Privacy
Privacy Policy
The purpose of this document (hereinafter the “Privacy Policy”) is to inform Users about the personal data, understood as any information that allows the identification of a natural person (hereinafter the “Personal Data”), collected by the website https://mlsocks-sport.com (hereinafter the “Application”).
The Data Controller, as identified below, may modify or simply update this Privacy Policy, in whole or in part, by informing Users accordingly. Changes and updates will be binding as soon as they are published on the Application. Users are therefore encouraged to read the Privacy Policy each time they access the Application.
If you do not accept the changes made to the Privacy Policy, you must stop using this Application and may request that the Data Controller remove your Personal Data.
- Personal Data collected by the Application
The Data Controller collects the following types of Personal Data:
- Content and information provided voluntarily by the User
- Contact details and content: these are Personal Data that the User voluntarily provides to the Application during its use, such as personal data, contact details, login credentials for the services and/or products provided, personal interests and preferences, and other personal content, etc.
- Personal data collected from social media: Users may share data provided to social media with the Application. Users can control the Personal Data the Application can access through the privacy settings available on the relevant social media platforms. By linking social media accounts to the Application and authorizing the Data Controller to access such Personal Data, the User consents to the collection, processing, and storage of such Personal Data in accordance with this Privacy Policy.
Failure by the User to provide Personal Data, for which there is a legal or contractual obligation or where such data constitutes a necessary requirement for using the service or for the conclusion of the contract, will make it impossible for the Data Controller to provide all or part of its services.
Users who provide third-party Personal Data to the Data Controller are directly and exclusively responsible for their origin, collection, processing, communication, or dissemination.
- Data and content automatically acquired while using the Application:
Technical data: The computer systems and software procedures used to operate this Application may acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified Users, but by its very nature, it could, through processing and association with data held by third parties, allow Users to be identified. This category includes IP addresses or domain names used by Users connecting to the Application, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.
Usage data: Personal Data relating to the use of the Application by the User may also be collected, such as the pages visited, the actions performed, the features and services used.
- Personal data collected through cookies or similar technologies:
The Application uses cookies, web beacons, unique identifiers, and other similar technologies to collect Personal Data about the pages, links visited, and other actions performed when using our services. This data is stored and then retransmitted upon the same User's next visit.
- Purpose
The Personal Data collected may be used to fulfill contractual and pre-contractual obligations and legal obligations, as well as for the following purposes:
External management of payments by credit card, bank transfer or other instruments: to manage User payments via external platforms that acquire payment data without the Application owner having access.
Sending emails or newsletters and managing mailing lists: to contact the User with emails containing commercial and promotional information relating to the Application.
User registration and authentication: to allow the User to register on the Application to access and be identified.
Storage, hosting and backend infrastructure management: to manage the technical infrastructure for storing User data.
Monitoring, analysis and tracking of User behavior: to monitor and analyze how you behave
the User on the Application.
Support and contact with the User: to respond to the User's requests and assist them in case of problems.
User Profiling: to automatically group and analyze the User's characteristics or behaviors and provide them with personalized services or messages.
Viewing content from external platforms: to allow the User to view and share content from social networks or other external platforms (e.g. YouTube, Facebook).
- Treatment methods
Personal Data is processed using computer and/or electronic means, using organizational methods and logic strictly related to the purposes indicated.
In some cases, individuals involved in the Data Controller's organization (such as, for example, personnel management, sales staff, system administrators, etc.) or external parties (such as IT companies, service providers, mail carriers, hosting providers, etc.) may have access to Personal Data. These individuals may be appointed as Data Processors by the Data Controller, as well as access Users' Personal Data whenever necessary, and will be contractually obligated to maintain the confidentiality of the Personal Data.
The updated list of Data Processors can be requested by email at https:// mlsocks-sport.com
- Legal basis for processing
The processing of Personal Data relating to the User is based on the following legal bases:
the consent given by the User for one or more specific purposes;
processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures
the processing is necessary to fulfill a legal obligation to which the Data Controller is subject
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller
processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties
processing is necessary for the pursuit of a vital interest of the Data Controller or of a third party.
However, it is always possible to ask the Data Controller to clarify the legal basis of each processing at the address info @ mlsocks-sport.com
- Place
Personal Data is processed at the Data Controller's operating offices and in any other locations where the parties involved in the processing are located. For further information, contact the Data Controller at the following email address: info@ mlsocks-sport.com
Personal Data may be transferred to countries outside the EU: USA.
For these countries, there is an adequacy decision from the European Commission or, in the absence of such a decision, it is possible to request more information from the Data Controller regarding the appropriate safeguards adopted, as well as the means to obtain a copy of such Data or the exact location where it has been made available.
- Security measures
The Processing is carried out using methods and tools suitable for guaranteeing the security and confidentiality of Personal Data, the Data Controller having adopted appropriate technical and organizational measures that guarantee, and allow for the demonstration, that the Processing is carried out in compliance with the relevant legislation.
- Data retention period
Personal Data will be retained for the period of time necessary to fulfill the purposes for which it was collected.
In particular, Personal Data will be retained for the entire duration of the contractual relationship, to fulfill the inherent and consequent obligations thereof, to comply with applicable legal and regulatory obligations, as well as for our own or third-party defense purposes.
If the processing of Personal Data is based on the User's consent, the Data Controller may retain the Personal Data until the consent is revoked.
Personal Data may be retained for a longer period if necessary to fulfill a legal obligation or by order of an authority.
All Personal Data will be deleted or stored in a form that does not permit identification of the User within 30 days of the end of the retention period. After this period, the rights to access, delete, rectify, and portability of Personal Data can no longer be exercised.
- Automated decision-making processes
All Personal Data collected will not be subject to any automated decision-making process, including profiling, which may produce legal effects concerning the data subject or may significantly affect him or her.
- User Rights
Users may exercise certain rights regarding their Personal Data processed by the Data Controller. In particular, the User has the right to:
withdraw consent at any time;
object to the processing of your Personal Data;
access your Personal Data;
verify and request rectification;
obtain restriction of processing;
obtain the deletion of your Personal Data;
receive your Personal Data or have it transferred to another owner;
lodge a complaint with the Personal Data Protection Supervisory Authority and/or take legal action.
To exercise their rights, Users may submit a request to the Data Controller using the contact details provided in this document. Requests are free of charge and will be processed by the Data Controller as quickly as possible, in any case within 30 days.
- Data Controller
Company Name: ML SPORT SAS DI BARBETTA LORIS & C.
Store Name: ML SOCKS
Telephone Number: +39 3286792051
E-mail: info@mlsocks-sport.com
Company address: Viale G. Marconi 278, 65127 Pescara PE, Italy
VAT/Tax Code: 02432030688
Company number: PE - 434262
Owner's email address: mlsocks0098@gmail.com
In order to offer you Klarna 's payment methods, we may transmit your personal data, such as contact details and order details, to Klarna at checkout so that Klarna can assess your suitability for their payment methods and personalize those payment methods. Your personal data transferred will be treated in accordance with Klarna 's privacy policy.
Privacy Policy of mlsocks-sport.com
This Website collects some Personal Data from its Users.
This document can be printed using the print command in the settings of any browser.
