What are cookies, what are they for and who installs them?
Cookies  are small text strings that the websites you visit send to your device (eg: PC, tablet, smartphone …) where they are stored and / or read by the navigation browser and that allow the browser to  send information to those who have installed cookies in order to offer optimal navigation, produce statistics on visits,  offer you personalized content and targeted advertising. Cookies are contained in various elements hosted on the page of the site itself (such as advertising banners, images, videos, etc.).

While browsing this site, you may receive the following cookies on your device:

  • first-party  cookies: they are cookies sent by the website of the Data Controller, which you are visiting,
  • third-party cookies: these are cookies  sent by a site other than the one you are visiting, which installs its own cookies through the Data Controller’s site.

The management and responsibility of first-party cookies is the Data Controller, while if you use third-party cookies, the Data Controller has no control over the activity of the third party, nor over the possibility that it modifies them over time. In relation to third-party cookies, the Data Controller acts as an intermediary and, in this capacity, refers to the information  of the third party, reachable through a special link next to each of the cookies indicated in the appropriate area accessible from the banner or present at the bottom.

Other tracking tools. Similarly to cookies, other tracking tools are being developed that allow the same purposes to be pursued. These tracking tools can be categorized according to a number of different criteria, however, the main grouping criterion remains that of the purpose for which they are used: of a technical or commercial nature. These tools include, for example, pixels, fingerprinting tools, etc.

In addition, most web browsers are configured to accept, control or possibly disable cookies through the settings. For greater transparency, we indicate the links to follow to manage cookies from the following browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=it

Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie

Microsoft Edge: https://support.microsoft.com/it-it/microsoft-edge/eliminare-i-cookie-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

Opera: http://help.opera.com/Windows/10.00/it/cookies.html

Internet Explorer:

https://support.microsoft.com/it-it/topic/eliminare-e-gestire-i-cookie-168dab11-0753-043d-7c16-ede5947fc64d

Safari: https://support.apple.com/it-it/guide/safari/sfri11471/mac

What is the purpose of this Cookie Policy?

In compliance with the provisions of current legislation on the protection of personal data (in particular Regulation (EU) 2016/679 on the protection of personal data “GDPR” and the European and Italian legislation on cookies) we wish to inform you about the processing of your personal data collected through cookies (and possibly other tracking tools similar to them) also of third parties.

The processing will be based on principles of correctness, lawfulness and transparency, as well as the protection of your privacy and the protection of your rights.

Who is the Data Controller? How to contact him?

The Data Controller is the company OIKYWEB S.p.A. with registered office in Via B.do Lamarmora, n. 19, 28100 Novara (NO), C.F./P.IVA 01772060032, hereinafter the “Data Controller”. Your contact details are as follows: oikyweb@oikyweb.com.

What cookies does this website use? For what purposes, on what legal basis? Is it mandatory to provide data? What happens if you don’t provide them?

The cookies used by this site can be classified according to the following categories: 1) Technical cookies, which are used to make the site work, and 2) Profiling cookies, which are used to track user behavior to analyze it in order to offer services based on his preferences. Below are the details:

Technical Cookies, which do not require your consent

This category includes the cookies listed below, which pursue the purposes indicated respectively:

  • navigation or session cookies, which are used to ensure normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas);
  • anonymized analytics cookies, are cookies used to collect information, in aggregate form and therefore not attributable to the individual, relating to the number of users on the most visited pages, the places from which you connect, etc. to  process statistics on the service and use of the site. These cookies may also be third-party. In this case, however, the Data Controller must have made them anonymous (eg through anonymization of the IP or masking of part of it) and must not allow the third party to cross the information collected through the site with others already available to him.
  • functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided.
  • Legal basis. For technical cookies,  the legal basis lies in the execution of a contract or pre-contractual measures (art. 6.b of the GDPR) as necessary to make the site and the service requested by users usable. The use of these cookies does not require your consent.
  • Necessity of the provision of data and consequences. The provision of data collected through the cookies described above is not mandatory; however, it is necessary for connecting to the site and providing the service. In the absence of partial or total such provision, you may not use the site or there may be problems in use. The list of Technical Cookies used by this site with their characteristics (eg: characteristics, data retention times, etc.) is available in the appropriate area accessible from the banner or at the bottom.

Profiling cookies and other tracking tools that require your consent
Profiling cookies and other tracking tools can be:

  • First party: installed directly by the Data Controller on its website.
  • Third-party: installed on the website of the Data Controller by a third party. On  third-party cookies, and other third-party tracking tools (e.g. facebook pixel, social plug-ins, fingerprinting tools, google tags, etc.)  the  Data Controller has no control over the activity and purpose of the third party, nor over the possibility that it modifies them over time. In this sense, the Data Controller acts as an intermediary. In this capacity, it refers to the information of the third party, reachable through the link next to each of the cookies indicated in the appropriate area accessible from the banner or present at the bottom.

Profiling cookies  and other tracking tools make it possible to follow and track, through automated tools, the user’s behavior while browsing the Internet. They aim to bring back to specific, identified or identifiable subjects, specific actions or recurring behavioral patterns in the use of the features offered (patterns) in order to group the different profiles within homogeneous clusters of different sizes, so that it is possible for the Data Controller or third parties, among other things, also to modulate the provision of the service in an increasingly personalized way beyond what is strictly necessary for the provision of the service, as well as send targeted advertising messages, ie in line with the preferences expressed by the user in the context of surfing the net.

Profiling cookies are also non-anonymized analytics cookies  used by the third party, when the Data Controller has not made them anonymous (eg: it has not anonymized the IP) or when it allows the third party to cross the information collected with others already available.

