Cookies Policy
For your convenience, we have provided a translation of this page. This translation is for informational purposes only, and the definitive version of this page is the Italian version.
Cookies policy provided pursuant to art. 13 of the reg. (EU) n. 2016/679 [https://www.bonjourlavie.it/]
Dear Navigator (physical subject), Joy Cosmetics s.r.l., as data controller (hereinafter, the Data Controller), intends to process the personal data concerning you, as an interested party, collected from you within the aforementioned website - and, in particular, through first-party cookies - for the processing purposes indicated below, therefore you are required to provide the following information, pursuant to art. 13, pp. 1 and 2 of the regulation. (EU) n. 2016/679, entitled 'General Data Protection Regulation' (hereinafter, the R.G.P.D.):
Identity and contact details of the data controller of your personal data: Joy Cosmetics s.r.l., located in via Andrea Mattiazzo, 1 - Ponzano Veneto (TV), fraz. Ponzano, 31050 and reachable by telephone at ‘+39 348 576 6313’ and/or by e-mail at ‘compliance@bonjourlavie.it’.
----
Please note:
1) The term ‘data controller’ refers to the “(...) legal person (...) who, individually or together with others,
determines the purposes and means of the processing of personal data (...);” (art. 4, n. 7) of the R.G.P.D.).
----
I. Installation of the (technical) navigation cookies ‘csaas_referrer’, ‘csaas_user_id’, ‘keep_alive’, ‘receive-cookie-deprecation’, ‘secure_customer_sig’ and ‘shopify_pay_redirect’ in your browser:
I.a) Purpose of the processing of your personal data:
the protection of the general usability of your website -> [1.A];
the protection of your interests in extrajudicial or judicial proceedings -> [1.B];
compliance with the relevant legal obligations regarding the protection of personal data -> [2].
I.b) Related legal bases used in the processing of your personal data:
[1.A]: the need of the Data Controller to pursue its own legitimate interest;
[1.B]: the need of the Data Controller to pursue its own further legitimate interest;
[2]: the need for the Data Controller to comply with legal obligations to which it is subject.
I.c) Related legitimate interests pursued in the processing of your personal data:
[1.A]: the general protection of its business activity carried out through its website;
[1.B]: the possible protection of its economic interests in extrajudicial or judicial proceedings.
II) Recipients involved in the processing of your personal data:
[1.A]: with regard to all the aforementioned navigation cookies, on the one hand, the sole administrator (general management area) of the Data Controller, in the capacity of authorised data processor and, on the other, the hosting assistant (website), in the capacity of data controller;
[1.B]: with regard to all the aforementioned navigation cookies, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, - where applicable
- the hosting assistant (e-mail), - where applicable - the hosting assistant (certified e-mail) and - where applicable - the lawyer(s) specifically selected, in their capacity as data controllers;
[2]: with regard to all the aforementioned navigation cookies, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the hosting assistant (website), - where applicable - the hosting assistant (e-mail), - where applicable - the hosting assistant (certified e-mail) and - where applicable - the lawyer(s) specifically selected, in their capacity as data controllers.
----
Please note:
1) The term ‘data controller’ refers to “(...) a natural or legal person (...) who processes personal data on behalf of the data controller;” (art. 4, no. 8) of the GDPR).
----
III) Retention periods observed in the processing of your personal data:
[1.A], [1.B] and [2]:
as regards the navigation cookie ‘csaas_referrer’, 7 minutes starting from the beginning of your browsing session period;
as regards the navigation cookies ‘csaas_user_id’ and ‘secure_customer_sig’, 365 days (1 year) starting from the beginning of your browsing session period;
as regards the navigation cookie ‘keep_alive’, 30 minutes (0.5 hours) starting from the beginning of your browsing session period;
as regards the navigation cookie ‘receive-cookie-deprecation’, coinciding with your browsing session period;
as regards the ‘shopify_pay_redirect’ navigation cookie, 60 minutes (1 hour) starting from the beginning
of your browsing session period.
