Privacy Policy – Eataliano

Privacy Policy

Hello and welcome to eataliano.lu. This website is operated by Eataliano, S.à r.l.-S. Throughout the site, the terms ”Eataliano”, “we”, “us” and “our” refer to Eataliano, S.à r.l.-S.

We care deeply about your privacy. Below you will find information about how we process your personal data when you are using our website. This includes any information relating to an identified or identifiable natural person, including name, address, email address and others.

 

WHO IS THE DATA CONTROLLER?

Eataliano, S.à r.l.-S is the data controller within the meaning of Article 4 (7) of the EU General Data Protection Regulation (GDPR).

 

WHAT IF YOU CONTACT US VIA EMAIL?

When you contact us via email, it is necessary to process the data you share with us (e.g. email address, name, address) in order to respond to your inquiry. We will delete this data when it is no longer necessary to the response. However, there are instances where we are required by law to maintain your data for a certain period of time. In such cases we will limit the processing of your data to the purpose defined by the law.

 

HOW WE USE SERVICE PROVIDERS FOR PROCESSING YOUR DATA ON OUR BEHALF

For individual features of our services it can be necessary to employ external service providers (data processors) with the processing of your data. We have carefully selected and commissioned these service providers. Our instructions are binding for them and we regularly review their compliance. Below we will describe in detail when we rely on service providers, the relating storage period criteria and if they are operating outside the European Economic Area (EEA).

 

SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. To prevent unauthorised access, maintain data accuracy, and ensure the correct use of information, we and our third party provides have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

 

YOUR RIGHTS

Relating to the processing of your personal data you have the right to request from us access to and rectification or erasure of your personal data or restriction of processing concerning your data or to object to processing of your data as well as the right to data portability. Furthermore, you have the right to lodge a complaint with a competent supervisory authority.

 

OUR ONLINE SHOP

When you order something from our online shop, it is necessary for us to collect and process your information. Information necessary for contractual purposes are specified as such but you can voluntarily provide further information to help us provide a better service for you.

Your personal data is processed to complete the order and deliver the product(s) to you. We forward your delivery address to our external delivery service provider in order to have your product(s) delivered to you.

While processing your payment we forward your payment details to one of our external payment service providers.

During checkout you can choose PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) to make a payment. Doing so will redirect you to a PayPal Website to complete the payment process. PayPal will collect and process your personal data according to their privacy policy.

By selecting PayPal as payment method and continuing with the checkout you consent to forwarding payment related personal information to PayPal for this purpose. Please take note of their privacy policy available under:

//www.paypal.com/uk/webapps/mpp/ua/privacy-full

 

We can further use the information you provided during checkout to inform you about our other products that might be of interest to you or to send you technical information via email.

You can voluntarily create an online account to maintain your data (e.g. name, delivery address, e-mail address, orders, invoices) for further shopping. If you create an account during checkout or under “Login” on our website your personal data will be stored on servers hosted by our external service providers.

We are legally required to maintain your payment, order and address information for the duration of ten years. If applicable and necessary we restrict the processing of your data so that it will only be used to comply with these legal requirements. You can delete any other personal data, including your online store account, at any time by sending an email to hello@eataliano.lu.

Legal basis for processing of this data is Article 6 (1) (b) GDPR.

 

COOKIES

Our website uses cookies, to help provide you with the best experience. Cookies are small text files that are placed on your device when you browse our website. At any time, you can delete cookies placed by us or configure in detail how cookies are placed on your device by adjusting your browser settings. There you can choose to stop accepting third-party cookies or all cookies. Doing so however will likely limit the functionality of our website.

Our website uses different kinds of cookies (transient / persistent). Transient cookies or session cookies are automatically deleted from your device after you end your session, when you log out or when you close your browser. Persistent cookies are automatically deleted only after a certain period of time has passed or when you actively delete them in your browsers setting.

Our own cookies make our website work. This includes making our shopping cart and checkout work and determining if you are logged in or not as well as remembering your settings and preferences.

Individual features of our website are provided by third parties using third-party cookies. You can configure how your browser stores or rejects third party cookies in your browser settings.

