Cookie policy EN | Giardino dei Tarocchi

Privacy Policy GDPR and Cookie Policy

This privacy policy describes how the site is managed with reference to the processing of the personal data of users who browse it, as well as the processing practices of the data transmitted by the data subject to the Data Controller through this site.

In compliance with articles 13 (for data collected from the data subject) and 14 (for data not collected from the data subject) of the EU Regulation 2016/679 (GDPR) the Users of this Website are provided with the following information, which refer exclusively to the processing carried out through this Website and not through other websites that may be visited from this through links. With regard to the links we suggest to read the relevant information provided by the respective Data Controllers.

This Website and any services offered through the Website are reserved for individuals who have reached the age of eighteen. The Data Controller therefore does not collect personal data relating to persons under the age of 18. Upon request of these Users, the Data Controller will promptly delete all personal data involuntarily collected.

1. Data controller

The foundation “Il GIARDINO DEI TAROCCHI", with Registered office in Località Garavicchio - 58011 Capalbio (Provincia di Grosseto), tel. (+39) 0564 895700, email shop@ilgiardinodeitarocchi.it, certified e mail ilgiardinodeitarocchi@legalmail.it, tax code and VAT no 01144630538

(hereinafter “Data Controller”), as the data controller of the personal data of the users of this site (hereinafter, "Users"), hereinafter provides the privacy policy pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter, the "Privacy Code") and pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter the "Regulations", the Regulations and the Privacy Code are jointly defined as the "Applicable Regulations").

The Data Controller reserves the right to appoint a web agency or consultant as Data Processor for personal data for the purpose of technical assistance, maintenance, technical management and the like. The references can be communicated following a request to the addresses indicated above.

The Data Controller and the Data Processor process the Users' data also thanks to their own internal representatives, specifically designated and equipped with instructions for the correct processing of personal data, also orally.

The Data Protection Officer DPO can be contacted by email:

2. Category of processed data and sources of origin

Navigation data
Cookies on which we invite you to read the following articles 13-14-15-16
Data provided voluntarily by the user, including:
Common data (identification, personal, billing and similar data)
Only exceptionally special data (art. 9 GDPR)
Only exceptionally criminal data (art. 10 GDPR)

Sources: user; navigation, other sites, cookies and the like; public sources.

At first we may process data voluntarily provided by the user, for example through the contact form or the sending of communications via e-mail, including common personal data (identification, personal, billing and the like) and exceptionally sensitive data pursuant to art. 9 GDPR or criminal data pursuant to art. 10 GDPR to the extent that this is made necessary by the request for information received.

We may also process navigation data, as well as cookies.

The data could come from automatic sources or from voluntary sources, as well as from public sources. For example, they could come from the user's navigation, which could provide information relating to previous consultations of other sites, including in particular cookies and other similar technologies. The data could also be provided voluntarily by the user or by subjects related to it. Other data may come from public sources, such as those processed in the context of research and from surveys, public databases and the like.

3. Purpose of processing

The personal data of the Users of the Website, as described above, will be processed in the ways and in the forms prescribed by the GDPR, for the performance of the Website's own functions. This will occur with particular, but not exclusive, reference to the collection procedures described therein: data, contact form, registration process / access to the reserved area, subscription to the newsletter and the like. In particular, the personal data provided to the data controller will be processed for the pursuit of the following purposes:

to follow up on specific requests addressed to the Owner by the User through the Website and its communication tools (contact forms, information request forms and the like)
or the possible subscription to the newsletter and the consequent sending of commercial communications and various information concerning the sector in which the Owner operates, with the specific consent given by the user
for communications of informative nature relating to the services of the same Data Controller, following the request for information via e-mail messages or filling out the contact form and other communication tools
for other ancillary purposes or related to those indicated above and in any case falling within the scope of the Website's activities
for the processing of the e-mail address, provided by the data subject in the context of the distance sale of a product or service, also aimed at sending, without further consent, communications for the subsequent remote sale of products or services similar to those of the sale itself. The data subject may in any case express his refusal and oppose this treatment, both initially and subsequently, easily and free of charge, by following the instructions in each subsequent communication.
for the establishment and management of a contractual relationship concerning the distance sale of movable tangible assets indicated and offered for sale on the website www.giardinodeitarocchi.shop, including all related legal, fiscal and contractual obligations in general connected to the aforementioned relationship.

