Privacy Policy

I - INFORMATION RELATING TO THE SITE'S PRIVACY POLICY

1. This section describes how the website is managed. www.neibacshop.com regarding the processing of personal data of users who consult it. Data processing is carried out in compliance with the criteria set forth in the European General Data Protection Regulation (GDPR) 2016/679/EU, and any other related national legislation, provision, or authorization from the competent authority. Pursuant to the aforementioned legislation, processing must be based on the principles of fairness, lawfulness, and transparency, and must protect your privacy and rights.

2. This information applies only to this site and not to other websites that may be accessed via links contained therein.

3.  The purpose of this document is to provide information regarding the methods, timing, and nature of the information that data controllers must provide to users when they connect to the web pages of this site, regardless of the purpose of the connection itself, in accordance with Italian and European legislation.

4. This information may be subject to changes due to the introduction of new regulations in this regard, so users are invited to check this page periodically.

5.  If the user is under 16 years of age, pursuant to art. 8, paragraph 1 of EU Regulation 2016/679, he or she must legitimize his or her consent through the authorization of his or her parents or legal guardians.

II - DATA PROCESSING

1 - Data Controller

1. The data controller is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. It also deals with security aspects.

2 - Data processing location

1. The processing operations related to this site's web services take place at the aforementioned Company headquarters (see the section on data controller) and are handled by Company staff and/or duly appointed external maintenance and update personnel. No data deriving from the web service is communicated or disseminated.

2. The User's Personal Data may be transferred to a country other than the one in which the User is located. For further information on the place of processing, the User can refer to the section containing details on the processing of Personal Data.

3 - Data retention period

The Data is processed and stored for the time required by the purposes for which it was collected and for a maximum period of 10 years thereafter, unless deletion is requested according to the methods set out in point 4.

Therefore:

1. Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed.

2. Personal Data collected for purposes related to the Data Controller's legitimate interest will be retained until such interest is fulfilled. Users may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User's consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.

4 - Data processing methods

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. 

Processing is carried out using computer and/or electronic means, following organizational methods and procedures strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the operation of this Application (administrative, sales, marketing, legal, and system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, and communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may be requested from the Data Controller at any time.

5 - Purpose of data processing

The personal data provided by users while browsing the website will be processed for aggregate statistical purposes in anonymous form relating to the data present in the cookies saved on the user's device. 

However, processing of information requests from the contact block will be carried out for the sole purpose of providing the requested service.

The processing related to newsletter subscription, on the other hand, is intended to send informative and promotional communications relating to the company's own initiatives and/or those of its subsidiaries and/or affiliates.

Users can unsubscribe from the newsletter free of charge at any time by sending an email to the address indicated in point 1. (Data Controller) or by using the appropriate button at the bottom of each newsletter received.

6 -  Types of data processed

1. Browsing dataThe computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.  This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.  This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.  This data is used on this site solely for the purpose of obtaining anonymous statistical information on site usage and to monitor its proper functioning. The data could be used to ascertain liability in the event of hypothetical computer crimes against the site. Consent is not required for this data, and only for the aforementioned purpose.

2. Data provided voluntarily by the user The optional, explicit, and voluntary sending of emails to the addresses listed on this site or the completion of forms in specific sections with mandatory and optional fields entails the subsequent acquisition of the sender's information and address, which is necessary to respond to requests for services and/or information. For this data, and limited to the aforementioned purpose, consent is not required. 

3. Cookies No personal data of users is acquired by the site in this regard.  Cookies are not used to transmit personal information, nor are they used c.dpersistent cookies of any kind, or systems for tracking users. The use of c.dThe use of session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable safe and efficient exploration of the site.

7 - Rights of interested parties 

Users have the rights set forth in Articles 15-21 of European Regulation 2016/679 (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object). Specifically:

• The right of access: to obtain confirmation whether or not personal data concerning you are being processed and to obtain access to such data and to specific information (e.g. purposes of the processing, categories of data in question, the recipients to whom the data will be communicated);

• The right to rectification: to obtain the rectification of inaccurate data concerning you without undue delay. In this case, the data controller is obliged to communicate the rectification to all recipients to whom the data has been disclosed, unless this involves a disproportionate effort;

• The right to erasure: to obtain the erasure of data concerning you without undue delay, and the data controller is obliged to erase such data without undue delay if certain reasons exist (e.g., the personal data are no longer necessary for the purposes for which they were collected; if the data subject withdraws consent; if they must be erased due to a legal obligation). In this case, the data controller is obliged to communicate the erasure to all recipients to whom the data have been disclosed, unless this would involve a disproportionate effort;