Policy Summary
Personal Data processed for the following purposes and using the following services:
- Contact the User
- Mailing list or newsletter
Personal Data: city; country; date of birth; email address; first name; last name; phone number; province; gender; Usage Data; ZIP/Postal code; Tracking Tools
- Contact form
Personal Data: ZIP/Postal code; city; Tax ID; last name; date of birth; Usage Data; email address; User ID; physical address; country; first name; phone number; province; gender; Tracking Tools; various types of Data
- Contact by telephone
Personal data: telephone number
- Managing contacts and sending messages
- Klaviyo
Personal Data: various types of Data
- Sendgrid
Personal Data: last name; date of birth; email address; first name; phone number; gender
- Payment Management
- PayPal
Personal Data: last name; email address; billing address; first name; phone number; various types of Data as specified in the privacy policy of the service
- Apple Pay and Google Pay
Personal Data: last name; Usage Data; email address; billing address; shipping address; first name; phone number; various types of Data as specified in the privacy policy of the service
- Klarna
Personal Data: last name; email address; billing address; shipping address; first name; phone number; various types of Data as specified in the privacy policy of the service
- Stripe
Personal Data: last name; Usage Data; email address; billing address; first name; various types of Data as specified in the privacy policy of the service
- Tag Management
- Google Tag Manager
Personal Data: Usage Data; Tracking Tools
- Management of data collection and online surveys
- Klaviyo Forms
Personal Data: Data communicated during use of the service
- Hosting and backend infrastructure
- SiteGround
Personal Data: various types of Data as specified in the privacy policy of the service
- Interaction with live chat platforms
- Shopify Inbox
Personal Data: Data communicated during use of the service
- Interaction with social networks and external platforms
- PayPal button and widgets, LinkedIn button and social widgets, and Facebook Like button and social widgets
Personal Data: Usage Data; Tracking Tools
- Collection of privacy preferences
- iubenda's Consent Solution
Personal Data: Data communicated during use of the service; Tracking Tools
- iubenda Cookie Solution
Personal Data: Tracking Tools
- Registration and authentication
- Direct registration and profiling
Personal Data: ZIP/Postal code; Tax ID; last name; date of birth; Usage Data; email address; User ID; picture; profile picture; billing address; shipping address; physical address; language; house number; phone number; province; gender; state; username; various types of Data
- Registration and authentication provided directly by this Website
- Direct registration
Personal Data: ZIP/Postal code; city; Tax ID; last name; date of birth; email address; User ID; image; profile picture; billing address; physical address; language; nation; name; street number; phone number; prefix; province; gender; state; username; various types of Data
- Remarketing and behavioral targeting
- Facebook Remarketing, Remarketing with Google Analytics and Google Ads Remarketing
Personal Data: Usage Data; Tracking Tools
- Klaviyo segmentation and social advertising
Personal Data: purchase history; Usage Data; email address; device information; tracking tools
- Facebook Custom Audiences
Personal Data: email; Tracking Tools
- Statistics
- Google Analytics, Google Analytics with anonymized IP, Meta Events Manager, Facebook Ads conversion tracking (Facebook pixel), Google Ads Conversion Tracking
Personal Data: Usage Data; Tracking Tools
- Google Analytics 4
Personal Data: device information; number of Users; session statistics; Tracking Tools
- Google Analytics Demographics and Interests Reporting
Personal Data: unique device identifiers for advertising (for example, Google Advertiser ID or IDFA); Tracking Tools
- Viewing content from external platforms
- Google Fonts, Font Awesome, Instagram Widget and YouTube Video Widget
Personal Data: Usage Data; Tracking Tools
Learn how to opt out of interest-based ads
In addition to any opt-out functions provided by any of the services listed in this document, Users can read more about how to opt out of interest-based advertising in the dedicated section of the Cookie Policy.
Further information on the processing of Personal Data
- Selling goods and services online
The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery. The Personal Data collected to complete the payment may include the credit card, the bank account used for the transfer, or other payment methods. The payment data collected by this Website depends on the payment system used.
Contact information Data Controller
Company Name: ML SPORT SAS DI BARBETTA LORIS & C.
Store Name: ML SOCKS
Telephone Number: +39 3286792051
E-mail: info@mlsocks-sport.com
Company address: Viale G. Marconi 278, 65127 Pescara PE, Italy
VAT/Tax Code: 02432030688
Company number: PE - 434262
Owner's email address: mlsocks0098@gmail.com
Types of Data collected
Among the types of Personal Data collected by this Website, either independently or through third parties, there are: Trackers; Usage Data; email address; first name; last name; phone number; province; country; ZIP/Postal code; gender; date of birth; city; physical address; various types of Data; Tax ID; User ID; billing address; Data communicated while using the service; shipping address; username; status; picture; profile picture; house number; language; prefix; device information; purchase history; number of Users; session statistics; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide such Data, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from providing such Data, without this having any consequence on the availability or operation of the Service.
Users who have doubts about which data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies - or other tracking tools - by this Website or by the owners of third-party services used by this Website, unless otherwise specified, is intended to provide the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website and guarantees that he or she has the right to communicate or disseminate them, freeing the Data Controller from any liability towards third parties.
Method and place of processing of the collected data
Treatment methods
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using computer and/or electronic means, following organizational methods and procedures strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the operation of this website (administrative, commercial, marketing, legal, and system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, and communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may be requested from the Data Controller at any time.
Legal basis for processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- the User has given consent for one or more specific purposes; Note: Under some jurisdictions, the Data Controller may be authorized to process Personal Data without the User's consent or any other of the legal bases specified below, until the User objects to such processing ("opt-out"). However, this does not apply if the processing of Personal Data is regulated by European data protection legislation;
- processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
- processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
However, it is always possible to ask the Data Controller to clarify the specific legal basis for each processing operation and, in particular, to specify whether the processing is based on the law, provided for by a contract, or necessary to conclude a contract.
Place
The Data is processed at the Data Controller's operating offices and in any other locations where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than their own. For further information on the place of processing, the User can refer to the section containing details on the processing of Personal Data.
The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.
The User can verify whether one of the transfers described above is taking place by examining the section of this document relating to the details on the processing of Personal Data or by requesting information from the Data Controller by contacting him/her using the contact details provided at the beginning.
Retention period
The Data is processed and stored for the time required by the purposes for which it was collected.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed.
- Personal Data collected for purposes related to the Data Controller's legitimate interest will be retained until such interest is fulfilled. Users may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User's consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.
Purpose of Processing Collected Data
The User's Data is collected to allow the Owner to provide its Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Analytics, Displaying content from external platforms, Tag Management, Contacting the User, Managing contacts and sending messages, Interaction with support and feedback platforms, Handling payments, Heat mapping and session recording, Interaction with online survey platforms, Interaction with data collection platforms and other third parties, Managing data collection and online surveys, Managing support and contact requests, Hosting and backend infrastructure, Interaction with live chat platforms, Interaction with external social networks and platforms, Collection of privacy preferences, Registration and authentication, Registration and authentication provided directly by this Website, Remarketing and behavioral targeting, and Platform and hosting services.
To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User may refer to the section "Details on the Processing of Personal Data".
Details on the processing of personal data
Personal Data is collected for the following purposes and using the following services:
- Contact the User
Mailing list or newsletter (this Website)
By registering for the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The User's email address may also be added to this list as a result of registering for this Website or after making a purchase.
Personal Data processed: city; country; date of birth; email address; first name; last name; phone number; province; gender; Usage Data; ZIP/Postal code; Tracking Tools.
Contact form (this website)
By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind indicated by the form header.
Personal Data processed: ZIP/Postal code; city; Tax ID; last name; date of birth; Usage Data; email address; User ID; physical address; country; first name; phone number; province; gender; Tracking Tools; various types of Data.
Contact by telephone (this Website)
Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Website, as well as to satisfy support requests.
Personal Data processed: telephone number.
- Managing contacts and sending messages
This type of service allows you to manage a database of email contacts, telephone contacts, or contacts of any other type, used to communicate with the User.
These services may also allow us to collect data relating to the date and time the messages were viewed by the User, as well as the User's interaction with them, such as information on clicks on links included in the messages.
Klaviyo (Klaviyo Inc.)
Klaviyo is an email address management and message sending service provided by Klaviyo Inc.
To use the service provided by Klaviyo, the Data Controller generally shares information about Users (who make purchases), such as contact information and purchase history. For further information regarding the scope of this sharing, please see the information below under the heading "Personal Data Processed."
Personal Data processed: various types of Data.
Place of processing: United States – Privacy Policy – Opt out .
Sendgrid (Sendgrid)
Sendgrid is an email address management and message sending service provided by Sendgrid Inc.
Personal Data processed: last name; date of birth; email address; first name; phone number; gender.
Place of processing: United States – Privacy Policy .
- Payment Management
Unless otherwise specified, this website processes all payments by credit card, bank transfer, or other means through external payment service providers. Generally, and unless otherwise specified, Users are asked to provide their payment details and personal information directly to these payment service providers.
This Website is not involved in the collection and processing of such information: instead, it will only receive a notification from the payment service provider in question that the payment has been completed.
PayPal (Paypal)
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.
Personal Data processed: last name; email address; billing address; first name; phone number; various types of Data as specified in the privacy policy of the service.
Place of processing: See PayPal’s privacy policy – Privacy Policy .
Apple Pay (Apple Inc.)
Apple Pay is a payment service provided by Apple Inc., which allows the User to make payments using their mobile phone.