The processing of the data provided in a generic way will be carried out, even following automatic collection during navigation, for the sole purpose of ascertaining and controlling access to the Website. This also applies to technical cookies, to be understood as session, functionality or analytics cookies that meet the requirements specified by the Data protection authority. In particular, with regard to the latter, it is clarified that they can be assimilated to technical cookies where these are created and used directly by the Website. In any case, for these analytics cookies, the Website, also in accordance with the clarifications of the Guarantor, has provided for the anonymization of IP addresses and the amendment to data processing; the collection and use of the aforementioned navigation data (without prejudice to the anonymization of IP addresses) allow for the monitoring of the progress of the Website and allow for the improvement of the service offered, offering the User a bett

Data collected through the Email platform

For complete information, we specify that in sending communications via email, the "IL GIARDINO DEI TAROCCHI" Foundation uses a compliant platform, which, through statistical tracking systems, allows to detect the opening of a message, the clicks made on the hyperlinks within the email, from which IP address or with which type of browser the email is opened, and other similar details. The collection of this data is functional to the use of the platform and is an integral part of the functionality of the message sending system.

The User can also easily oppose to further sending of newsletters by clicking on the appropriate link for the withdrawal of consent, which is present in each email containing the newsletter. Once the consent has been revoked, the Data Controller will send the User a message to confirm that the consent has been revoked.

4. Legal basis of the processing

The processing of personal data is based on the right to information, on the fulfillment of contractual or social contact obligations, or where necessary on consent by freely and consciously filling in the appropriate information fields in the dedicated form.

5. Legitimate interest of the Data Controller

The processing of personal data is also based on the legitimate interest of the Data Controller, such as the exercise of its rights in the context of the information society, the execution of the contractual service and the implementation of direct marketing operations.

6. Mandatory transfer

The provision of data relating to navigation by Users, for the aforementioned purposes, depends on the degree of privacy that the User has enabled or disabled through their browser. In some cases, disabling may affect navigation on this Website. For certain modules of this Website, the provision of navigation data and/or the use of technical cookies is mandatory for the proper functioning of the Website.

The provision of some own data is in any case necessary for the structure of the Website and its procedures. Any request for other optional data will instead be preceded by a specific approval tick. The provision of all other data is optional, in accordance with the type of information the User wishes to provide to the Website.

7. Possible recipients of personal data

The data may be disclosed to consultants, or even to third parties who operate, also in the name and on behalf of the Data Controller, for the fulfillment of the services connected to the purposes indicated in this information, both within the EU and outside the EU (in the latter case, it will be exclusively of subjects adhering to the Privacy Shield protocol).

Browsing data and the like (for which reference is made to the above), as well as profiling cookies, including those of third parties, which will be communicated to the respective interested third parties, if they do not manage them directly as Data Controllers.

8. Retention period

The data provided by the data subject will be kept until the express revocation by the interested party, including through action on their browser, cleaning cookies, express request or otherwise expressed. The navigation data will be kept for the technical time necessary to fulfill the functions for which they were collected.

9. Rights of the interested party

Each data subject has the right of access, rectification, cancellation (oblivion), limitation, receipt of notification in the event of rectification, cancellation or limitation, portability, opposition and not to be the subject of an automated individual decision, including the profiling, pursuant to art. from 15 to 22 of the GDPR. These rights can be exercised in the forms and terms set out in art. 12 GDPR, by written communication sent to the Data Controller by e-mail to the address shop@ilgiardinodeitarocchi.it

The Data Controller will give an adequate response as soon as possible and in any case within 1 month of receiving the request. Pursuant to articles 15 and following of the Regulations, the user has the right to request access to their data at any time.

The Data Controller will give an adequate response as soon as possible and in any case within 1 month of receiving the request.

10. Right to withdraw consent

You can revoke this consent at any time by:

Sending an email to the Data Controller's address: shop@ilgiardinodeitarocchi.it
Express communication at the headquarters of the Data Controller

11. Complaints

Each data subject has the right to lodge a complaint pursuant to art. 77 and following of the GDPR to a supervisory authority, which for the Italian State is identified as the Data protection authority.

The forms, methods and terms for proposing complaints are provided for and governed by the national legislation in force. The complaint is without prejudice to administrative and judicial actions, which, for the Italian State, can alternatively be proposed to the same Data protection authority or to the competent Court.

12. Profiling

The personal data provided with the form may be subject to profiling.