• The right to restrict processing: the data controller may restrict the processing of data, for example, to storage only and to exclude any other use, in certain circumstances (e.g., if the processing is unlawful and the data subject opposes the erasure of the data; if the data subject contests the accuracy of the data, within the period for verifying the accuracy). In this case, the data controller is obliged to communicate the restriction of processing to all recipients to whom the data have been disclosed, unless this would involve a disproportionate effort;

• The right to data portability: to obtain the return of the personal data provided and transmit them to others or to request transmission from one owner to another, if technically feasible;

• The right to object: to object at any time to processing for purposes of public interest or legitimate interest; for marketing purposes; for scientific, historical or statistical research purposes.
Interested parties may file a complaint with the Data Protection Authority if necessary, or simply contact them for information regarding the exercise of their rights under EU Regulation 2016/679.

III - COOKIES

1 - Type of Cookies

1. This website uses cookies to make the user's browsing experience easier and more intuitive: cookies are small text files used to store certain information that may concern the user, their preferences, or their Internet access device (computer, tablet, or mobile phone). These cookies are primarily used to tailor the website's operation to the user's expectations, offering a more personalized browsing experience and memorizing previous choices.

2. A cookie consists of a small set of data transferred to the user's browser from a web server and can only be read by the server that made the transfer. It is not executable code and does not transmit viruses.

3. Cookies do not record any personal information, and any identifiable data will not be stored. If you wish, you can prevent the saving of some or all cookies. However, doing so may impair your use of the site and the services offered. 

2 - Technical cookies

1. There are numerous technologies used to store information on the user's computer, which is then collected by websites. Among these, the most well-known and widely used are HTML cookies. They are used for navigation and to facilitate user access and use of the website. They are necessary for the transmission of communications over the electronic network or for the provider to provide the service requested by the customer.

2. The settings for managing or disabling cookies may vary depending on the internet browser used. However, the user can manage or request the general disabling or deletion of cookies by changing their internet browser settings. Disabling cookies may slow down or prevent access to some parts of the site.

3. The use of technical cookies allows for safe and efficient use of the site.

4. Cookies that are inserted into the browser and retransmitted via Google Analytics or via the statistics service of bloggers or similar are technical only if used for site optimization purposes directly by the site owner, who may collect information in aggregate form on the number of users and how they visit the site. 

5. All data collected is anonymous as it does not record the user's IP address. Under these conditions, the same rules regarding information and consent as those for technical cookies apply to analytical cookies.

6. In terms of duration, we can distinguish between temporary session cookies, which are automatically deleted at the end of the browsing session and are used to identify the user and thus avoid logging in to each page visited, and permanent cookies, which remain active on the PC until they expire or are deleted by the user.

7. Session cookies may be installed to allow access and permanence in the reserved area of the portal as an authenticated user.

8. They are not stored permanently but only for the duration of browsing until the browser is closed and disappear when the browser is closed. Their use is strictly limited to the transmission of session identifiers consisting of random numbers generated by the server, necessary to enable safe and efficient browsing of the site.

3 - Third-party cookies

1. Depending on their origin, a distinction is made between cookies sent to the browser directly from the site you are visiting and third-party cookies sent to your computer from other sites and not the one you are visiting.

2. Permanent cookies are often third-party cookies.

3. Most third-party cookies are tracking cookies used to identify online behavior, understand interests, and therefore personalize advertising proposals for users.

4. Third-party analytics cookies may be installed. These are sent from the aforementioned third-party domains external to the site.

5. Third-party analytics cookies are used to collect information on user behavior on this site. This data is collected anonymously to monitor performance and improve the site's usability. Third-party profiling cookies are used to create user profiles in order to deliver advertising messages consistent with the choices expressed by users.

6. The use of these cookies is governed by the rules established by the third parties themselves, therefore, users are invited to read the privacy policies and instructions for managing or disabling cookies published on the relevant web pages.

4 - Profiling cookies

1. Profiling cookies are those used to create user profiles and are used to send advertising messages in line with the preferences expressed by the user while browsing the internet.

2. The use of profiling cookies requires the data subject's consent.

3. Article 22 of EU Regulation 2016/679 and Article 122 of the Data Protection Code will apply.

IV - CHANGES TO THIS DOCUMENT

1. This document constitutes the privacy policy of this site.

2. This document may be subject to changes  at any time by informing users on this page. We therefore ask you to consult this page often, taking as a reference the date of the last modification indicated at the bottom.