Personal Data processed: billing address; email address; first name; last name; Usage Data; phone number; various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy .
Google Pay
Google Pay is a payment service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which allows the User to make online payments using their Google credentials.
Personal Data processed: billing address; email address; first name; last name; Usage Data; phone number; various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .
Klarna (Klarna AB)
Klarna is a payment service provided by Klarna AB.
Personal Data processed: last name; email address; billing address; shipping address; first name; phone number; various types of Data as specified in the privacy policy of the service.
Place of processing: Sweden – Privacy Policy .
Stripe (Stripe Technology Europe Ltd)
Stripe is a payment service provided by Stripe Technology Europe Ltd.
Personal Data processed: last name; Usage Data; email address; billing address; first name; various types of Data as specified in the service's privacy policy.
Place of processing: Ireland – Privacy Policy .
- Tag Management
This type of service is functional to the centralized management of the tags or scripts used on this Website.
The use of these services involves the flow of User Data through them and, if applicable, their retention.
Google Tag Manager
Google Tag Manager is a tag management service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .
- Management of data collection and online surveys
This type of service allows this Website to manage the creation, implementation, administration, distribution and analysis of online forms and surveys in order to collect, save and reuse the Data of the Users who respond.
The Personal Data collected depends on the information requested and provided by Users in the corresponding online form.
These services may be integrated with a wide range of third-party services to allow the Owner to perform subsequent actions with the processed Data - for example, contact management, sending messages, statistics, advertising and payment processing.
Hotjar surveys (Hotjar Ltd.)
Hotjar surveys is a survey generator and data collection platform provided by Hotjar Ltd.
Hotjar surveys may use cookies to track User behavior. Users can opt out of Hotjar surveys cookie tracking by visiting this opt-out page .
Hotjar surveys honors the "Do Not Track" option available in most modern browsers, which, when enabled, sends a special signal to stop tracking your activity. Users can find more information on how to enable the "Do Not Track" option for each supported browser here .
Personal Data processed: Data communicated during use of the service.
Place of processing: Malta – Privacy Policy – Opt Out .
Klaviyo Forms (Klaviyo Inc.)
Klaviyo Forms is a form builder and data collection platform provided by Klaviyo Inc.
To use the service provided by Klaviyo, the Data Controller generally shares information about Users (who make purchases), such as contact information and purchase history. For further information regarding the scope of this sharing, please see the information below under the heading "Personal Data Processed."
Personal Data processed: Data communicated during use of the service.
Place of processing: United States – Privacy Policy .
- Heat mapping and session recording
Heat mapping services are used to identify the areas of this website with which users interact most frequently, in order to determine which areas attract the most interest. These services allow us to monitor and analyze traffic data and track user behavior.
Some of these services may record sessions and make them available for later viewing.
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a heat mapping and session recording service provided by Hotjar Ltd.
Hotjar honors generic "Do Not Track" headers. This means that the browser can tell the script not to collect any user data. This setting is available in all major browsers. More information on opting out from Hotjar is available here.
Personal Data processed: Usage Data; Tracking Tools; various types of Data as specified in the service's privacy policy.
Place of processing: Malta – Privacy Policy – Opt Out .
- Hosting and backend infrastructure
This type of service has the function of hosting data and files that allow this website to function, allow its distribution and provide a ready-to-use infrastructure to provide specific features of this website.
Some of the services listed below, if any, may operate on geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored.
SiteGround
SiteGround is a hosting service
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: Italy – Privacy Policy .
- Interaction with live chat platforms
This type of service allows you to interact with live chat platforms managed by third parties, directly from the pages of this Website, in order to contact and be contacted by this Website's support service.
If a service for interacting with live chat platforms is installed, it may collect Usage Data relating to the pages on which it is installed, even if Users do not use the service. Furthermore, live chat conversations may be recorded.
Spotify Inbox
Spoyify Inbox is an interaction service with the Spotify live chat platform
Personal Data processed: Data communicated during use of the service.
Place of processing: United States – Privacy Policy .
- Interaction with data collection platforms and other third parties
This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Website for the purpose of saving and reusing data.
If one of these services is installed, it is possible that, even if Users do not use the service, it may collect Usage Data relating to the pages on which it is installed.
- Interaction with social networks and external platforms
This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out of the respective services to ensure that the data processed on this Website are not linked to the User's profile.
PayPal button and widgets (Paypal)
The PayPal button and widgets are services for interacting with the PayPal platform, provided by PayPal Inc.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: See PayPal’s privacy policy – Privacy Policy .
LinkedIn button and social widgets (LinkedIn Corporation)
The LinkedIn button and social widgets are services for interacting with the LinkedIn social network, provided by LinkedIn Corporation.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy .
Facebook Like button and social widgets
The “Like” button and Facebook social widgets are services of interaction with the Facebook social network, provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of the Data,
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .
- Collection of privacy preferences
This type of service allows this Website to collect and save Users' preferences regarding the collection, use, and processing of their personal information, as required by applicable privacy legislation.
Consent Solution by iubenda (iubenda srl)
iubenda's Consent Solution allows you to save and retrieve records of Users' consent to the processing of Personal Data, as well as the information and preferences expressed in relation to the consent provided.
To this end, it uses a Tracker that temporarily stores pending information on the User's device until it is processed by the API. The Tracker (a browser feature called localStorage) is then deleted.
Personal Data processed: Data communicated during use of the service; Tracking Tools.
Place of processing: Italy – Privacy Policy .
Cookie Solution by iubenda (iubenda srl)
iubenda's Cookie Solution allows the Owner to collect and save Users' preferences regarding the processing of personal data and in particular the use of Cookies and other Tracking Tools on this Website.
Personal Data processed: Tracking Tools.
Place of processing: Italy – Privacy Policy .
- Registration and authentication
By registering or authenticating, the User allows this Website to identify him or her and give him or her access to dedicated services.
Depending on what is described below, registration and authentication services may be provided with the assistance of third parties. If this occurs, this Website may access some Data stored by the third-party service used for registration or identification.
Some of the services listed below may also collect Personal Data for targeting and profiling purposes; for more information, please refer to the description of each service.
Direct registration and profiling (this Website)
By registering or authenticating, Users allow this Website to identify them and provide them with access to dedicated services. The Data Controller may process the Data collected during registration or authentication for targeting and profiling purposes. To learn more, Users can contact the Data Controller using the contact details provided in this document.
Personal Data processed: ZIP/Postal code; Tax ID; last name; date of birth; Usage Data; email address; User ID; picture; profile picture; billing address; shipping address; physical address; language; house number; phone number; province; gender; state; username; various types of Data.
- Registration and authentication provided directly by this Website
By registering or authenticating, the User allows this Website to identify them and provide them with access to dedicated services. Personal Data is collected and stored solely for registration or identification purposes. The Data collected is only that necessary to provide the service requested by the User.
Direct registration (this Website)
The User registers by filling out the registration form and providing his/her Personal Data directly to this Website.
Personal Data processed: ZIP/Postal code; city; Tax ID; last name; date of birth; email address; User ID; picture; profile picture; billing address; physical address; language; country; first name; house number; phone number; prefix; province; gender; state; username; various types of Data.
- Remarketing and behavioral targeting
This type of service allows this Website and its partners to communicate, optimize, and serve advertisements based on the User's past use of this Website.
This activity is facilitated by tracking Usage Data and using Tracking Tools to collect information that is then transferred to partners who manage remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
Services of this type generally offer the option to disable this tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can learn more about how to disable interest-based advertising in the "How to disable interest-based advertising" section of this document.
Facebook Remarketing
Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of the Data, which connects the activity of this Website with the Facebook advertising network.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .
Klaviyo segmentation and social advertising (Klaviyo Inc.)
Klaviyo segmentation and social advertising is a remarketing and behavioral targeting service provided by Klaviyo Inc.
Klaviyo segmentation and social advertising uses tracking technology to monitor User behavior. This data is then used to personalize the User's experience and deliver targeted advertising. Klaviyo segmentation and social advertising may also connect the collected data with other networks, including advertising networks, enabling these third parties to track and target the User. The Owner, unless otherwise provided in this document, has no direct relationship with the third parties that Klaviyo segmentation and social advertising may include.
To use the service provided by Klaviyo, the Data Controller generally shares information about Users (who make purchases), such as contact information and purchase history. For further information regarding the scope of this sharing, please see the information below under the heading "Personal Data Processed."