  • Legal basis. The use of profiling cookies (including non-anonymized analytics) and other tracking tools can only take place with your consent, which constitutes the legal basis for the processing of data collected through these cookies, in accordance with the provisions of art. 6.a of the GDPR. The consent can be provided or revoked by you at any time by operating directly in the appropriate area accessible from the banner or at the bottom.
  • Necessity of the provision of data and consequences. Failure to provide data resulting from your lack of consent for these cookies and other tracking tools has no consequence for you for the purposes of browsing the site and its use, but makes it impossible to offer you advertising messages on services and goods in line with your preferences and your real interests expressed in the context of your surfing the net.

Is personal data transferred outside the European Union (EU)?

Some data collected may be transferred abroad to locations outside the European Union. This transfer will in any case be carried out in compliance with the guarantees prescribed by the GDPR for this type of activity (articles 45 to 49). These include: transfer to companies located in countries for which the existence of guarantees of protection of personal data comparable to those of the GDPR (White List Countries) is recognized; or to companies with which specific contractual clauses for the protection of personal data approved by the Guarantor Authority or binding rules of companies approved by the Guarantor Authority have been signed or the transfer takes place on the basis of specific derogations. For more information, you can contact the Data Controller as indicated in the point below entitled “What are your rights as an interested party“.

How long is the data stored?

The retention period of the data collected through the use of cookies is indicated in the lists of cookies used by this site available in the appropriate area accessible at the bottom.

Who can know your data? To whom do we communicate them?

Data collected through cookies:

  • may be used by employees authorized by the Data Controller, such as site maintenance and management, marketing and administration;
  • they may also be used by any third parties (service providers, IT infrastructures involved in the management and supervision of the site and the like) who operate on behalf of the Data Controller and have been duly appointed as data processors in accordance with the provisions of Article 28 of the GDPR;
  • In addition, the data may be transferred to third parties authorized by law to access your data such as, for example, law enforcement and public administration
  • to any third parties who install cookies through our site as indicated in their information.

What are your rights as a data subject?

The GDPR recognizes the following rights in relation to your personal data that you can exercise within the limits and in compliance with the provisions of the law:

  • Right of access to your personal data (Article 15);
  • Right to rectification (art. 16);
  • Right to erasure (right to be forgotten) (art. 17);
  • ight to restriction of processing (art. 18);
  • ight to data portability (art. 20);
  • Right to object (art. 21); The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her based on legitimate interest, including profiling on the basis thereof. The Data Controller refrains from processing unless it demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court;
  • Right to object to a decision based solely on automated processing (Article 22);
  • Right to revoke, at any time, the consent given, without prejudice to the lawfulness of the processing based on the consent given before the revocation.

You can exercise these rights by sending a written request addressed to the Data Controller at the postal address or by e-mail, as indicated above. Furthermore, you have the right to lodge a complaint with the Guarantor Authority for the protection of personal  data (www.garanteprivacy.it), if you believe that the processing of your data is contrary to the legislation in force (Article 77) or to take legal action (Article 79).

How is personal data protected?

Personal data will be processed both electronically and without the aid of electronic tools, using technical and organizational security measures appropriate to the nature of the data to ensure its integrity and confidentiality and protect it against the risks of illicit intrusion, loss, alteration, or disclosure to third parties not authorized to process them.

We inform you that plug-ins provided by third parties may be installed on the pages of our site that you visit (eg: like buttons, comments, shares and other typical functions of social networks and platforms such as: Facebook, Instagram, Youtube, Linkedin, Twitter, Snapchat, etc.).

These  plug-ins will allow your browser to call up content from the plug-in provider and transfer personal data concerning you (including, for example, the pages visited, purchases made, time spent, device and navigation identifiers, likes, comments, shares, etc.). This processing activity involves the collection and communication by transmission of your personal data and requires your consent.

Once landed on the site of the social network provider of the plug-in, the treatment will be entirely carried out according to the privacy policy published by this subject.

Data and Data Source

You may have arrived on this website / app by clicking on links or advertising content of the Data Controller on third-party websites or social networks. In this case, this third-party website will send us some personal data (IP address and other identifiers, site of origin, advertising campaign, campaign statistics, etc.) relating to the fact that you have shown interest in our advertising.

This information, if you have given us your prior valid consent, may be used by us to send you our advertising or promotional communications.

Joint Controllership of the campaign

If the remarketing advertising campaign on which you clicked was carried out on Facebook platforms (Facebook, Instagram and apps belonging to the Facebook Audience Network) or through its tools (Facebook stories, Instagram stories, Messenger stories, news feeds, news, feeds, marketplaces, videos, etc.), the processing relating to the selection of the target and the choice of methods of sending the contents of the advertising campaign has been (and will be) carried out under joint controllership with Facebook Ireland Limited (herein “Facebook”), with registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2.

Elements of the agreement

Facebook: Full details regarding the joint controller agreement and their respective responsibilities are available at the following link: https://www.facebook.com/legal/controller_addendum. Below is the link to the privacy policy of Facebook https://www.facebook.com/about/privacy. Facebook will be responsible for handling requests to exercise the rights of data subjects pursuant to Articles 15-20 of the GDPR in relation to personal data held by Facebook after Joint Processing.

The activities of sending promotional content on the sites, apps or platforms of third party joint controllers or their partners will be carried out by them only if you have provided the necessary consent. Since we do not know the recipients of such advertisements that will be sent by third parties, the information to which we are responsible is provided to you through this document when you connect to our website / app.

Updates

The Data Controller reserves the right to modify and update this information at any time. The changes will apply from their publication.

Edition of 03/08/2023