Information on the processing of personal data

Informativa ai sensi e per gli effetti di cui agli artt.13 et seq. of EU Regulation no. 679/2016 of 27 April 2016, (General Data Protection Regulation - GDPR) "relating to the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data (General Data Protection Regulation)" and of Legislative Decree 196/2003 and subsequent amendments.

By implementing the procedure for consulting the pages of the site and/or registering with our services, users voluntarily communicate to the company EVERMALUBRA S.R.L.S., Data Controller, their personal data (for example, when creating an account, registering products, purchasing a product, downloading software updates, we may collect a series of data, including name, address, telephone number, email, contact preferences etc.). The personal data sent will be processed in compliance with the principles of protection of personal data established by EU Regulation no. 679/2016 and other applicable regulations.

Data Controller

The data controller is

EVERMALUBRA S.R.L.S.
Cod. Tax and VAT No.: 01921540439
Via San Girolamo 24
60025 Loreto AN
ITALY

(hereinafter also only the "Data Controller") and can be contacted by written communication to be sent to:

EVERMALUBRA S.R.L.S.
Via San Girolamo 24
60025 Loreto AN
ITALY

or to the e-mail address:

info@giulialuce.it

Nature of the processed data

They are the object of use and navigation data processing to the extent that the computer systems and software procedures used to operate this website acquire information whose transmission is based on the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but could nevertheless, through processing and association with data held by third parties, allow users to be identified (e.g. IP addresses, domain names of the computers used by users who connect to the site, the URI addresses of the resources requested, the time of the request, the method used to submit the request to the server and other parameters relating to the user's operating system, browser and IT devices). Among the technologies used to collect and store information, cookies are of particular and autonomous importance, to whose specific information the attention of the user/data subject is referred (Cookie Policy).
The data provided by you voluntarily, during registration, creation of accounts, registration on our website and/or contact, and/or made manifestly public by you, including your personal identification data, name, surname, company name, address, email, telephone number, fax, VAT number, content of any of your messages etc., as well as economic data that are strictly necessary for the performance of existing or future contractual relationships, with particular reference to the data relating to the payment instruments chosen and used by the user for purchases on the e-commerce site (e.g. credit card, prepaid, bank transfer, paypal, cash on delivery, etc.).
No special, sensitive or judicial data are processed, which may fall within those indicated by art. 4, letter d) and letter e) of the privacy code and art. 9 Reg. EU 2016/679, the processing of which, moreover, is prohibited by art. 9 paragraph 1 of EU Reg 2016/679 cited, except for specific and mandatory exceptions from the same article contemplated.

Purpose and legal basis of the data processing

The personal data collected by registering or registering on our site are processed in order to allow access to the products, services and content reserved for registered users.
The legal basis for being able to process the data obtained is represented, pursuant to art. 6 Reg. EU 2016/679, by the following conditions:

the Data Subject has expressed his/her consent to the processing of his/her personal data;
The data processing is necessary for the performance of an agreement in which the interested party is involved or in order to perform any request prior to entering into a contract of the interested party;
processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. In the latter case, it should be noted that the legitimate interests of the Data Controller are the defence of one's own right, the need for fraud prevention, and/or the development of promotional activities on services/products for direct marketing purposes.

In the event that the user/data subject has expressed consent at the time of activation of the service, or expresses it subsequently and until the revocation of the same, his/her personal data may be processed by the Data Controller for:

allow access to products, services and content;
send, in the event that users have expressed their consent at the time of activation of the service, or express it subsequently, and until the revocation of the same, commercial communications (e.g. newsletters) on their own products and services or those of third-party companies, including with automated methods, for direct sales purposes, as well as for sending market research and for verifying the degree of user satisfaction;
carry out, in the event that users have expressed their consent at the time of activation of the service, or express it subsequently, and until the revocation of the same, also by electronic means, analysis activities of specific behaviors and consumption habits, in order to improve the services provided and direct commercial proposals of interest to the user, also offering third parties the aggregate data summarizing the openings and clicks obtained through a tracking system by means of "cookies".
communicate and transfer to third parties the data of users, in the event that they have expressed their consent at the time of activation of the service, or express it subsequently, and until the revocation of the same, for the sending of commercial communications on products and services of third-party companies, also with automated methods, for direct sales purposes, as well as for the sending of market research;
The Data Controller will also use personal data for administrative and accounting purposes and for the execution of contractual obligations towards users who are part of its customers.