Personal Data processed: purchase history; Usage Data; email address; device information; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt out .
Facebook Custom Audiences
Facebook Custom Audience is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of the Data, which connects the activity of this Website with the Facebook advertising network.
Users may opt out of using Facebook Tracking Tools for ads personalization by visiting this opt-out page .
Personal Data processed: email; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .
Remarketing with Google Analytics
Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which connects the tracking activity carried out by Google Analytics and its Tracking Tools with the Google Ads advertising network and the Doubleclick Cookie.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out Opt Out .
Google Ads Remarketing
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the data processing, which connects the activity of this website with the Google Ads advertising network and the DoubleClick Cookie.
To understand Google's use of data, please see Google's partner policy .
Users may opt out of using Google Tracking Tools for ads personalization by visiting Google's Ads Settings .
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .
- Platform and hosting services
These services are intended to host and operate key components of this website, enabling the provision of this website from a single platform. These platforms provide the Owner with a wide range of tools, such as analytics, user registration management, comment and database management, e-commerce, payment processing, etc. The use of these tools involves the collection and processing of Personal Data.
Some of these services operate through servers geographically distributed in different locations, making it difficult to determine the exact location where the Personal Data is stored.
WordPress.com (Automattic Inc.)
WordPress.com is a platform provided by Automattic Inc. that allows the Owner to develop, operate and host this Website.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy .
- Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.
Google Analytics
Google Analytics is a web analytics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller processes the data, (“Google”). Google uses the Personal Data collected to track and examine the use of this website, compile reports, and share them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .
Google Analytics with anonymized IP
Google Analytics is a web analytics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller processes the data, (“Google”). Google uses the Personal Data collected to track and examine the use of this website, compile reports, and share them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
This Google Analytics integration anonymizes your IP address. This anonymization works by shortening Users' IP addresses within European Union member states or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google's servers and shortened within the United States.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .
Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can provide the Owner with information on traffic and interactions on this Website.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy .
Facebook Ads Conversion Tracking (Facebook Pixel)
Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of the Data, which connects data from the Meta advertising network with actions performed within this Website. The Facebook pixel tracks conversions that can be attributed to Facebook, Instagram and Audience Network ads.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .
Google Analytics 4
Google Analytics is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages data processing, (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in any data center or server. To learn more, you can consult Google's official documentation .
Personal Data processed: device information; number of Users; session statistics; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .
Google Ads Conversion Tracking
Google Ads conversion tracking is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which connects data from the Google Ads advertising network with actions performed within this Website.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .
Google Analytics Demographics and Interests Reporting
Google Analytics Demographics and Interests Reporting is an advertising reporting feature that makes demographic and interest data available within Google Analytics for this website (demographics means age and gender data).
Users can opt out of Google's use of cookies by visiting Google's [Ads Settings] (https://adssettings.google.com/authenticated).
Personal Data processed: unique device identifiers for advertising (for example, Google Advertiser ID or IDFA); Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .
- Viewing content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service may still collect web traffic data relating to the pages where the service is installed, even when users do not use it.
Google Fonts
Google Fonts is a font display service managed by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .
Font Awesome (Fonticons, Inc.)
Font Awesome is a font visualization service managed by Fonticons, Inc. that allows this website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy .
Instagram Widget
Instagram is an image visualization service managed by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of the Data, which allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .
YouTube Video Widget
YouTube is a video content viewing service managed by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the data processing, which allows this website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .
Learn how to opt out of interest-based ads
In addition to any opt-out functions provided by any of the services listed in this document, Users can read more about how to opt out of interest-based advertising in the dedicated section of the Cookie Policy.
Further information on the processing of Personal Data
- Selling goods and services online
The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery. The Personal Data collected to complete the payment may include the credit card, the bank account used for the transfer, or other payment methods. The payment data collected by this Website depends on the payment system used.
User Rights
Users may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, the User has the right to:
- withdraw consent at any time. The User may withdraw consent to the processing of their Personal Data previously expressed.
- Object to the processing of your data. Users may object to the processing of their data when it occurs on a legal basis other than consent. Further details on the right to object are provided in the section below.
- Access your Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing, and to receive a copy of the processed Data.
- Verify and request rectification. The User can verify the accuracy of their Data and request its updating or correction.
- Obtain restriction of processing. When certain conditions apply, the User may request that the processing of their Data be restricted. In this case, the Data Controller will not process the Data for any purpose other than its storage.
- obtain the deletion or removal of their Personal Data. Under certain conditions, the User may request that the Data Controller delete their Data.
- Receive your Data or have it transferred to another controller. The User has the right to receive his or her Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred to another controller without hindrance. This provision applies when the Data is processed by automated means and the processing is based on the User's consent, on a contract to which the User is a party, or on contractual obligations related to it.
- File a complaint. The User may file a complaint with the competent data protection supervisory authority or take legal action.
Details on the right to object
When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are informed that, if their data is processed for direct marketing purposes, they can object to the processing without providing any justification. To find out whether the Data Controller processes data for direct marketing purposes, Users can refer to the relevant sections of this document.
How to exercise your rights
To exercise User rights, Users may direct a request to the Data Controller's contact details provided in this document. Requests are submitted free of charge and will be processed by the Data Controller as quickly as possible, in any case within one month.
Cookie Policy
This website uses tracking tools. To learn more, the User can consult the Cookie Policy.
Further information on treatment
Defense in court
The User's Personal Data may be used by the Data Controller in court or in the preparatory stages leading to possible legal action for the defense against abuse in the use of this Website or related Services by the User.
The User declares to be aware that the Data Controller may be required to disclose the Data by order of public authorities.
Specific information
Upon the User's request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For operational and maintenance purposes, this Website and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.
Information not contained in this policy
Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details.
Response to “Do Not Track” requests
This Website does not support “Do Not Track” requests.
To find out whether any third-party services used support them, the User is invited to consult their respective privacy policies.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website and, where technically and legally feasible, by sending a notification to Users via one of the contact details available to the Data Controller. Therefore, please check this page frequently, referring to the last modification date indicated at the bottom.
If the changes affect processing whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.
Definitions and legal references
Personal Data (or Data)
Personal data is any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
Usage Data
This information is collected automatically through this Website (including third-party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User who connects to this Website, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example, the time spent on each page) and the details relating to the path followed within the Application, with particular reference to the sequence of pages visited, the parameters relating to the operating system and the IT environment of the User.
User
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
Interested
The natural person to whom the Personal Data refers.
Data Controller (or Controller)
The natural person, legal person, public administration or any other entity that processes personal data on behalf of the Data Controller, as set out in this privacy policy.
Data Controller (or Owner)
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools used, including the security measures relating to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.
This Website (or this Application)
The hardware or software tool through which the Personal Data of Users is collected and processed.
Service
The Service provided by this Website as defined in the relevant terms (if any) on this site/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.
Cookie
Cookies are Tracking Tools that consist of small portions of data stored within the User's browser.
Tracking Tool
By Tracking Tool we mean any technology—e.g., cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting—that allows Users to be tracked, for example by collecting or storing information on the User's device.
Legal references
This privacy policy is drafted on the basis of multiple legislative provisions, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy policy applies exclusively to this Website.
Integrations
This information is provided by EV8 Style and in its capacity as data controller (hereinafter also “Company” or “Controller”) of the personal data acquired through the website mlsocks-sport.com, of which it is the owner, pursuant to the privacy and data protection regulations in force and taking into account the provisions of the Italian Data Protection Authority (hereinafter also “Guarantor”), Regulation (EU) 2016/679 (hereinafter also “Regulation”), Legislative Decree no. 196/2003 and subsequent amendments (hereinafter also “Privacy Code”) and, in general, the applicable reference legislation.
This information is provided to users who browse and use the services available on the website.
Your registration on the website is subject to your prior reading and acceptance of this privacy policy and your authorization for its processing.
Source and categories of data processed
The personal data that the Company may acquire will be acquired directly from the interested user who browses the website mlsocks-sport.com
The data processed may include, for example:
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could allow users to be identified. This category of data includes (i) the IP addresses or domain names of the computers used by users connecting to the site, (ii) the URI (Uniform Resource Identifier) addresses of the requested resources, (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numerical code indicating the status of the response given by the server (successful, error), and (vii) other parameters relating to the user's operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of this website and to check its correct functioning and is deleted immediately after processing.