IV.a) Your rights that you can exercise as an interested party:
access to your personal data processed, pursuant to art. 15 of the GDPR;
rectification of your personal data processed, pursuant to art. 16 of the GDPR;
erasure of your personal data processed, pursuant to art. 17 of the GDPR, in the event of:
• your detection of the subsequent lack of need for the Data Controller to process your personal data for
one or more of the processing purposes indicated in “Purposes of the processing of your personal data”;
• your opposition to the processing of your personal data processed - pursuant to art. 21, p. 1 of the GDPR. - for [1.A] and/or [1.B], in the absence of the simultaneous legitimate and prevailing need of the Data Controller to continue such processing;
• your detection of the original or subsequent lack of lawfulness of the processing of your personal data processed;
• your detection of the subsequent need of the Data Controller to fulfill legal obligations to which the same is subject;
limitation of the processing of your personal data processed, pursuant to art. 18 of the GDPR, in the event of:
• your detection of the original or subsequent lack of accuracy of your personal data processed, during the verification of the same by the Data Controller;
• your detection of the original or subsequent lack of lawfulness of the processing of your personal data processed, in the presence of your subsequent objection to the erasure of the same;
• your detection of the subsequent absence of the need of the Data Controller to process your personal data for one or more of the processing purposes indicated in “Purposes of the processing of your personal data”, in the presence of your subsequent further detection of the presence of your need to process them to ascertain, exercise or defend a right in court;
• your opposition to the processing of your personal data processed - pursuant to art. 21, p. 1 of the GDPR - for [1.A] and/or [1.B], during the ascertainment of the presence of the simultaneous legitimate and prevailing need of the Data Controller to continue such processing by the same;
opposition to the processing of your personal data processed, pursuant to art. 21, p. 1 of the GDPR, as regards
:
• your personal data processed for [1.A];
• your personal data processed for [1.B].
IV.b) Your right (exercisable as Data Subject) to lodge a complaint with
a competent Supervisory Authority:
In addition to being able to lodge a judicial appeal with the competent judicial Authority, pursuant to art. 79, p. 1 of the GDPR, you can lodge a complaint with the Italian Supervisory Authority (Guarantor for the protection of personal data) - at ‘https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524’ - or with the national Supervisory Authority operating within the territory of the European Union State in which you reside and/or work, qualified in any case as a competent Supervisory Authority, pursuant to art. 77, p. 1 of the GDPR, in the event of your detection of the original or subsequent presence of a violation of the GDPR. during the processing of your personal data for one or more purposes of the processing indicated in “Purposes of the processing of your personal data”.
) Nature of the communication preparatory to the processing of your personal data:
[1.A]: neither pre-contractual obligation nor contractual obligation nor legal obligation, but the need of the Data Controller to effectively carry out the protection of the general usability of its website.
II. Installation in your browser of the (technical) cookies of the function ‘_cmp_a’, ‘_tracking_consent’, ‘cart_currency’, ‘CookieConsent’, ‘locale_bar_accepted’ and ‘localization’:
I.a) Purpose of the processing of your personal data:
the protection of the particular usability of your website -> [1.A];
the protection of your interests in extrajudicial or judicial proceedings -> [1.B];
the fulfillment of the relevant legal obligations regarding the protection of personal data -> [2].
I.b) Related legal bases used in the processing of your personal data:
[1.A]: the need of the Data Controller to pursue its own legitimate interest;
[1.B]: the need of the Data Controller to pursue its own further legitimate interest;
[2]: the need of the Data Controller to fulfill legal obligations to which it is subject.
I.c) Related legitimate interests pursued in the processing of your personal data:
[1.A]: the particular protection of your business activity carried out through your website;
[1.B]: the possible protection of one's economic interests in extrajudicial or judicial proceedings.
II) Recipients involved in the processing of your personal data:
[1.A]: with regard to all the aforementioned functional cookies, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the hosting assistant (website), in her capacity as data controller;
[1.B]: with regard to all the aforementioned functional cookies, on the one hand, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, - possibly - the hosting assistant (e-mail), - possibly - the hosting assistant (certified e-mail) and - possibly - the lawyer(s) specifically selected, in their capacity as data controllers;
[2]: with regard to all the aforementioned functional cookies, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the hosting assistant (website), - where applicable - the hosting assistant (e-mail), - where applicable - the hosting assistant (certified e-mail) and - where applicable - the lawyer(s) specifically selected, in their capacity as data controllers.
