Privacy disclaimer

PRIVACY POLICY - GDPR

With this Costumiss information in accordance with the provisions of European Regulation no. 679/2016 (hereinafter "GDPR"), wishes to inform you that your personal data or in any case the personal data referred or referable to you will be processed by the Greby Srl Company in full compliance with current legislation and the confidentiality obligations that inspire us.

Personal Data is information of any type, including electronic information, which allows a person to be identified individually or in combination with other information (i.e. name and surname, date of birth, tax code/VAT number, residence or registered office, e- email, mobile number, interests and profession).

By “ Processing of personal data ” we mean, pursuant to art. 4 (2) of the GDPR, any operation or set of operations, carried out even without the aid of electronic tools, concerning the collection, recording, organisation, conservation, consultation, processing, modification, selection , extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction of data, even if not recorded in a database.

By " User " we mean every individual who is reading this Information, as a user of Greby srl's products and services.

IDENTITY OF THE HOLDER

The Data Controller of the Users is the legal representative pro tempore of the company Greby srl with registered office in Viale Le Corbusier 39, 04100 - Latina (LT) .

The data protection officer can be identified at the following address: privacy@greby.it.

The updated list of data controllers and persons in charge of processing is kept at the registered office of the Data Controller.

PURPOSE OF THE TREATMENT

Your personal data is processed:

A) without your express consent art. 6 lett. b), e) GDPR), for the following Service Purposes:

conclude contracts for the Owner's services;
fulfill pre-contractual, contractual and tax obligations deriving from existing relationships with you;
fulfill the obligations established by law, by a regulation, by community legislation or by an order from the Authority (such as for example in the field of anti-money laundering);
exercise the rights of the Owner, for example the right of defense in court;

B) only with your specific and distinct consent (art. 7 GDPR), for the following Marketing Purposes :

send you via e-mail, post and/or text message and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Owner and survey the degree of satisfaction with the quality of the services;
send you commercial and/or promotional communications from third parties via e-mail, post and/or text message and/or telephone contacts

TREATMENT METHODS

The processing of your personal data is carried out by means of the operations indicated in the art. 4 no. 2) GDPR and precisely: collection, recording, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

DATA RETENTION

Your personal data is subjected to both paper and electronic and/or automated processing and will be stored by adopting adequate security measures.

The Data Controller will process personal data for 12 months or for the time necessary to fulfill the above purposes and in any case they will remain in the archive for no longer than 10 years.

ACCESS TO DATA

Your data may be made accessible for the purposes referred to in the art. 2.A) and 2.B):

to employees and collaborators of the Data Controller or of the Greby srl companies in Italy, in their capacity as internal data processors and/or managers and/or system administrators;

to third-party companies or other subjects (for example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) who carry out outsourced activities on behalf of the Data Controller, in their capacity as external managers of the treatment.

DATA COMMUNICATION

Without the need for express consent (art. 6 letter b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in the art. 2.A) to judicial authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes. These subjects will process the data in their capacity as independent data controllers. Your information will not be disseminated.

DATA TRANSFER

Your personal data is stored on servers located in Italy or in any case within the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

NATURE OF THE PROVISION OF DATA AND CONSEQUENCES OF REFUSAL TO RESPOND

The provision of data for the purposes referred to in art. 2.A) is mandatory. In their absence, we will not be able to guarantee the Services of the art. 2.A).

The provision of data for the purposes referred to in art. 2.B) is instead optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the Services offered by the Data Controller. You will however continue to be entitled to the Services referred to in the art. 2.A).

RIGHTS OF THE INTERESTED PARTY

In your capacity as an interested party, you have the rights referred to in the art. 15 GDPR and precisely the rights of:

Exercise opposition to the treatment in whole or in part
Obtain the deletion of the data held by the owner
Obtain the updating or rectification of the data provided
Request and obtain in an ineligible form the data held by the owner (right of access)
Request and obtain anonymous transformation of data
Request and obtain blocking or limitation of data
Request and obtain the blocking or limitation of data processed in violation of the law and those of

which conservation is no longer necessary in relation to the purposes of the processing.

Where applicable, you also have the rights referred to in the articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limit processing, right to data portability, right to object), as well as the right to complain to the Guarantor Authority.

COOKIE POLICY OF Costumiss.COM

Cookies consist of portions of code installed within the browser that assist the Owner in providing the Service based on the purposes described. Some of the purposes of installing Cookies may also require the User's consent.

When the installation of Cookies is based on consent, this consent can be freely revoked at any time by following the instructions contained in this document

When the installation of Cookies is based on consent, this consent can be freely revoked at any time by following the instructions contained in this document.

Technical and aggregate statistics cookies

This Website uses Cookies to save the User's session and to carry out other activities strictly necessary for the functioning of this Website, for example in relation to traffic distribution.

This Website uses Cookies to save browsing preferences and optimize the User's browsing experience. These cookies include, for example, those to set the language and currency or for the management of statistics by the site owner.