This website uses technical, analytical, profiling cookies, both its own and third party,
Data provided voluntarily by the user
The optional, explicit and voluntary sending by the user who browses this website and interacts with it via
• The €10 discount form for you on the page https://www. mlsocks-sport.com/
• The site registration form, on the page https://www. mlsocks-sport.com/account/register
• The purchase form on the page https://www. mlsocks-sport.com/it/checkout/
• The return form on the page mlsocks-sport.com/pages/returns-and-refunds
• The contact form on the page mlsocks-sport.com/it/pages/contatti
involves the acquisition and processing by the Data Controller of such data and any other information contained in such communications for the purposes indicated in the following paragraph.
The data that may be processed are primarily identification, contact, and biographical data (for example, first and last name, home address, telephone number, email address, etc.). Under no circumstances will sensitive personal data (pursuant to Article 9 of the Regulation) or judicial data (pursuant to Article 10 of the Regulation) be processed.
Furthermore, for needs related to the operation or maintenance of this website, system logs may be processed, which are files that record interactions with the user and may also include personal data, including the user's IP address.
Full details on each type of data collected will be provided in the dedicated sections of this privacy policy or through specific information texts that the user can review before the data is collected.
Purpose of the processing
The processing of acquired personal data is carried out for:
a) establish the authentication profile required to access the site and therefore allow the user to register (including for the purpose of issuing a loyalty card), enforce the site's terms of use accepted during registration, enable the use of the services provided by this site (for example, the purchase of products, shipping of purchased products, and managing any returns) following user registration, and manage any requests made by the user via the website. The provision of data is, depending on the case, a contractual obligation or a pre-contractual measure adopted at the request of the interested party, and failure to provide such data will make it impossible for the Company to fully implement the above-mentioned obligations;
b) fulfill obligations under laws and regulations, or execute an order from a judicial authority or other authorities to which the Data Controller is subject. Providing data is a legal requirement, and failure to provide it will make it impossible for the Company to fully fulfill the obligations outlined above;
c) allow the Data Controller to conduct direct marketing activities, in order to provide the user with information on promotions, discounts, discounts, events, products, and other services offered by the Data Controller, including through the sending of specific advertising and/or informational materials (e.g., catalogs) in paper and/or electronic form, via newsletters (email) or other means (e.g., text messages, instant messaging). Providing data is optional and requires the user's prior, free, and specific consent. Failure to provide such data will make it impossible for the Company to carry out the marketing activities contemplated therein (and will not have any negative consequences on the ability to register or browse the website);
d) the collection, analysis of user behavior, profiling, recording, and processing of purchasing data, including details regarding the frequency, quantity, and type of purchases (even if only potential) for the purpose of analyzing purchasing propensity and, in general, user profiling to prepare and propose personalized promotions and offers, as well as for market analysis and research. Providing data is optional and requires the user's prior, free, and specific consent. Failure to provide such data will make it impossible for the Company to perform the profiling activities contemplated therein (and will not have any negative consequences on the ability to register or navigate the website).
e) the transfer of personal data to third parties operating in the [•] sector for marketing purposes, market research, or other sample surveys, to measure customer satisfaction, to receive informational, promotional, commercial, and advertising materials, or materials relating to competitions and initiatives, including through the sending of specific materials (e.g., catalogs, flyers) in paper and/or electronic form, via newsletters (e-mail) or other tools (instant messaging). The provision of data is optional and requires the user's prior, free, and specific consent. Failure to provide such data will make it impossible for the Company to perform the activities contemplated therein (and will not have any negative consequences on the ability to register or navigate the website).
f) allow the Data Controller to add the user's email address to a contact list after signing up for the newsletter or making a purchase through this site. This list may also receive emails containing information of a commercial and promotional nature. Providing data is optional and requires the user's prior, free, and specific consent. Failure to provide such data will make it impossible for the Company to perform the activities contemplated therein (and will not have any negative consequences on the ability to register or browse the website).
Legal basis for processing
The legal basis for data processing is based on the law, the performance of contractual obligations, or pre-contractual measures taken at the data subject's request, as well as any specific consent given by the data subject.
Data processing methods and data retention
Personal data will be processed primarily using computerized or electronic means, or, with regard to the use of personalized services through profiling, where consent is given, processing will be performed through an automated decision-making process using a specific algorithm that will determine which communications are best suited to the user's profile or which may be of greatest interest.
In any case, with reference to all the processing referred to herein, the Data Controller will adopt adequate security measures to guarantee the safety and confidentiality of your personal data, all in compliance with the provisions of current legislation.
In carrying out its processing activities, the Company undertakes, among other things, to:
• adopt suitable security measures to ensure adequate data protection, taking into account the potential impacts that the processing has on the fundamental rights and freedoms of the interested party;
• notify, within the timeframes and in the cases provided for by the applicable legislation, any violations of personal data to the interested parties;
• ensure that processing operations comply with applicable legal provisions.
The personal data of site users will be retained for the time strictly necessary to fulfill the primary purposes outlined in this policy, or in any case as necessary to protect the rights and interests of both users and the Company and, where applicable, until consent is revoked, which may occur at any time.
Specifically, the data will be processed in compliance with the timeframes established within the relevant procedure, which can be requested at privacy@.com
With specific reference to the transfer of data to third parties for the aforementioned purposes, please refer to the specific information provided by these third parties pursuant to Article 14 of the Regulation. In any case, the user is free to withdraw their consent at any time.
Scope of communication of personal data
In compliance with minimum security measures, the data may also be disclosed to public security entities and other public and private entities for the fulfillment of legal obligations.
Furthermore, personal data will not be disclosed. However, it may be shared with the following recipients:
• to companies that the Company uses to carry out technical and organizational tasks (for example but not limited to, companies that provide information system and communication network management services, maintenance and assistance services connected to the website);
• third-party companies operating in the review sector for marketing purposes;
• third-party firms or companies in the context of assistance and consultancy relationships;
• third-party companies that support the data controller for the delivery/delivery of purchases (i.e. couriers).
• third-party companies that allow user monitoring in a statistical and aggregate manner (e.g. GA4)
The entities belonging to the aforementioned categories act as Data Processors, or operate completely independently as separate Data Controllers.
Data processing will be carried out by the Data Controller's employees, specifically identified by the latter as authorized data processors, who have received adequate training.
In compliance with the conditions and guarantees established by the Regulation, data may be transferred to countries outside the European Economic Area, including, for example, the United States of America (USA), which do not offer a level of privacy and personal data protection comparable to that guaranteed by Italian and European laws. Such transfers may only occur with adequate guarantees or with the user's explicit consent.
Rights of the interested party
Data subjects have the right, at any time, to obtain confirmation as to whether or not personal data concerning them is being processed, and, where that is the case, to obtain access to the data and information referred to in Article 15 of the Regulation, to obtain a copy of such data, or to have it rectified (Articles 15 and 16 of the Regulation).
Furthermore, data subjects have the right to request erasure, restriction of processing, and data portability, as well as to lodge a complaint with the supervisory authority and to object, in any case, for legitimate reasons, to their processing (Article 17 et seq. of the Regulation), as well as, more generally, to exercise all the rights granted to them by applicable law.
You may deny or revoke your consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
These rights may be exercised by sending written communication to: [•]
OWNER AND DATA CONTROLLER
The data controller is
Company Name: ML SPORT SAS DI BARBETTA LORIS & C.
Store Name: ML SOCKS
Telephone Number: +39 3286792051
E-mail: info@mlsocks-sport.com
Company address: Viale G. Marconi 278, 65127 Pescara PE, Italy
VAT/Tax Code: 02432030688
Company number: PE - 434262
Owner's email address: mlsocks0098@gmail.com
A list of External Processors is available at the Data Controller's registered office.
Notice regarding children under 14 years of age
Minors under the age of 14 may not provide personal data. The Company will not be liable in any way for any collection of personal data, or for false statements provided by minors. In any case, if it becomes aware of such use, the Data Controller will facilitate the rights of access and deletion submitted by the legal guardian or the person exercising parental responsibility.
Privacy Policy of mlsocks-sport.com
To obtain information about your personal data collected, the purposes for which it is collected, and the parties with whom it is shared, please contact the Data Controller.
Data Controller
Company Name: ML SPORT SAS DI BARBETTA LORIS & C.