----
----
III) Retention periods observed in the processing of your personal data:
[1.A], [1.B] and [2]:
with regard to the ‘_cmp_a’ functional cookie, 60 minutes (1 hour) starting from its relevant interaction;
as regards the functional cookies ‘_tracking_consent’, ‘CookieConsent’ and ‘localization’, 365 days (1 year) starting from your relevant interaction;
as regards the functional cookie ‘cart_currency’, 14 days starting from your relevant interaction;
as regards the functional cookie ‘locale_bar_accepted’, starting from your relevant interaction and coinciding with your browsing session period.
IV.a) Your rights that can be exercised as Data Subject:
access to your personal data processed, pursuant to art. 15 of the GDPR;
rectification of your personal data processed, pursuant to art. 16 of the GDPR;
erasure of your personal data processed, pursuant to art. 17 of the GDPR, in the event of:
• your detection of the subsequent lack of need for the Data Controller to process your personal data for
one or more of the processing purposes indicated in “Purposes of the processing of your personal data”;
• your opposition to the processing of your personal data processed - pursuant to art. 21, p. 1 of the GDPR - for [1.A] and/or [1.B], in the absence of the simultaneous legitimate and prevailing need of the Data Controller to continue such processing;
• your recognition of the original or subsequent lack of lawfulness of the processing of your personal data processed;
• your recognition of the subsequent need of the Data Controller to fulfill legal obligations to which the same is subject;
limitation of the processing of your personal data processed, pursuant to art. 18 of the GDPR, in the event of:
• your recognition of the original or subsequent lack of accuracy of your personal data processed, during the verification of the same by the Data Controller;
• your recognition of the original or subsequent lack of lawfulness of the processing of your personal data processed, in the presence of your subsequent objection to the erasure of the same;
• your detection of the subsequent absence of the need of the Data Controller to process your personal data for one or more of the processing purposes indicated in “Purposes of the processing of your personal data”, in the presence of your subsequent further detection of the presence of your need to process them to ascertain, exercise or defend a right in court;
• your opposition to the processing of your personal data processed - pursuant to art. 21, p. 1 of the GDPR - for [1.A] and/or [1.B], during the ascertainment of the presence of the simultaneous legitimate and prevailing need of the Data Controller to continue such processing by the same;
opposition to the processing of your personal data processed, pursuant to art. 21, p. 1 of the GDPR, as regards
:
• your personal data processed for [1.A];
• your personal data processed for [1.B].
IV.b) Your right (exercisable as Data Subject) to lodge a complaint with
a competent Supervisory Authority:
In addition to being able to lodge a judicial appeal with the competent judicial Authority, pursuant to art. 79, p. 1 of the GDPR, you can lodge a complaint with the Italian Supervisory Authority (Guarantor for the protection of personal data) - at ‘https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524’ - or with the national Supervisory Authority operating within the territory of the European Union State in which you reside and/or work, qualified in any case as a competent Supervisory Authority, pursuant to art. 77, p. 1 of the GDPR, in the event of your detection of the original or subsequent presence of a violation of the GDPR. during the processing of your personal data for one or more of the processing purposes indicated in “Purposes of the processing of your personal data”.
V) Nature of the communication preparatory to the processing of your personal data:
[1.A]: neither pre-contractual obligation nor contractual obligation nor legal obligation, but the need of the Data Controller to effectively carry out the protection of the particular usability of its website.
III. Installation of (technical) analysis cookies ‘_ga’, ‘_ga_#’, ‘_landing_page’, ‘_orig_referrer’, ‘_shopify_s’, ‘_shopify_sa_p’, ‘_shopify_sa_t’ and ‘_shopify_y’ in your browser:
I.a) Purpose of the processing of your personal data:
the analysis of the general use of your website -> [1.A];
the protection of your interests in extrajudicial or judicial proceedings -> [1.B];
compliance with the relevant legal obligations regarding the protection of personal data -> [2].
I.b) Related legal bases used in the processing of your personal data:
[1.A]: the need of the Data Controller to pursue its own legitimate interest;
[1.B]: the need of the Data Controller to pursue its own further legitimate interest;
[2]: the need for the Data Controller to comply with legal obligations to which it is subject.