Profiling allows the Data Controller to evaluate certain personal aspects of the Data Subject relating in particular to its preferences, its interests, its tastes with reference to the products sold and the activities carried out by the Data Controller, in order to allow the Data Controller to offer the data subject a more specific sales service aimed at its needs.

13. Cookie description

Cookies and similar technologies are very small text documents or pieces of code that often contain a unique identification code and perform various functions such as remembering login data to services, collecting statistical information on the pages visited, identifying the browser and device used, select targeted content and communications according to your preferences. When you visit a website or use a mobile application, a computer asks your computer or mobile device for permission to save the file on your computer or mobile device and to access the information. The information collected through cookies and similar technologies may include the date and time of the visit and how a particular website or mobile application is used.

14. Functionality and use of cookies

Cookies ensure that you stay logged in while visiting our online shop, that all items remain in your shopping cart, that you can shop safely and that the website continues to run smoothly. Cookies also ensure that we can see how our website is used and how we can improve it. Moreover, depending on your preferences, our cookies can be used to present you with targeted advertisements that match your personal interests.

Some cookies are necessary for the proper functioning of the website. Some of the following actions can be performed using these cookies. - Store items in an online shopping cart - Save cookie preferences for this website - Save language preferences - Log in to our portal. We need to check if you are logged in - home banking or payment by credit card or other systems.

Depending on the type of data they store and how long they remain stored on the user's device, cookies can be divided into different categories:

Session or temporary cookies are those that expire or are deleted when the browser is closed, while persistent ones have longer expirations (from a few minutes to whole months) depending on the functions they perform. These functions allow to divide cookies in other two types: technical and non-technical (or profiling);
technical cookies are those that manage the data necessary for the provision of the pages and facilitate navigation, allowing, for example, not having to re-enter the user and password to access particular services, to remember the last page visited or until what point you saw a video, to recognize the type of device you are using and to adapt the size of the images accordingly. Technical cookies also allow for aggregate statistical analysis on the most visited pages and user preferences, but only anonymously, and are not used to analyze the behaviour or preferences of individual users;
profiling cookies, on the other hand, are used to analyze the interests and browsing habits of individual users, to personalize their browsing and deliver, for example, content, including advertising, targeted to particular interests.

Cookies can be delivered directly by the operator of the site on which you are browsing (first-party cookies) or, if the site relies on external services for particular functions, by third parties (third-party cookies).

15. Deactivation or removal of cookies

You can choose not to accept all cookies except those necessary. In the browser settings, you can change the settings to make sure that cookies are blocked. Most browsers provide an explanation on how to do this in the so-called "help function". However, if you block cookies, it's possible that you will not be able to enjoy all the technical features that our website has to offer and that this may adversely affect your user experience.

We have made it easy to manage your consents via the following commands:

Change your consent / Withdraw your consent

This is your unique identity: ...............

Your last change to consent was recorded on: .........

If you would like to view the consents audit please contact the website administrator.

16. Cookies used on our website

NECESSARY

NAME

PURPOSE

_gid

Registers a unique ID for a website visitor and tracks how the visitor uses the site Web. The data is used for statistics.

_ga

Registers a unique ID for a website visitor and tracks how the visitor uses the site

Web. The data is used for statistics.

__cf_bm

The __cf_bm cookie is a cookie that is required to support Cloudflare Bot Management, currently on

private beta. As part of our bot management service, this cookie helps manage inbound traffic that matches the criteria associated with robots.

Cookiefirst-consent

This cookie saves your cookie preferences for this website. You can modify or withdraw your consent easily.

cookiefirst-id

This cookie contains your unique ID so that CookieFirst can identify unique visitors to this website.

PERFORMANCE

NAME

PURPOSE

__hstc

This cookie name is linked to websites created on the HubSpot platform. This name is reported by them as being used for website analysis.

__hssrc

Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered as a new session.

__hssc

This cookie name is linked to websites created on the HubSpot platform. This name is reported by them as being used for website analysis.

FUNCTIONAL

NAME

PURPOSE

hubspotutk

This cookie name is associated with websites created on the HubSpot platform. This cookie is used to track a visitor's identity. This cookie is passed to HubSpot when the form is submitted and used during contact deduplication.

Your consent applies to the following websites of the "IL GIARDINO DEI TAROCCHI" Foundation.

Oblivion form

Data processing

Data portability

e-Commerce Website by Oxatis