OTHER TYPES OF COOKIES OR THIRD PARTY TOOLS THAT MAY INSTALL THEM

Some of the services listed below collect statistics in aggregate and anonymous form and may not require the User's consent or may be managed directly by the Owner - depending on what is described - without the help of third parties.

If among the tools indicated below there are services managed by third parties, these could - in addition to what is specified and also without the knowledge of the Owner - carry out tracking activities on the User. For detailed information on this matter, we recommend consulting the privacy policies of the services listed.

Heat mapping and session recording

Heat Mapping services are used to identify which areas of a page are subject to cursor passage or mouse clicks in order to detect which of them attract the greatest interest. These services allow you to monitor and analyze traffic data and serve to keep track of the User's behavior.
Some of these services may record your sessions and make them available for you to view later.

Interaction with live chat platforms

This type of service allows you to interact with live chat platforms, managed by third parties, directly from the pages of this Website. This allows the User to contact the support service of this Website or this Website to contact the User while he is browsing his pages.
If an interaction service with live chat platforms is installed, it is possible that, even if Users do not use the service, it collects Usage Data relating to the pages on which it is installed. Additionally, live chat conversations may be recorded.

Interaction with social networks and external platforms

This type of service allows you to interact with social networks, or other external platforms, directly from the pages of this Website.
The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to each social network.
If an interaction service with social networks is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages on which it is installed.

Facebook Like, Share and Widget Buttons (Facebook, inc.)

The "Like" button, Share (Whatsapp) and Facebook social widgets are interaction services with the Facebook social network, provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy .

Remarketing and behavioral targeting

This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the User's past use of this Website.
This activity is carried out by tracking Usage Data and the use of Cookies, information that is transferred to the partners to which the remarketing and behavioral targeting activity is connected.
In addition to the possibilities of opting out offered by the services listed below, the User can opt out of receiving cookies relating to a third party service by visiting the opt-out page of the Network Advertising Initiative .

Facebook Custom Audience (Facebook, Inc.)

Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

Personal Data collected: Cookies and email.

Place of processing: USA – Privacy Policy – Opt Out .

STATISTICS

The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to keep track of the User's behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the ads of its advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – Opt Out .

How can I express consent to the installation of Cookies?

In addition to what is indicated in this document, the User can manage preferences relating to Cookies directly within their browser and prevent - for example - third parties from installing them. Through the browser preferences it is also possible to delete Cookies installed in the past, including the Cookie in which the consent to the installation of Cookies by this site is possibly saved. The User can find information on how to manage Cookies with some of the most popular browsers, for example at the following addresses: Google Chrome , Mozilla Firefox , Apple Safari and Microsoft Internet Explorer .

With reference to Cookies installed by third parties, the User can also manage their settings and revoke consent by visiting the relevant opt out link (if available), using the tools described in the third party's privacy policy or by contacting the third party directly.

Without prejudice to the foregoing, the User may use the information provided by EDAA (EU), Network Advertising Initiative (USA) and Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan) or other similar services. With these services it is possible to manage the tracking preferences of most advertising tools. The Owner, therefore, advises Users to use these resources in addition to the information provided in this document.

Data Controller

Greby srl, Viale Le Corbusier 39 - Latina - LT - VAT number 02919580593

Owner's email address: costumess@greby.it

Since the installation of Cookies and other tracking systems operated by third parties through the services used within this Website cannot be technically controlled by the Owner, any specific reference to Cookies and tracking systems installed by third parties is to be considered indicative. To obtain complete information, the User is invited to consult the privacy policy of any third party services listed in this document.

Given the objective complexity of identifying technologies based on Cookies, the User is invited to contact the Owner should he wish to receive any further information relating to the use of Cookies themselves through this Website.

DEFINITIONS AND LEGAL REFERENCES

Personal Data (or Data)

Any information which, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable constitutes personal data.

Usage Data

This is information collected automatically through this Website (also by third-party applications integrated into this Website), including: IP addresses or domain names of the computers used by the User who connects to this Website, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc. .) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

User

The individual who uses this Website who, unless otherwise specified, coincides with the interested party.

Interested

The natural person to whom the Personal Data refers.

Data Controller (or Manager)

The natural person, legal person, public administration and any other body that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller (or Data Controller)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools adopted, including security measures relating to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or this Application)

The hardware or software tool through which the Personal Data of Users is collected and processed.

Service

The service provided by this Website as defined in the relevant terms (if available) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this document is intended to include all current member states of the European Union and the European Economic Area.

Cookies

Small portion of data stored within the User's device.

Legal references

This privacy information is drawn up on the basis of multiple legislative systems, including articles. 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy policy applies exclusively to this Website.

METHOD OF EXERCISE OF RIGHTS

You can exercise your rights at any time by sending:

- a registered letter with return receipt to Greby srl with registered office in Viale Le Corbusier 39, 04100 - Latina (LT)

- an e-mail to privacy@greby.it