 

GOOGLE ANALYTICS

Our website uses Google Analytics, a web analytics service by Google Inc. / Google Ireland Ltd. („Google“). Google Analytics uses cookies to analyse how you use our website. This information is usually transferred to and stored on a Google server, usually located in the USA.

This website activated the _anonymizeip feature. This prevents the storage of your full IP address. Therefore, this information cannot be used by us or Google to identify you personally. The information generated in this process is used by Google on our behalf to analyse and show us how our visitors interact with our site. This helps us to pursue our legitimate interests to improve our website and your user experience.

You can prevent Google from including your visit to our site in its analysis by installing the following browser add-on by Google:

//tools.google.com/dlpage/gaoptout?hl=de

 

Legal basis for using Google Analytics is Article 6 (1) (f) GDPR.

Google Analytics:

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Terms & Conditions:

//www.google.com/analytics/terms/

Privacy Policy:

//policies.google.com/privacy

Google is EU-US Privacy Shield certified:

//www.privacyshield.gov/EU-US-Framework

 

FACEBOOK REMARKETING

Our website uses Facebook Remarketing (Facebook Pixel, Custom Audiences, Conversion), a service by Facebook Inc. / Facebook Ireland Ltd. („Facebook“).

 

With the use of Facebook Remarketing we pursue our legitimate interest to only display advertisement to you that is relevant and to optimise our website and services to make them more interesting to you.

Facebook Remarketing enables us to include our visitors in our Facebook Ads campaigns. When you already expressed interest in our website or similar services, Facebook Remarketing enables us to display only Facebook Ads relevant to you (Custom Audience from website).

Furthermore, Facebook Remarketing helps us to track the effectiveness of our advertisement for statistical and market research purposes by showing us if a visitor is referred to our website by a Facebook Ad (Conversion).

 

Because of the implementation of Facebook Remarketing on our website (Facebook Pixel), your browser will automatically and directly connect to a Facebook server. We do not have any control about how Facebook uses the collected data in detail. Therefore, we inform you about what we know: Facebook knows that you visited a certain website or that you clicked on a certain Facebook Ad. When you are a registered Facebook user, Facebook can relate this information to your personal account. When you are not a Facebook user or you are logged out, Facebook might collect and store your IP address or other identifying factors.

Please also consult Facebook’s privacy policy to understand how Facebook uses your data.

 

If you do not want Facebook to collect your data on our website, you can deactivate the Facebook Remarketing feature in your Facebook settings.

 

Legal basis for using Facebook Remarketing is Article 6 (1) (f) GDPR.

Facebook Remarketing:

Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Privacy Policy:

//www.facebook.com/privacy/

Privacy settings for Facebook users:

//www.facebook.com/settings/?tab=ads#

Facebook is EU-US-Privacy-Shield certified:

//www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

 

JETPACK

Our website uses Jetpack, a web analytics service by Automattic Inc. / Aut O’Mattic A8C Ireland Ltd. („Automattic“). We use Jetpack for activity logging and statistics. To deliver this functionality and record activities around site management, the following information is captured: user email address, user role, user login, user display name, WordPress.com and local user IDs, the activity to be recorded, the WordPress.com-connected site ID of the site on which the activity takes place, the site’s Jetpack version, and the timestamp of the activity. Some activities may also include the actor’s IP address (login attempts, for example) and user agent. This information is usually transferred to and stored on a Automattic server, usually located in the USA. For the statistics the following information is recorded: IP address, WordPress.com user ID (if logged in), WordPress.com username (if logged in), user agent, visiting URL, referring URL, timestamp of event, browser language, country code. Stats logs — containing visitor IP addresses and WordPress.com usernames (if available) — are retained by Automattic for 28 days and are used for the sole purpose of powering this feature.

Automattic also utilise cookies to provide site stats to us. This cookie tallies the unique numbers of visitors to our site, as well as the number from specific geographic locations.

Legal basis for using Jetpack is Article 6 (1) (f) GDPR.

Jetpack:

Aut O’Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland

Privacy Policy:

//automattic.com/privacy/

Automattic is EU-US-Privacy-Shield certified:

//www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC&status=Active

 

HOTJAR

Our website uses Hotjar, a web analytics service by Hotjar Limited (“Hotjar“). Hotjar is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device's IP address (captured and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user.