Store Name: ML SOCKS
Telephone Number: +39 3286792051
E-mail: info@mlsocks-sport.com
Company address: Viale G. Marconi 278, 65127 Pescara PE, Italy
VAT/Tax Code: 02432030688
Company number: PE - 434262
Owner's email address: mlsocks0098@gmail.com
Types of Data collected
The Data Controller does not provide a list of the types of Personal Data collected.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the Data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide such Data, it may be impossible for this Application to provide the Service. In cases where this Application indicates some Data as optional, Users are free to refrain from providing such Data, without this having any consequence on the availability or operation of the Service.
Users who have doubts about which data are mandatory are encouraged to contact the Data Controller.
Any use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application.
Method and place of processing of the collected data
Treatment methods
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using computer and/or electronic means, following organizational methods and procedures strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the operation of this Application (administrative, sales, marketing, legal, and system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, and communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may be requested from the Data Controller at any time.
Place
The Data is processed at the Data Controller's operating offices and in any other locations where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than their own. For further information on the place of processing, the User can refer to the section containing details on the processing of Personal Data.
Retention period
Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to any legal obligations or on the basis of the Users' consent.
Cookie Policy
This Application uses Tracking Tools. To learn more, Users can consult the Cookie Policy .
Further information for users in the European Union
This section applies to all users in the European Union, in accordance with the General Data Protection Regulation (GDPR) and, for such Users, supersedes any other information that may be divergent or conflicting in this privacy policy. Further details regarding the categories of data processed, the purposes of processing, the categories of recipients of personal data, if any, and additional information about personal data are available in the "Detailed information on the processing of personal data" section of this document.
Legal basis for processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- the User has given consent for one or more specific purposes; Note: Under some jurisdictions, the Data Controller may be authorized to process Personal Data without the User's consent or any other of the legal bases specified below, until the User objects to such processing ("opt-out"). However, this does not apply if the processing of Personal Data is regulated by European data protection legislation;
- processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
- processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
However, it is always possible to ask the Data Controller to clarify the specific legal basis for each processing operation and, in particular, to specify whether the processing is based on the law, provided for by a contract, or necessary to conclude a contract.
Learn more about retention time
Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to any legal obligations or on the basis of the Users' consent.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed.
- Personal Data collected for purposes related to the Data Controller's legitimate interest will be retained until such interest is fulfilled. Users may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User's consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.
User Rights
Users may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, within the limits established by law, the User has the right to:
- withdraw consent at any time. The User may revoke the consent to the processing of his/her Personal Data previously expressed.
- object to the processing of your data. The User may object to the processing of his/her Data when it occurs pursuant to a legal basis other than consent.
- access your data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the processed Data.
- verify and request rectification. The User can verify the accuracy of his/her Data and request its updating or correction.
- obtain restriction of processing. The User may request the restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than its storage.
- obtain the deletion or removal of your Personal Data. The User may request the Data Controller to delete his/her Data.
- receive your Data or have it transferred to another owner. The User has the right to receive his/her Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its transfer without hindrance to another owner.
- lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.
Users have the right to obtain information regarding the legal basis for the transfer of Data abroad, including to any international organization governed by international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Owner to protect their Data.
Details on the right to object
When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are informed that, if their Data is processed for direct marketing purposes, they can object to the processing at any time, free of charge and without providing any justification. If Users object to the processing for direct marketing purposes, their Personal Data will no longer be processed for such purposes. To learn whether the Data Controller processes Data for direct marketing purposes, Users can refer to the relevant sections of this document.
How to exercise your rights
To exercise their rights, Users may submit a request to the Data Controller's contact details indicated in this document. The request can be submitted free of charge, and the Data Controller will respond as quickly as possible, in any case within one month, providing the User with all the information required by law. Any rectification, erasure, or restriction of processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves a disproportionate effort. The Data Controller will inform the User of these recipients upon request.
Further information for users in Switzerland
This section applies to Users in Switzerland and, for such Users, supersedes any other information that may be divergent or conflicting in the Privacy Policy.
Further details regarding the categories of Data processed, the purposes of the processing, the categories of recipients of the personal data, if any, the retention period and other information on the Personal Data can be found in the section entitled "Detailed information on the processing of Personal Data" within this document .
User rights under the Federal Act on Personal Data Protection
Users may exercise certain rights relating to their data within the limits of the law, including the following:
- right of access to personal data;
- the right to object to the processing of your Personal Data (which also allows Users to request the restriction of the processing of Personal Data, the erasure or destruction of Personal Data, the prohibition of disclosure of Personal Data to third parties);
- right to receive your Personal Data and to transfer it to another data controller (data portability);
- right to request the rectification of incorrect Personal Data.
How to exercise these rights
Any requests to exercise User rights can be directed to the Data Controller using the contact details provided in this document. These requests are free of charge, and the Data Controller will respond as quickly as possible, providing Users with the information required by law.
Additional information for users in Brazil
This section of the document integrates and complements the information contained in the rest of the privacy policy and is provided by the entity that operates this Application and, if applicable, by its parent company and its subsidiaries and affiliates (for the purposes of this section collectively referred to as "we", "us" or "our").
This section applies to all Users in Brazil (such Users are referred to below simply as “you”, “your”, “yours” or “yours”), pursuant to the “Lei Geral de Proteção de Dados” and, for such Users, prevails over any other possibly divergent or conflicting information contained in this privacy policy.
This part of the document uses the term “personal information” as defined by LGPD .
Legal bases on which we process your personal information
We process your personal information only if one of the legal bases for such processing exists. The legal bases are as follows:
- your consent to the processing activities in question;
- compliance with legal obligations that we are required to meet;
- the execution of provisions dictated by laws or regulations or by contracts, agreements or other similar legal instruments;
- studies conducted by research institutions, preferably carried out on anonymized personal information;
- the performance of a contract and related pre-contractual obligations, if you are a party to such contract;
- the exercise of our rights in court, administrative proceedings or arbitration;
- your or a third party's physical safety or defense;
- health protection - in the context of procedures implemented by healthcare entities or professionals;
- our legitimate interests, provided that your fundamental rights and freedoms do not override those interests; and
- credit protection.
To learn more about the legal bases, you can contact us at any time using the contact details provided in this document.
Categories of personal information processed
To find out what categories of personal information are processed, you can refer to the "Details on the Processing of Personal Data" section in this document.
Why we process your personal information
To find out why we process your personal information, please refer to the “Details on the Processing of Personal Data” and “Purposes of Processing Collected Data” sections of this document.
Your privacy rights in Brazil, how to submit a request, and how we will handle it.
Your privacy rights in Brazil
You have the right to:
- obtain confirmation of the existence of processing activities concerning your personal information;
- access your personal information;
- obtain the rectification of your incomplete, inaccurate, or out-of-date personal information;
- obtain the anonymization, blocking or deletion of unnecessary or excessive personal information, or of information that is processed in violation of the provisions of the LGPD;
- obtain information regarding the possibility of giving or refusing your consent and the related consequences;
- obtain information about the third parties with whom we share your personal information;
- obtain, upon your explicit request, the portability of your personal information (except for anonymized information) to other product or service providers, provided that our commercial and industrial secrets are safeguarded;
- obtain the erasure of your personal information if the processing was carried out on the basis of your consent, unless one or more of the exceptions provided for in Article 16 of the GDPR apply;
- withdraw your consent at any time;
- lodge a complaint regarding your personal information with the ANPD (National Data Protection Authority) or a consumer protection body;
- object to processing activities in cases where such processing is not carried out in compliance with the provisions of the law;
- request clear and adequate information regarding the criteria and procedures used in automated decision-making processes; and
- Request a review of decisions that harm your interests, made solely on the basis of automated decision-making processes involving your personal information. This includes decisions profiling your personal, professional, consumer, or credit profile, or other aspects of your personality.
You will never be discriminated against, nor will you suffer any unfavorable treatment in any way, as a result of exercising your rights.
How to submit a request
You can submit an explicit request to exercise your rights free of charge, at any time, using the contact details provided in this document or through your legal representative.
How and when will we handle your request?
We will do our best to respond to your request as soon as possible.
In any case, if we are unable to do so, we will ensure we communicate the factual or legal reasons preventing us from immediately fulfilling or following up on your request. If we are unable to process your personal information, we will, if we are able to do so, indicate the natural or legal person to whom you should address your requests.