Processing methods

Personal data sent through the registration procedures to products and services can be processed by the Data Controller with automated tools and paper supports.
Without prejudice to the possibility for the Data Controller to process the aforementioned data in aggregate form, in compliance with the measures prescribed by the Guarantor Authority and by virtue of the specific exemption from the consent provided by the same, for analysis and electronic processing (e.g.: classification of the entire clientele into homogeneous categories for levels of services, consumption, expenditure, etc.) aimed at periodically monitoring the development and economic performance of the activities of Effeluce Srls, to guide the related industrial and commercial processes, to improve services, as well as to design and implement commercial communication campaigns. These are therefore legitimate and necessary treatments to ensure a service that increasingly meets the expectations of users/customers.
However, EVERMALUBRA S.R.L.S. will not carry out any profiling activities.
Specific security measures are observed by the Data Controller to prevent the loss of data, unlawful or incorrect use, and unauthorised access.
The processing connected to the web services of this site takes place both at the aforementioned headquarters of the Data Controller and is handled only by technical personnel authorised for the processing and at the premises of the Software House Company of reference for the management of the site.

In any case, personal data are recorded and stored on electronic databases located in Italy, in countries belonging to the European Economic Area (EEA) and in third countries that guarantee an adequate level of data protection.

Obligations and authority to provide data

The provision of data is optional.

However, failure to provide the data deemed mandatory will prevent the correct registration to the site, as well as the possibility of using the services reserved for registered users, and, in the event of purchase, the acceptance by EVERMALUBRA S.R.L.S. of the order proposal and the execution of the related contract.

Extent of knowledge of your data

The following categories of subjects may become aware of your data, as external data processors or authorised internal data processors, appointed by the Data Controller:

Internal personnel in charge of administrative-accounting activities;
Internal staff responsible for the execution of contracts;
Directors, accountants and external consultants for accounting and administrative activities.

The processing of personal data provided by users may also be carried out by companies, entities or consortia, appointed as data processors pursuant to art. 28 of the aforementioned EU Regulation, which, on behalf of the Data Controller, provide specific processing services or related, instrumental or support activities (such as, by way of example: software developers and website managers, IT companies, network providers, electronic communications services, IT and telematic services for data storage and IT management, shippers, transport companies; or consultants, lawyers or collaborators of the company, tax consultants of the company, subjects who carry out technical and organisational tasks on behalf of the Data Controller; credit agencies, banks, financial companies, insurance companies; companies or persons who provide assistance to customers; companies that resell our products), within the limits strictly necessary to carry out their assignment at our or their organisation, following our letter of assignment that imposes the duty of confidentiality and security.

Communication and dissemination

The personal data provided by users will not be disclosed by us, with this term meaning to make them known to indeterminate subjects in any way, including by making them available or consulting them, but may be communicated by us, giving knowledge to one or more specific and qualified subjects, in the following terms:

to investee or associated companies;
to subjects to whom the right to access personal data is recognised by law, regulations or Community legislation;
to subjects against whom communication is required by law or regulation, or by public subjects for the performance of their institutional functions.

Rights of the Data Subject

The user/Data Subject may exercise at any time the rights provided for in Articles 15-22 of the GDPR by contacting the Owner of this site.
Below is the extract of article 15 Reg Eu 2016/679, relating to your right of access to us to remind you that you can obtain the following information:

"The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her is being processed and, if so, to obtain access to the personal data and the following information: (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients from third countries or international organisations; (d) when (e) the existence of the right of the data subject to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing;

In addition, the Data Subject has the right to:

to obtain from the data controller the correction of inaccurate personal data concerning him/her without undue delay, pursuant to art. 16 Reg. EU 2016/679.
to obtain cancellation of personal data concerning him without justified delay where there is one of the reasons listed in art. 17 Reg. EU 2016/679.
to the limitation of processing when one of the hypotheses described in art. 18 Reg. EU 2016/679.
to object at any time to the processing of data concerning him in the cases referred to in art. 21 Reg. EU 2016/679.
The data subject will have the right to receive, in a structured, commonly used and machine-readable format, any personal data relating to it which is supplied to a Data Controller, also having the right to send such data to another data controller without hindrance by the Data Controller to whom such information has been supplied. EU 2016/679.
to withdraw consent at any time, if the processing is exclusively based on art. 6, paragraph 1, letter a), or on art. 9, paragraph 2, letter a), in any case without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
to lodge a complaint, pursuant to art. 77 Reg. EU 2016/679, to the competent Supervisory Authority of the Privacy Guarantor, in particular in the EU Member State in which he habitually resides, works, or of the place where the alleged violation occurred, in addition to the ordinary right to file an effective judicial appeal, pursuant to art. 79 Reg. EU 2016/679, if you believe that your rights under the aforementioned EU Regulation have been violated as a result of processing.