You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link:

//www.hotjar.com/legal/compliance/opt-out

Legal basis for using Hotjar is Article 6 (1) (f) GDPR.

Hotjar:

Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta

Privacy Policy:

//www.hotjar.com/legal/policies/privacy

 

DATA AUTOMATICALLY SUBMITTED BY YOUR BROWSER.

If you are simply visiting our website and therefore don’t intently submit information to us (e.g. through a contact form), we also process certain personal data that your browser submits to our servers. For hosting our website, we employ an external hosting service provider.

In that case we process the following data pursuing our legitimate interest of being technically able to display our site to you and ensure its stability and security:

- IP address

- Date and time of the request

- Time zone difference to Greenwich Mean Time (GMT)

- Content of the request (specific site)

- State of transfer / HTTP access status

- Transferred data volume

- Referring Website (request origin)

- Browser (type/version/language)

- Operating system

We will delete this data after a set period of days.

Legal basis for this processing of data is Article 6 (1) (f) GDPR.

 

NEWSLETTER

When you subscribe to our email newsletter you consent to receiving information about our current offers that might be of interest to you. The categories of goods and services advertised are specified in your declaration of consent.

We use a double opt-in procedure during our subscription process. After your sign-up we will send you an email asking you to confirm your email address and your consent. If you do not confirm, your data will be deleted automatically.

For our newsletter the only mandatory information is your email address, first and last name. After your confirmation we will maintain your e-mail address and further information you provided. Furthermore, we will maintain the IP address used at time of subscription and confirmation. This is used to substantiate your subscription and consent and detect a potential misuse of your personal data.

You can withdraw your consent to receiving our newsletter at any time by sending an e-mail to hello@eataliano.lu.

For sending our newsletter we employ an external email newsletter service provider located in the USA. The service provider is certified under the EU-US Privacy Shield Framework and has entered a data processing agreement with us.

Legal basis for this processing of data is Article 6 (1) (a) GDPR.

 

OUR SOCIAL MEDIA

On our website we provide you with links to our following social media sites:

- Facebook

- Instagram

- Twitter

When you follow one of the links to our social media accounts you leave our website. Therefore, we do not have control about data processing on these external platforms. We neither know for certain the scope of the data collection, the purpose of its processing nor how long it will be stored or when they will be deleted. Usually the servers of these platforms are located in the USA.

For further information on this we would like to refer you to the platforms and their privacy policies. There you will also find information on how to adjust your privacy settings on these platforms and possibilities to opt-out:

 

Facebook

Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Privacy Policy:

//www.facebook.com/privacy/

Facebook is EU-US-Privacy-Shield certified:

//www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Opt-Out:

//www.facebook.com/settings?tab=ads

 

Instagram

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Privacy Policy:

//help.instagram.com/155833707900388

Facebook is EU-US-Privacy-Shield certified:

//www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Opt-Out:

//www.instagram.com/accounts/privacy_and_security/

 

Twitter

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland

Privacy Policy:

//twitter.com/en/privacy

Twitter is EU-US-Privacy-Shield certified:

//www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Opt-Out:

//twitter.com/settings/account

 

RIGHT TO OBJECT / WITHDRAWAL OF CONSENT

In case you consented to the processing of your personal data you can withdraw your consent at any time. Your withdrawal will have an influence on our permission to process your data.

In case we base the processing of your personal data on a balance of interest in the meaning of Article 6 (1) (f) GDPR you have the right to object to our processing of your data. This is especially the case when the processing is not necessary to perform a contract. When you object to the processing of your personal data we need to ask you to state the reason for your objection. When your objection is reasonable we will cease to process your personal data or adapt the processing accordingly. Alternatively, we will state our reasons why we think further processing of your personal data is legitimate.

 

Of course, you are able to object to the processing of your personal data for the purpose of advertising or data analysis at any time.

Please inform us about an objection by contacting us via email (hello@eataliano.lu) or using the opt-out mechanisms described in this privacy policy.

 

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

 

CONTACT DETAILS

If you would like to access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information then please contact us at hello@eataliano.lu.

Quick Links

Home

Shop

About Us

Contact

Get in touch

Follow us

0
Your Shopping Cart