In case you decide to submit a request for access or a request for confirmation of the existence of the treatment of personal information, please be sure to specify whether you prefer to receive your personal information in electronic or paper format.
You will also need to let us know whether you require an immediate response, in which case you will receive a simplified response, or whether you require complete information.
In the latter case, we will respond within 15 days of your request, providing you with all the information regarding the source of your personal information, confirmation of whether or not personal information concerning you exists, all the criteria used for processing and the purposes of such processing, while safeguarding our commercial and industrial secrets.
In case you decide to submit a request for If you wish to rectify, erase, anonymize, or block your personal information , we will ensure that we immediately inform other parties with whom we have shared your personal information of your request so that they can also comply with your request – except where such communication is impossible or involves disproportionate effort for us.
Transfer of personal information outside of Brazil where permitted by law
We may transfer your personal information outside of Brazil in the following cases:
- when the transfer is necessary for international legal cooperation between intelligence services, investigative and criminal procedural bodies, as provided for by the instruments made available by international law;
- when the transfer is necessary to protect your life or physical safety or that of third parties;
- when the transfer is authorized by the ANPD;
- where the transfer arises from an obligation undertaken in the context of an international cooperation agreement;
- when the transfer is necessary for the exercise of public order or for the performance of a public service;
- when the transfer is necessary for the fulfillment of a legal obligation, the execution of a contract and related pre-contractual obligations, or the normal exercise of rights in judicial, administrative or arbitration proceedings.
Future information for California consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the state of California, United States of America, according to the " California Consumer Privacy Act of 2018 " (the "CCPA"), as updated by the "California Privacy Rights Act" (the "CPRA") and subsequent regulations. For such consumers, this section supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal information” as defined in the California Consumer Privacy Act (CCPA/CPRA).
Notice at collection
Categories of personal information collected, used, sold, or shared
In this section we summarize the categories of personal information that we've collected, used, sold, or shared and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Personal Data” within this document.
Information we collect: the categories of personal information we collect
We have collected the following categories of personal information about you: .
We do not collect sensitive personal information.
We will not collect additional categories of personal information without notifying you.
What are the purposes for which we use your personal information?
We may use your personal information to allow the operational functioning of this Application and features thereof (“business purposes”). In such cases, your personal information will be processed in a fashion necessary and proportionate to the business purpose for which it was collected, and strictly within the limits of compatible operational purposes.
We may also use your personal information for other reasons such as for commercial purposes (as indicated within the section “Detailed information on the processing of Personal Data” within this document), as well as for complying with the law and defending our rights before the competent authorities where our rights and interests are threatened or we suffer an actual damage.
We won't process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent.
How long do we keep your personal information?
Unless stated otherwise inside the “Detailed information on the processing of Personal Data” section, we will not retain your personal information for longer than is reasonably necessary for the purpose(s) they have been collected for.
How we collect information: what are the sources of the personal information we collect?
We collect the above-mentioned categories of personal information, either directly or indirectly, from you when you use this Application.
For example, you directly provide your personal information when you submit requests via any forms on this Application. You also provide personal information indirectly when you navigate this Application, as personal information about you is automatically observed and collected.
How we use the information we collect: disclosure of your personal information with third parties for a business purpose
We do not disclose your personal information to third parties. For our purposes, the word “third party” means “a person who is not any of the following: a service provider or a contractor, as defined by the CCPA.
No sale of your personal information
We do not sell or share your personal information. In case we should decide to, we will inform you before hand and will grant your right to opt out of such sale.
Your privacy rights under the California Consumer Privacy Act and how to exercise them
The right to access personal information: the right to know and to portability
You have the right to request that we disclose to you:
- the categories of personal information that we collect about you;
- the sources from which the personal information is collected;
- the purposes for which we use your information;
- to whom we disclose such information;
- the specific pieces of personal information we have collected about you.
You also have the right to know what personal information is sold or shared and to whom. In particular, you have the right to request two separate lists from us where we disclose:
- the categories of personal information that we sold or shared about you and the categories of third parties to whom the personal information was sold or shared;
- the categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
The disclosure described above will be limited to the personal information collected or used over the past 12 months.
If we deliver our response electronically, the information enclosed will be "portable", i.e. delivered in an easily usable format to enable you to transmit the information to another entity without hindrance — provided that this is technically feasible.
The right to request the deletion of your personal information
You have the right to request that we delete any of your personal information, subject to exceptions set forth by the law (such as, including but not limited to, where the information is used to identify and repair errors on this Application, to detect security incidents and protect against fraudulent or illegal activities, to exercise certain rights etc.).
If no legal exception applies, as a result of exercising your right, we will delete your personal information and notify any of our service providers and all third parties to whom we have sold or shared the personal information to do so — provided that this is technically feasible and doesn't involve disproportionate effort.
The right to correct inaccurate personal information
You have the right to request that we correct any inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
The right to opt out of sale or sharing of personal information and to limit the use of your sensitive personal information
You have the right to opt out of the sale or sharing of your personal information. You also have the right to request that we limit our use or disclosure of your sensitive personal information.
The right of no retaliation following opt-out or exercise of other rights (the right to non-discrimination)
We will not discriminate against you for exercising your rights under the CCPA. This means that we will not discriminate against you, including, but not limited to, by denying goods or services, charging you a different price, or providing a different level or quality of goods or services just because you exercised your consumer privacy rights.
However, if you refuse to provide your personal information to us or ask us to delete or stop selling your personal information, and that personal information or sale is necessary for us to provide you with goods or services, we may not be able to complete that transaction.
To the extent permitted by the law, we may offer you promotions, discounts, and other deals in exchange for collecting, keeping, or selling your personal information, provided that the financial incentive offered is reasonably related to the value of your personal information.
How to exercise your rights
To exercise the rights described above, you need to submit your verifiable request to us by contacting us via the details provided in this document.
For us to respond to your request, it's necessary that we know who you are. Therefore, you can only exercise the above rights by making a verifiable request which must:
- provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative;
- describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We will not respond to any request if we are unable to verify your identity and therefore confirm the personal information in our possession actually relates to you.
Making a verifiable consumer request does not require you to create an account with us. We will use any personal information collected from you in connection with the verification of your request solely for the purposes of verification and shall not further disclose the personal information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.
If you cannot personally submit a verifiable request, you can authorize a person registered with the California Secretary of State to act on your behalf.
If you are an adult, you can make a verifiable request on behalf of a child under your parental authority.
You can submit a maximum number of 2 requests over a period of 12 months.
How and when we are expected to handle your request
We will confirm receipt of your verifiable request within 10 days and provide information about how we will process your request.
We will respond to your request within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Our disclosure(s) will cover the preceding 12-month period. Only with regard to personal information collected on or after January 1, 2022, you have the right to request that we disclose information beyond the 12-month period, and we will provide them to you unless doing so proves impossible or would involve a disproportionate effort.
Should we deny your request, we will explain to you the reasons behind our denial.
We do not charge a fee to process or respond to your verifiable request unless such request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind it.
Further information for Virginia consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the Commonwealth of Virginia, according to the “Virginia Consumer Data Protection Act" (the "VCDPA"), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the VCDPA.
Categories of personal data processed
In this section, we summarize the categories of personal data that we've processed and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Persona Data” within this document .
Categories of personal data we collect
We have collected the following categories of personal data:
We do not collect sensitive data.
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.
We won't process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent.
You can freely give, deny, or withdraw such consent at any time using the contact details provided in this document.
How we use the data we collect: sharing of your personal data with third parties
We do not share nor disclose your personal data with third parties.
Sale of your personal data
We do not sell your personal data. In case we should decide to, we will inform you before hand and will grant your right to opt out of such sale.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you before hand and will grant your right to opt out of the processing of your personal data for targeted advertising.
Your privacy rights under the Virginia Consumer Data Protection Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
- access personal data: the right to know. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
- correct inaccurate personal data. You have the right to request that we correct any inaccurate personal data we maintain about you, taking into account the nature of the personal data and the purposes of the processing of the personal data.
- request the deletion of your personal data. You have the right to request that we delete any of your personal data.
- obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity — provided that this is technically feasible.