Possible data of minors

The site, pursuant to Article 8 of the GDPR, paragraph 1, does not collect information or carry out data processing operations relating to subjects under the age of 16.

Period of data retention

The retention period of the personal data referred to above is in line with the regulatory provisions in force: in compliance with the principles of minimisation, proportionality and necessity, the data will not be stored for longer periods than those necessary to achieve the purposes indicated above and, therefore, to the service offered or to the specific rules of law (e.g. in our legal system there is a period of at least 10 years regarding the storage of company administrative documents).

In any case, the company will provide without delay the secure deletion or irreversible anonymization of the data when the retention of personal data is not further justified.

Further information

This policy may be subject to change.
If substantial changes are made to the use of personal data by the Data Controller, or the latter intends to further process the personal data for a purpose other than that for which they were collected, the latter will be required to inform the Data Subjects in advance and again.

Cookie policy

This document is fully referred to in the Privacy Policy, i.e. in the information on the processing of personal data pursuant to art. 13 of Legislative Decree 196/03 and is an integral and substantial part of it.

What are cookies?

Cookies are small text strings which websites send to the terminals of visiting users (usually to the browser), where they are stored and later returned to the same websites during subsequent visits. Cookies can be divided into two groups based on the subjects who install them and the type of function they perform.
In the first group there are the cookies of the website operator and third-party cookies.
In the second group are technical, functional and profiling cookies.

Technical cookies

The use of permanent technical cookies or session cookies (i.e. which are not permanently stored on the user's computer and disappear when the browser is closed) is strictly limited to the technical provision of the service requested by the user and the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow the safe and efficient exploration of the site and its applications.
The technical cookies used on this site avoid the use of other IT techniques that could be detrimental to the confidentiality of users' browsing. They can be divided into browsing or session cookies, which guarantee the normal navigation and use of the website.
Technical cookies are also those analytics, if used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site itself.
Functional cookies, on the other hand, allow the user to browse according to a series of selected criteria (for example, the language, the characteristics of the chosen service, the products displayed or chosen, those recently displayed, the cart of the products, the number of products ordered, the name and type of product ordered, the summary of the order, the quantities ordered; make a purchase or authenticate to access reserved areas) some functional cookies allow you to record the privacy consent or preferences of the user or remember the most visited pages and any error messages found on some pages, as well as recognize if the user has already subscribed to the newsletter.
It will always be possible for the user to change their choices regarding the cookies installed. These cookies are used in order to improve the service.

Consent for technical cookies

The prior consent of users is not required for the installation of these cookies, but the user must be informed of the presence of these cookies and must have the possibility to delete them at will.

Profiling Cookies.

Profiling cookies are designed to create profiles relative to the user and are used in order to send advertising messages in line with the preferences expressed by the user when surfing the net.

Consent for profiling cookies

For the installation of these cookies, the user must be adequately informed about their use and thus express their consent.

Third Party Cookies.

Third-party cookies are technical or profiling cookies installed by parties other than the site operator.

Consent for third-party cookies.

EVERMALUBRA S.R.L.S. does not exercise any control over third-party cookies, nor does it directly know all third parties that install cookies through the website. For this reason, please refer to the information regarding cookies installed by third parties.

List of cookies we collect

The following table lists the cookies that collect and what information they contain.