I.c) Related legitimate interests pursued in the processing of your personal data:
[1.A]: the general analysis of its business activity carried out through its website;
[1.B]: the possible protection of its economic interests in extrajudicial or judicial proceedings.
II) Recipients involved in the processing of your personal data:
[1.A]:
with regard to the analysis cookies ‘_ga’ and ‘_ga_#’, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the hosting assistant (website) and the analysis assistant I (website), in their capacity as data controllers;
as regards the analysis cookies ‘_landing_page’, ‘_orig_referrer’, ‘_shopify_s’, ‘_shopify_sa_p’, ‘_shopify_sa_t’ and ‘_shopify_y’, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the hosting assistant (website) and the assistant II in analysis (website), in their capacity as data controllers;
[1.B]: as regards all the aforementioned analysis cookies, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, - where applicable - the hosting assistant (e-mail), - where applicable - the hosting assistant (certified e-mail) and - where applicable - the lawyer(s) specifically selected, in their capacity as data controllers;
[2]: with regard to all the aforementioned analysis cookies, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the hosting assistant (website), - possibly - the hosting assistant (e-mail), - possibly - the hosting assistant (certified e-mail) and - possibly - the lawyer(s) specifically selected, in their capacity as data controllers.
----
Please note:
1) The term 'data controller' refers to the "(...) natural or legal person (...) who processes personal data on behalf of the data controller;" (art. 4, no. 8) of the GDPR).
----
III) Retention periods observed in the processing of your personal data:
[1.A], [1.B] and [2]:
as regards the analysis cookies ‘_ga’ and ‘_ga_#’, 730 days (2 years) starting from the beginning of your
browsing session period;
as regards the analysis cookies ‘_landing_page’ and ‘_orig_referrer’, 14 days starting from the beginning of your
browsing session period;
as regards the analysis cookies ‘_shopify_s’, ‘_shopify_sa_p’ and ‘_shopify_sa_t’, 30 minutes (0.5 hours)
starting from the beginning of your browsing session period;
as regards the analysis cookie ‘_shopify_y’, 365 days (1 year) starting from its relevant interaction.
IV.a) Your rights that can be exercised as the Data Subject:
access to your personal data processed, pursuant to art. 15 of the GDPR;
rectification of your personal data processed, pursuant to art. 16 of the GDPR;
erasure of your personal data processed, pursuant to art. 17 of the GDPR, in the event of:
• your detection of the subsequent lack of need for the Data Controller to process your personal data for
one or more of the processing purposes indicated in “Purposes of the processing of your personal data”;
• your opposition to the processing of your personal data processed - pursuant to art. 21, p. 1 of the GDPR - for [1.A] and/or [1.B], in the absence of the simultaneous legitimate and prevailing need of the Data Controller to continue such processing;
• your detection of the original or subsequent lack of lawfulness of the processing of your personal data;
• your detection of the subsequent presence of the need of the Data Controller to fulfill legal obligations to which the same is subject;
limitation of the processing of your personal data processed, pursuant to art. 18 of the GDPR, in the event of:
• your detection of the original or subsequent lack of accuracy of your personal data processed, during the verification of the same by the Data Controller;
• your detection of the original or subsequent lack of lawfulness of the processing of your personal data processed, in the presence of your subsequent objection to the erasure of the same;
• your detection of the subsequent lack of need of the Data Controller to process your personal data for
one or more purposes of the processing indicated in "Purposes of the processing of your personal data", in the presence of your subsequent further detection of the presence of your need to process the same to ascertain, exercise or defend a right in court;
• your objection to the processing of your personal data processed - pursuant to art. 21, p. 1 of the GDPR - for [1.A] and/or [1.B], during the verification of the presence of the simultaneous legitimate and prevailing need of the Data Controller to continue such processing by the same;
objection to the processing of your personal data processed, pursuant to art. 21, p. 1 of the GDPR, as regards
:
• your personal data processed for [1.A], also using the relevant function within the so-called cookies
banner;
• your personal data processed for [1.B].