- opt out of the processing of your personal data for the purposes of targeted advertising , the sale of personal data , or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- non-discrimination. We will not discriminate against you for exercising your rights under the VCDPA. This means that we will not, among other things, deny goods or services, charge you a different price, or provide a different level or quality of goods or services just because you exercised your consumer privacy rights. However, if you refuse to provide your personal data to us or ask us to delete or stop selling your personal data, and that personal data or sale is necessary for us to provide you with goods or services, we may not be able to complete that transaction. To the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if you have exercised your right to opt out, or our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us. However, we may require you to use your existing account. We will use any personal data collected from you in connection with your request solely for the purposes of authentication, without further disclosing the personal data, retaining it longer than necessary for purposes of authentication, or using it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this document. Within 60 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact the Attorney General to submit a complaint .
We do not charge a fee to respond to your request, for up to two requests per year. If your request is manifestly unfounded, excessive or repetitive, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.
Further information for Colorado consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Colorado, according to the “Colorado Privacy Act" (the "CPA"), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the CPA.
Categories of personal data processed
In this section, we summarize the categories of personal data that we've processed and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Persona Data” within this document .
Categories of personal data we collect
We have collected the following categories of personal data:
We do not collect sensitive data.
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.
We won't process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent.
You can freely give, deny, or withdraw such consent at any time using the contact details provided in this document.
How we use the data we collect: sharing of your personal data with third parties
We do not share nor disclose your personal data with third parties.
For our purposes, the word "third party" means "a natural or legal person, public authority, agency, or body other than the consumer, controller, processor, or an affiliate of the processor or the controller" as defined by the VCDPA.
For our purposes, the word "third party" means "a person, public authority, agency, or body other than a consumer, controller, processor, or affiliate of the processor or the controller." as defined by the CPA.
Sale of your personal data
We do not sell your personal data. In case we should decide to, we will inform you before hand and will grant your right to opt out of such sale.
For our purposes, the word "sale", "sell", or "sold" means "the exchange of personal data for monetary or other valuable consideration by a controller to a third party" as defined by the CPA.
Please note that according to the CPA, the disclosure of personal data to a processor that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the CPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you before hand and will grant your right to opt out of the processing of your personal data for targeted advertising.
For our purposes, the word "targeted advertising" means "displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer's activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests" as defined by CPA.
Please note that according to the CPA, targeted advertising does not include: "advertisements directed to a consumer in response to the consumer's request for information or feedback; advertisements based on activities within a controller's own websites or online applications or any affiliated website or online application; advertisements based on the context of a consumer's current search query, visit to an internet web site or online application; or processing personal data solely to measure or report advertising frequency, performance or reach".
Your privacy rights under the Colorado Privacy Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
- opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- access personal data. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
- correct inaccurate personal data. You have the right to request that we correct any inaccurate personal data we maintain about you, taking into account the nature of the personal data and the purposes of the processing of the personal data.
- request the deletion of your personal data. You have the right to request that we delete any of your personal data.
- obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service. However, to the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us. However, we may require you to use your existing account. We will use any personal data collected from you in connection with your request solely for the purposes of authentication, without further disclosing the personal data, retaining it longer than necessary for purposes of authentication, or using it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this document. Within 45 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact the Attorney General to submit a complaint.
We do not charge a fee to respond to your request, for up to two requests per year.
Further information for Connecticut consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Connecticut, according to “An Act Concerning Personal Data Privacy and Online Monitoring " (also known as "The Connecticut Data Privacy Act" or the “CTDPA”), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the CTDPA.
Categories of personal data processed
In this section, we summarize the categories of personal data that we've processed and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Persona Data” within this document .
Categories of personal data we collect
We have collected the following categories of personal data:
We do not collect sensitive data.
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.
We won't process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent.
You can freely give, deny, or withdraw such consent at any time using the contact details provided in this document.
How we use the data we collect: sharing of your personal data with third parties
We do not share nor disclose your personal data with third parties.
For our purposes, the word "third party" means "a person, public authority, agency, or body other than a consumer, controller, processor, or affiliate of the processor or the controller." as defined by the CTDPA.
Sale of your personal data
We do not sell your personal data. In case we should decide to, we will inform you before hand and will grant your right to opt out of such sale.
For our purposes, the word "sale", "sell", or "sold" means "the exchange of personal data for monetary or other valuable consideration by a controller to a third party" as defined by the CTDPA.
Please note that according to the CTDPA, the disclosure of personal data to a processor that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the CTDPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and will grant your right to opt out of the processing of your personal data for targeted advertising.
For our purposes, the word "targeted advertising" means "displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer's activities across non-affiliated websites, applications, or online services to predict consumer preferences or interests" as defined by CTDPA.
Please note that according to the CTDPA, targeted advertising does not include: “advertisements based on activities within a controller's own web sites or online applications; advertisements based on the context of a consumer's current search query, visit to an internet web site or online application; advertisements directed to a consumer in response to the consumer's request for information or feedback; or processing personal data solely to measure or report advertising frequency, performance or reach”.
Your privacy rights under the Connecticut Data Privacy Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
- access personal data. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
- correct inaccurate personal data. You have the right to request that we correct any inaccurate personal data we maintain about you, taking into account the nature of the personal data and the purposes of the processing of the personal data.
- request the deletion of your personal data. You have the right to request that we delete any of your personal data.
- obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible.
- opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service. However, to the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us. However, we may require you to use your existing account. We will use any personal data collected from you in connection with your request solely for the purposes of authentication, without further disclosing the personal data, retaining it longer than necessary for purposes of authentication, or using it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this document. Within 45 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may contact the Attorney General to submit a complaint .
We do not charge a fee to respond to your request, for up to one request per year.
Further information for Utah consumers
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the State of Utah, according to the “Consumer Privacy Act" (the “UCPA”), and, for such consumers, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the UCPA.
Categories of personal data processed
In this section, we summarize the categories of personal data that we've processed and the purposes thereof. You can read about these activities in detail in the section titled “Detailed information on the processing of Persona Data” within this document .
Categories of personal data we collect
We have collected the following categories of personal data:
We do not collect sensitive data.
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.
How we use the data we collect: sharing of your personal data with third parties
We do not share nor disclose your personal data with third parties.
For our purposes, the word "third party" means "a person other than: the consumer, controller, or processor; or an affiliate or contractor of the controller or the processor" as defined by the UCPA.
Sale of your personal data
We do not sell your personal data. In case we should decide to, we will inform you before hand and will grant your right to opt out of such sale.
For our purposes, the word "sale", "sell", or "sold" means "the exchange of personal data for monetary or other valuable consideration by a controller to a third party" as defined by the UCPA.
Please note that according to the UCPA, the disclosure of personal data to a processor that processes personal data on behalf of a controller does not constitute a sale. In addition, other specific exceptions set forth in the UCPA may apply, such as, but not limited to, the disclosure of personal data to a third party for the provision of a product or service requested by you.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and will grant your right to opt out of the processing of your personal data for targeted advertising.
For our purposes, the word "targeted advertising" means "displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer's activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests" as defined by UCPA.
Please note that according to the UCPA, targeted advertising does not include: "advertisements based on activities within a controller's own websites or online applications or any affiliated website or online application; advertisements based on the context of a consumer's current search query, visit to an web site or online application; advertisements directed to a consumer in response to the consumer's request for information, product, a service or feedback; or processing personal data solely to measure or report advertising performance, reach or frequency."
Your privacy rights under the Utah Consumer Privacy Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
- access personal data. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
- request the deletion of your personal data. You have the right to request that we delete any of your personal data.
- obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible.
- opt out of the processing of your personal data for the purposes of targeted advertising or the sale of personal data.
In any case, we will not increase the cost of, or decrease the availability of, a product or service, based solely on the exercise of any of your rights and unrelated to the feasibility or the value of a service. However, to the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are and which right you wish to exercise.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relate to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request. We may retain your email address to respond to your request.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request.
We do not charge a fee to respond to your request, for up to one request per year.
Further information on treatment
Defense in court
The User's Personal Data may be used by the Data Controller in court or in the preparatory stages leading to possible legal action for the defense against abuse in the use of this Application or related Services by the User.
The User declares to be aware that the Data Controller may be required to disclose the Data by order of public authorities.
Specific information
Upon the User's request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For operational and maintenance purposes, this Application and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.
Information not contained in this policy
Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Application and, where technically and legally feasible, by sending a notification to Users via one of the contact details available to the Data Controller. Therefore, please check this page frequently, referring to the date of the last modification indicated at the bottom.
If the changes affect processing whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.