PRIVACY DISCLAIMER
PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679

Dear Sir/Madame,
pursuant to article 13 of EU Regulation 2016/679 (so-called GDPR) we inform you on the methods with which we will process the personal data that will be communicated to us by you.

Who will process your personal data?
Your personal data will be processed by IPMSHOP Srl (hereinafter, also only IPM), with registered office in 20141 Milan, via F. Brioschi n°74, which will act as "Data Controller"; you can contact the Data Controller at the e-mail address: e-commerce@ipmshop.it

The processing may take place, in the name and on behalf of IPMSHOP Srl, also by other subjects appointed for this purpose as "Data Processors", belonging to the following categories: group companies, accountants, shippers, IT service providers. The Data Controller does not carry out large-scale processing, consequently the conditions for the obligation to appoint a DPO do not exist.

How and why will your data be processed?
Your data - with reference to each specific purpose - will be treated as follows

Purpose Legal basis Storage time
1 Administrative activities related to contract management Performance of a contract 10 years from the termination of the contractual relationship
2 Response to requests for information on products received on the web (site and social networks) Performance of a contract 10 years from the termination of the contractual relationship
3 Newsletters Consent Until the consent is revoked
4 Operation maintenance and security of computer systems Legitimate interest (of the owner)
Legal obligation of the owner
Until the end of the intervention

We also specify the following:

CONFERMENT
The provision of your data for the purposes referred to in numbers: 1, 2, 4: is mandatory and necessary to fulfill contractual or legal provisions and for the purposes of the correct performance of the company's business. Consequently, failure to provide it would not make it possible to fulfill these requirements and carry out company activities correctly. 3: it is merely optional. Consequently, failure to provide it will have no consequence. If the customer is a legal person, IPMShop Srl communicates that it does not deem it necessary to get hold of personal data relating to any collaborators; however, in the awareness that, during the contractual relationship, reasons of a purely operational nature may lead to the occurrence of this circumstance, it will also process such data in the manner indicated in this information which we therefore invite you to deliver to all your collaborators who, for the reasons highlighted above, are found to transmit their personal data to IPMShop Srl (eg name, surname, email address). It should be noted that if the customer voluntarily publishes a review, this will necessarily involve the processing of the username for this purpose which, as a result of the spontaneity of the provision, will be based on the basis of lawfulness of the consent.

CATEGORIES OF RECIPIENTS
No other recipients are envisaged in addition to the data processors or joint controllers (ie social networks, limited to purpose 2).

AUTOMATED DECISION-MAKING PROCEDURES
There are no automated decision-making procedures.

TRANSFERS OUTSIDE THE EU OR TO INTERNATIONAL ORGANIZATIONS
There are no transfers outside the EU or to international organizations.

LEGITIMATE INTERESTS OF THE HOLDER
The legitimate interest of the owner indicated for purpose 4 is the correct and safe conduct of the company activity.

What will your rights be?
You may exercise the following rights by sending a specific request to the Data Controller at the e-mail address: e-commerce@ipmshop.it

RIGHT OF ACCESS (see Article 15 GDPR)
Right to have confirmation of the existence or otherwise of the treatment and to access the data and information relating to: purposes of the treatment, categories of data processed, any recipients, any transfers and any adequate guarantees, retention period, rights of the interested party possible existence of an automated decision-making process. The Data Controller provides a copy of the personal data. If the request is made by electronic means, and unless otherwise indicated, the information is provided in a commonly used electronic format.

RIGHT TO RECTIFICATION (see Article 16 GDPR)
Right to obtain the rectification of inaccurate personal data and the integration of incomplete personal data.

RIGHT TO CANCELLATION (see Article 17 GDPR)
Right to obtain the cancellation of personal data concerning the interested party if: they are no longer necessary with respect to the purposes, revoke the consent (and there is no other legal basis for the treatment), oppose the treatment for reasons connected to his particular situation ( and there is no prevailing legitimate reason), you oppose the processing for direct marketing purposes, the personal data are processed unlawfully, they must be canceled to fulfill a legal obligation, they have been collected in relation to the offer of information society services. The right does not apply if the treatment is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for the execution of a task carried out in the public interest or in the exercise of public powers, for reasons of public interest in the health sector, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court.

RIGHT TO LIMITATION (see Article 18 GDPR)
Right to request data retention only if: the data subject has contested the accuracy of the data (for the period necessary to verify its accuracy), the processing is unlawful (but the data subject has requested limitation rather than cancellation), the data are necessary for the interested party in court and, although the owner no longer needs it, he has exercised the right to object (while the owner verifies the existence of legitimate and overriding reasons).

RIGHT TO OBJECT (see Article 20 GDPR)
Right to object to the processing of your data if (i) it is based on public interest or legitimate interest and (ii) if the data are processed for direct marketing purposes, including profiling.

PORTABILITY RIGHT (see Article 21 GDPR)
Right to receive data in a structured format (only for automated processing).

RIGHT TO WITHDRAW CONSENT (cf. Article 13, c.2, d)
Right to withdraw consent at any time, where provided as a legal basis, without prejudice to the lawfulness of the processing based on it before the withdrawal.

RIGHT TO COMPLAINT (see Article 13, c.2, d)
Right to lodge a complaint with the Guarantor Authority for any alleged violation of the GDPR.

In faith,
IPMShop Srl

COOKIE POLICIES

1 - PREMISE

This information is provided, with reference to the website https://ipmshop.it (hereinafter, also only the "Site"), by IPMSHOP SRL (hereinafter, also only "IPMSHOP"), with registered office in 20141 Milan , Via F. Brioschi n°74.