IV.b) Your right (exercisable as Data Subject) to lodge a complaint with
a competent Supervisory Authority:
In addition to being able to lodge a judicial appeal with the competent judicial Authority, pursuant to art. 79, p. 1 of the GDPR, you can lodge a complaint with the Italian Supervisory Authority (Guarantor for the protection of personal data) - at ‘https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524’ - or with the national Supervisory Authority operating within the territory of the European Union State where you reside and/or work, qualified in any case as the competent Supervisory Authority, pursuant to art. 77, p. 1 of the GDPR, in the event of your detection of the original or subsequent presence of a violation of the GDPR during the processing of your personal data for one or more of the processing purposes indicated in “Purposes of the processing of your personal data”.
V) Nature of the communication preparatory to the processing of your personal data:
[1.A]: neither pre-contractual obligation nor contractual obligation nor legal obligation, but the need of the Data Controller to effectively carry out the analysis of the general use of its website.
IV. Installation of the (non-technical) profiling cookies ‘_fbp’, ‘_tt_enable_cookie’ and ‘_ttp’ in your browser:
I.a) Purpose of the processing of your personal data:
the analysis of the particular use of your website -> [1];
the fulfillment of the relevant legal obligations regarding the protection of personal data -> [2];
the protection of your interests in extra-judicial or judicial proceedings -> [3].
I.b) Relevant legal bases used in the processing of your personal data:
[1]: the consent given by you to the Data Controller for this processing purpose;
[2]: the need of the Data Controller to fulfill legal obligations to which it is subject;
[3]: the need of the Data Controller to pursue its own legitimate interest.
I.c) Related legitimate interests pursued in the processing of your personal data:
[3]: the possible protection of your economic interests in extrajudicial or judicial proceedings.
II.a) Recipients involved in the processing of your personal data:
[1]:
with regard to the profiling cookie ‘_fbp’, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the hosting assistant (website), the profiling assistant (website) and the commercial-communication assistant, in their capacity as data controllers;
as regards the profiling cookies ‘_tt_enable_cookie’ and ‘_ttp’, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the hosting assistant (website), the profiling assistant II (website) and the commercial-communication assistant, in their capacity as data controllers; [2]:
as regards the profiling cookie ‘_fbp’, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the assistant in matters of hosting (website), the assistant I in matters of profiling (website), the assistant in matters of commercial - communication, - possibly - the assistant in matters of hosting (e-mail), - possibly - the assistant in matters of hosting
(certified e-mail) and - possibly - the lawyer(s) specifically selected, in their capacity as data controllers;
as regards the profiling cookies ‘_tt_enable_cookie’ and ‘_ttp’, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, the assistant in matters of hosting (website), the assistant II in matters of profiling (website), the assistant in matters of commercial - communication, - possibly - the assistant in matters of hosting (e-mail), - possibly - the assistant in matters of hosting (certified e-mail) and - possibly - the lawyer(s) specifically selected, in their capacity as data controllers;
[3]: with regard to all the aforementioned profiling cookies, on the one hand, the sole administrator (general management area) of the Data Controller, in her capacity as authorised to process data and, on the other hand, - possibly - the hosting assistant (e-mail), - possibly - the hosting assistant (certified e-mail) and - possibly - the lawyer(s) specifically selected, in their capacity as data controllers.
----
Please note:
1) The term 'data controller' refers to the "(...) natural or legal person (...) who processes personal data on behalf of the data controller;" (art. 4, no. 8) of the GDPR).
----
II.b) Transfers to third countries carried out in the processing of your personal data:
[1] and [2]: with regard to the profiling cookie ‘_fbp’, the assistant II in the matter of profiling (website), as the importing data controller, intends to transfer your personal data to non-member states of the European Union, classifiable as third countries, adopting as adequate guarantees the adequacy decisions regarding the individual relevant national legal systems on the protection of personal data, pursuant to art. 45, p. 1 of the GDPR and/or the standard contractual clauses for the transfer of personal data pursuant to the dec. of ex. (European Commission) n. 2021/914, pursuant to art. 46, p. 2, l. c) of the GDPR, as stated at ‘https://www.facebook.com/legal/EU_data_transfer_addendum/update’;
[1] and [2]: with regard to the profiling cookies ‘_tt_enable_cookie’ and ‘_ttp’, the assistant III in matters of profiling (website), as the importing data controller, intends to transfer your personal data to Malaysia (MY), Singapore (SG), the United States of America (US) and to other non-member States of the European Union, which can however be classified as third countries, adopting as adequate guarantees the adequacy decisions regarding the individual relevant national legal systems regarding the protection of personal data, pursuant to art. 45, p. 1 of the GDPR and/or the standard contractual clauses for the transfer of personal data pursuant to the dec. of ex. (European Commission) n. 2021/914, pursuant to art. 46, p. 2, l. c) of the GDPR, as stated at ‘https://www.tiktok.com/legal/page/eea/privacy-policy/it’.