guest-view: Stores the order ID used by guest buyers to retrieve the order status.
login_redirect: Retains the landing page that the customer was loading before being directed to the login.
mage-messages: Keeps track of error messages and other notifications shown to the user, such as the consent message for cookies, and various error messages. The message is deleted from the cookie after it has been shown to the buyer.
mage-translation-storage (local storage): Stores translated content when requested by the buyer.
mage-translation-file-version (local storage): Keeps track of the translation version in local memory.
product_data_storage (local storage): Stores the configuration for product data for recently viewed/ compared products.
recently_compared_product (local storage): Stores product IDs of recently compared products.
recently_compared_product_previous (local storage): Stores product IDs of previously compared products for easy navigation.
recently_viewed_product (local storage): Stores product IDs of recently viewed products for easy navigation.
recently_viewed_product_previous (local storage): Stores product IDs of previously viewed products for easy navigation.
stf: Records the time when messages are sent from the SendFriend form (Email to Friend).
X-Magento-Vary: A configuration setting that improves performance when using Varnish static content caching.
form_key: A security measure that adds a random string to all form submissions to protect data from cross-site request counterfeiting (CSRF).
mage-cache-sessid: The value of this cookie enables local cache cleanup.
mage-cache-storage: Local storage of visitor-specific content that enables e-commerce features.
mage-cache-storage (local storage): Local storage of visitor-specific content that enables e-commerce features.
mage-cache-storage-section-invalidation (local storage): Forces local storage of specific content sections that must be invalidated.
persistent_shopping_trolley: Stores the persistent cart key (ID) to allow the cart to be restored to an anonymous buyer.
private_content_version: Adds a random and unique number and time to customer content pages to prevent them from being cached on the server.
section_data_ids: Stores customer-specific information about actions initiated by the buyer such as viewing the wish list, payment information, etc.
the store: Keeps track of the specific view / locale selected by the buyer.
PHPSESSID: Your session ID on the server.
cookie_setting: Stores user preferences about cookies


Google Analytics.

_ga_: Used to maintain session status.
_ga: Used to distinguish users.
_gid: Used to distinguish users.

Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google Analytics, like other systems, uses cookies. The information generated by the cookies regarding the use of the website by the users (including their IP address) will be sent to, and deposited in, the Google servers located in the United States. Google will use this information in order to track and study website use, to prepare reports on website activity for Site operators and to provide other services relating to Site activity and Internet use. Google may also transfer this information to third parties where required by law or when such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. To learn about Google's privacy policy, please click on the following link Google Privacy.

Pixels are installed with the user's consent. Such consent may be revoked at any time.

Facebook Pixel

_fbp: Used to store and track visits across websites.

We use the fecebook pixel for Remarketing campaigns in the platforms of the Meta group.
The pixel is installed with the user's consent.This consent can be revoked at any time.

Google Remarketing

_gcl_au: Used to store and monitor conversions.

We use the Google Remarketing service for remarketing campaigns in Google and partner channels.
The pixel is installed with the user's consent.This consent can be revoked at any time.

Third-party cookies

Third-party cookies are installed from the sites listed below, for more information see the relative privacy policies:

Google: https://policies.google.com/privacy

Paypal: https://www.paypal.com/myaccount/profile/flow/cookies

Removal of cookies.

The user has the right, at any time, to remove all cookies installed on his terminal. As well as to set your internet browser (e.g. Chrome, Internet Explorer, Firefox, Safari,) in such a way as not to accept cookies, including technical, activating the so-called anonymous browsing, and in this case no data will be processed through these systems.
Deleting cookies or some of them or browsing anonymously could in fact make browsing or the inability to provide certain services not easy.
These changes can be made by following the following specifications

Google Chrome (from https://support.google.com/accounts/answer/32050?hl=en)

On the browser toolbar, select the Chrome menu.
Select Properties
Select Clear Browsing Data.
In the box that appears, select "Cookies and other site and plug-in data" and "Cached images and files".
In the top menu box, select "all" to delete all content.
Select Clear Browsing Data.

Microsoft Internet Explorer: http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11

On the Start screen, tap or click Internet Explorer to open Internet Explorer.
Swipe in from the right edge of the screen, and then tap Settings. If you are using a mouse, place the cursor in the lower right-hand corner of the screen, move it upwards and then click on Settings.
Tap or click Options, and under History, tap or click Select.
Select the Cookies check box, and then tap or click Delete.

Mozilla Firefox: https://support.mozilla.org/it/kb/Eliminare%20i%20cookie

to the Time interval to clear drop-down menu: select all.
Click the arrow next to Details to view the list of items to delete.
Select "Cookies", and make sure that you have not selected other elements that you wish to keep.
Click Clear Now to delete cookies, then close the Clear All History window.

Safari (from https://support.apple.com/en-us/HT201265)

Tap Settings > Safari > Block cookies and choose "Always allow," "Only allow from websites I visit," "Only allow from current website," or "Always block."
In iOS 7 or less recent versions, choose "Never", "Third Parties and Advertisers," or "Always."

The following specifications for mobile devices:Android; Blackberry; Safari; Windows Phone.

For more information or if the above links return an error message, or if your browser does not match one of those mentioned, simply search the web by entering the item "how to delete cookies in ..." indicating the browser chosen and follow the instructions.

In addition to the information provided in this policy, you can access the website http://www.youronlinechoices.com to verify the cookies installed on your computer.