at the request of public authorities.

Specific information Upon request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning specific Services, or the collection and processing of Personal Data.

System logs and maintenance For operation and maintenance purposes, this Website and any third-party services it uses may collect system logs, which are files that record the interactions and may also contain Personal Data, such as the User’s IP address.

Information not included in this policy Additional information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information provided in this document.

Response to “Do Not Track” requests This website does not support “Do Not Track” requests. To find out if any third-party services used by this website support “Do Not Track” requests, Users are advised to consult the respective privacy policies.

Changes to this privacy policy The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this website, and, if technically and legally feasible, by sending a notification to Users through one of the contact information in the Data Controller’s possession. Therefore, Users are advised to check this page regularly, referring to the date of the last modification indicated at the bottom.

If changes affect processing based on consent, the Data Controller will collect the User’s consent again if necessary.

Definitions and legal references Personal Data (or Data) Any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data Information collected automatically through this website (including third-party applications integrated into this website), which may include: the IP addresses or domain names of the computers used by the Users who connect with this website, the URI addresses (Uniform Resource Identifier), the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (such as the time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User’s IT environment.

User

The individual using this website who, unless otherwise specified, coincides with the Data Subject.

Data Subject The natural person to whom the Personal Data refers.

Data Controller (or Controller) The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or Application) The hardware or software tool by which the Personal Data of Users is collected and processed.

Service The service provided by this Website as described in the relative terms (if available) on this site/application.

European Union (or EU) Unless otherwise specified, any reference to the European Union contained in this document shall be extended to all current member states of the European Union and the European Economic Area.

Cookie A small piece of data stored on the User’s device.

Legal references This privacy notice is drafted on the basis of multiple legal systems, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy notice applies solely to this Website.