III) Retention periods observed in the processing of your personal data:
[1], [2] and [3]:
as regards the profiling cookie ‘_fbp’, 90 days (3 months) starting from its relevant interaction;
as regards the profiling cookies ‘_tt_enable_cookie’ and ‘_ttp’, 25 days starting from its relevant interaction.
IV.a) Your rights that can be exercised as an interested party:
access to your personal data processed, pursuant to art. 15 of the GDPR;
rectification of your personal data processed, pursuant to art. 16 of the GDPR;
deletion of your personal data processed, pursuant to art. 17 of the GDPR, in the event of:
• your detection of the subsequent lack of need for the Data Controller to process your personal data for
one or more of the processing purposes indicated in “Purposes of the processing of your personal data”;
• your revocation of the consent given by you for [1], in the absence of the concurrent legitimate need of the Data Controller to process your personal data possibly processed for one or more additional processing purposes indicated in “Purposes of the processing of your personal data”;
• your opposition to the processing of your personal data processed - pursuant to art. 21, p. 1 of the GDPR - for [3], in the absence of the concurrent legitimate and prevailing need of the Data Controller to continue such processing;
• your detection of the original or subsequent lack of lawfulness of the processing of your personal data processed;
• its detection of the subsequent presence of the need for the Data Controller to fulfill legal obligations to which he is subject;
limitation of the processing of your personal data processed, pursuant to art. 18 of the GDPR, in the event of:
• your detection of the original or subsequent lack of accuracy of your personal data processed, during the verification of the same by the Data Controller;
• your detection of the original or subsequent lack of lawfulness of the processing of your personal data processed, in the presence of your subsequent objection to the erasure of the same;
• your detection of the subsequent lack of need of the Data Controller to process your personal data for one or more of the processing purposes indicated in "Purposes of the processing of your personal data", in the presence of your subsequent further detection of the presence of your need to process the same to ascertain, exercise or defend a right in court;
• your opposition to the processing of your personal data processed - pursuant to art. 21, p. 1 of the GDPR. - for [3], during the verification of the presence of the simultaneous legitimate and prevailing need of the Data Controller to continue such processing by the same;
portability of your personal data processed, pursuant to art. 20 of the GDPR, with regard to:
• your personal data processed for [1];
opposition to the processing of your personal data processed, pursuant to art. 21, p. 1 of the GDPR, with regard
to:
• your personal data processed for [3].
IV.b) Your right (exercisable as Data Subject) to revoke the consent given by you:
[1]: you may revoke the consent given by you to the Data Controller for this processing purpose at any time, also by using the relevant function within the so-called cookies banner.
IV.b) Your right (exercisable as Data Subject) to lodge a complaint with
a competent Supervisory Authority:
In addition to being able to lodge a judicial appeal with the competent judicial Authority, pursuant to art. 79, p. 1 of the GDPR, you can lodge a complaint with the Italian Supervisory Authority (Guarantor for the protection of personal data) - at ‘https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524’ - or with the national Supervisory Authority operating within the territory of the European Union State in which you reside and/or work, qualified in any case as a competent Supervisory Authority, pursuant to art. 77, p. 1 of the GDPR, in the event of your detection of the original or subsequent presence of a violation of the GDPR. during the processing of your personal data for one or more purposes of the processing indicated in “Purposes of the processing of your personal data”.
V) Nature of the communication preparatory to the processing of your personal data:
[1]: neither pre-contractual obligation nor contractual obligation nor legal obligation, but possibility for the Data Controller to pursue the analysis of the particular use of its website.
Date: 23 / 06 / 2024
The legal representative of the Data Controller: Sonia Mosetti