2 - WHAT COOKIES ARE AND WHAT THEY ARE FOR

A cookie is a text file that a website visited by the user sends to his terminal (computer, mobile device such as smartphone or tablet), where it is stored before being re-transmitted to that site on a subsequent visit to the site. Cookies are distinguished from each other: - according to the subject who installs them, depending on whether it is the same operator of the site visited (so-called "first-party cookies") or a different subject (so-called "third-party cookies") - based on the purpose of each cookie: some cookies allow for better navigation, by memorizing some user choices, for example the language (so-called "technical cookies"), other cookies allow user navigation to be monitored also for the purpose of sending advertising and/or offering services in line with his preferences (so-called "profiling cookies"). Only profiling cookies require the user's prior consent for their use. The Site uses first-party technical and profiling cookies as well as third-party profiling cookies (described in section 2 "Cookies installed through the Site" below). IPMShop Srl is responsible, in its capacity as Data Controller, exclusively for the first-party cookies installed by it on the Site.

1. Methods for expressing consent to profiling cookies

1.1. On the first visit to the Site, you can accept all cookies by closing the banner by clicking on the "X" or on "Accept" in the banner itself or by accessing another area of the Site or by clicking on any element of the page (image or link) outside the banner.

1.2. During the first visit to the Site, if you do not perform any of the actions described in the banner but, from the banner, you access this extended information, you can interact with the individual consent forms present in the extended information where it is possible to give and/or deny consent, depending on the case, to the installation of cookies by clicking on the appropriate link in the "privacy information and consent form" column of the table below. Warning: if you do not interact with the consent forms and exit the extended information, closing the page in which the information is contained or continuing to browse the site, you consent to all cookies.

1.3. On subsequent visits to the Site (provided that you have previously expressed your preference regarding the use of cookies, as indicated in points 1.1 and 1.2 above), you can access the extended information via the "Privacy information" link , present on every page of the Site and deny consent to third-party profiling cookies by clicking on the "consent form" shown (where available), for each third-party cookie, in section 2 "Cookies installed through the Site" following.

1.4. In any case, through the browser settings. The procedure to follow to configure these settings is as follows:

Internet Explorer

Change Cookie settings: Click on the "Tools" icon, "Internet Options", then the "Privacy" tab. You can adjust the cookie acceptance policy by moving the relative slider up or down or clicking on the "Sites" button and in the window that appears, authorize or block the acceptance of cookies site by site. Click "OK" to apply the changes.

Deleting Cookies: Select "Tools", "Internet Options", then "Delete" from the "Browsing History" box. It will find a number of items including Cookie. Verify that the checkmark is activated next to its name and press "Delete".

Google Chrome

Change Cookie settings: Type chrome://settings/ in the address bar then select "Show advanced settings" at the bottom of the page and then "Content settings" in the "Privacy" section and then "Allow the saving of local data (recommended)", then "Done".

Deleting Cookies: Type chrome://history/ in the address bar and then select "Delete browsing data...". You will find a series of items including "Cookies and other site and plugin data". Check that the check mark next to your name is activated and press "Clear browsing data".

Mozilla Firefox

Modify Cookie settings: Access the options via the menu icon, then select the "Privacy" section. Under the item history choose: "use custom settings" then adjust the management of cookies through the options made available by the program. Click "OK" to apply the changes.

Deleting Cookies: Access the options via the menu icon, then select the "Privacy" section. Under the item history choose: "use custom settings" then click on the item "Show cookies". The Cookies window will be displayed: In the "Search" field, type the name of the site whose cookies you want to remove. A list will appear showing the cookies related to the search performed. In the list, select the cookies to be removed and click on the "Remove Selected" button. To delete all cookies stored on your computer, you can use the "Remove all cookies" button.

Safaris

Change Cookie settings : Click on the "Preferences" item from the "Tools" menu (CTRL+ key combination) then select the "Privacy" section. Choose the cookie management policy by choosing an option from those proposed by the program and then close the options window using the close icon at the top right.

Deleting Cookies : Click on the "Preferences" item from the "Tools" menu (CTRL+ key combination) then select the "Privacy" section. Click on "Remove all website data" and then confirm your choice. Choose the cookie management policy by choosing an option from those proposed by the program and then close the options window using the close icon at the top right.

In the case of devices such as smartphones, tablets, etc., we ask you to check that each browser on each device is adjusted to express your cookie preferences. For behavioral advertising cookies, you can also set your preferences through the website www.youronlinechoices.com/it (the system operates with reference to member companies that use cookies for behavioral advertising).

2. Cookies installed through the Site

2.1 First-party technical cookies that do not require the user's prior consent

Cookie name Purpose Expiration
PHPSESSID Manage and identify users' browsing sessions when closing the browser
lang Storing preferences relating to the language of navigation on the Site 365 days

2.2 Third-party technical cookies that do not require the user's prior consent

Cookie name Purpose Expiration
PayPal Manage payments through the PayPal platform at the end of the session
Stripe. com Manage payments through the Stripe platform at the end of the session

2.3 Third-party profiling cookies that require the user's prior consent

Statistical and analytical cookies: The Site uses third-party cookies, also in disaggregated form, for statistics and analysis purposes. In particular, the Site uses the Google Analytics service, Facebook and Linkedin to collect information relating to the use of the Site by users.

Supplier Cookie name Purpose Privacy Policy e
consent form
Google Inc. Google Analytics Measurement of visits to the Site Privacy disclaimer
Consent form
Facebook Facebook Pixels Measurement of visits to the Site Privacy disclaimer
Consent form
Facebook Facebook Conversion Tracking Tracking of specific actions performed on the Site Privacy disclaimer
Consent form
LinkedIn LinkedIn Insights Measurement of visits to the Site Privacy disclaimer
Consent form
LinkedIn Linkedin Ads Tracking of specific actions performed on the Site Privacy disclaimer
Consent form

This information is updated to 20 November 2019.