Business Services s.n.c. con headquarters in Via Gutenberg 49, Poncarale (Brescia) (hereinafter the "Holder") is withstantly committed to protecting the online privacy of its users. This document was drawn up pursuant to art. 13 of EU Regulation 2016/679 (hereinafter: "Regulation") in order to allow you to know our privacy policy, to understand how your personal information is handled when you use our site (hereinafter"Site") and, if necessary, to give express and informed withsent to the processing of your personal data.

According to the rules of the Regulation, the treatments carried out by the Data Controller will be based on the principles of lawfulness, correctness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and withfidentiality.

What types of personal data do we process

a. Data provided during registration
The Data Controller will process the personal data necessary to register you correctly on the site to allow you access to our e-commerce and related services. These data are provided directly by the interested party and may include personal data and contact data, including, but not limited to, the name, surname, date of birth, e-mail address and number of phone.

If you authorize us or through the use of cookies, we may store authentication data or data relating to payment methods, which you can delete at any time and will be used only for the purpose of executing the contract.

b. Data collected to provide the service
To purchase our products we will ask you for the data necessary for the execution of the contract, such as shipping and billing data.
To provide our service we may need to process particular categories of data, pursuant to Article 9 of the Regulation.

c. Navigation data
The computer systems acquire, during the use of the platform and for its normal use, data which by their nature do not have an identifying function, but which could assume it in limited cases if processed or associated with data in the possession of third parties.
This category includes, for example, IP addresses, URI (Uniform Resource Identifier) addresses of the requested resources, such as the time of requests, the characteristics of the device used, the size of the files exchanged or other types of information. This is anonymous or aggregated data that ordinarily does not allow your identification and is used to identify anomalies and problems. The data could be kept to protect one of our rights, but except for this hypothesis they will not be kept for a period exceeding seven days.

Purpose, legal basis and explanation

Below we indicate the purposes for which we will use your personal data, the legal basis pursuant to Article 6 of the Privacy Regulation and a brief explanation of each purpose.

Purpose	Legal basis	Explanation
a) Registration, authentication and use of the site	Fulfillment of the contract
b) Order processing	Fulfillment of the contract
c) Storage of your payment details	Consent	We may ask you to save your data to allow you to speed up the purchase process. Without consent we will not save anything.
d) Communication to our business partners and third parties	Consent	If you authorize us, we may communicate data to operating partners (logistics and courier) but they will never be transferred to third parties for advertising or commercial operations.
Newsletter	Consent	By entering your e-mail address in the newsletter section, you will allow us to send you news and information on the topics of your interest.
Profiling	Consent	If you authorize us, we may use your data to carry out analyzes on your interests in order to place you in specific categories or predict your behaviors.
e) Sending of direct marketing communications	Legitimate interest	We will send you emails to update you only and exclusively of our products or services, if you have previously purchased something from us. This allows us to make new products or services more easily accessible and for you to stay up to date. Our e-mails will not be frequent or invasive and you have the opportunity at any time to deactivate the reception.
f) Maintenance and improvement of the service and your experience, management and market planning	Legitimate interest	We use anonymous and aggregated data as much as possible for any form of service improvement or planning; we may also need your personal data, but they will remain used only by us.
g) Detect or prevent fraudulent activity	Legal obligation and legitimate interest	We may need to process your personal data in the event of malicious activity on our site.
h) Compliance with orders from judicial or other public authorities	Legal obligation
i) Conservation of accounting records	Legal obligation

Some products may involve access to particular categories of data pursuant to Article 9 of the Privacy Regulation, therefore we may request your consent in order to provide you with additional services related to these products. These data will generally be processed using encryption, anonymization and pseudonymization techniques.

What happens if you decide not to provide us with your data?

The provision of your personal data for purposes a) and b) is necessary to allow you to register on the platform and to conclude the contract. Therefore, in the absence of the same, it will not be possible for us to provide you with our services.
Consent for purposes c) and d) is optional and does not entail any negative consequences for your user experience. We remind you, however, that consenting to these purposes allows us to grow and provide you with better and less expensive services.

Who we communicate your data to

On the basis of legitimate interest and as better specified in point 2 of this information, we communicate your personal data to other companies belonging to our group for better organizational efficiency, adopting all the necessary technical and legal precautions.
Furthermore, we communicate the data to our suppliers for the needs of providing the service or, where in the presence of legitimate interest, as indicated in Article 2.
Suppliers could include: delivery services, IT companies, legal consultants, payment processing companies, marketing companies. If the suppliers process personal data on behalf of the Data Controller, they will be appointed as data processors pursuant to art. art. 28 GDPR.

Transfer to third countries

Some of the personal data may be shared with subjects outside the European Economic Area; we ensure that this is done in compliance with Regulation 679/2016, adopting precautions that provide for the transfer only to countries subject to an adequacy decision, on standard contractual clauses approved by the European Commission, on consent or on other suitable legal basis.

Data retention

Personal data will be stored only and only for the needs related to each of the purposes referred to in paragraph 2 and in compliance with the principle of minimization.
We may need your data to defend your or our rights (articles 2946 cc. and following), as well as to comply with the obligations of maintaining accounting records. We therefore keep this data for as long as necessary and in any case no longer than 10 years.
We also keep your data whenever required by law or by an order of public authorities. We keep your data for marketing purposes for two years from the last commercial contact. It is without prejudice to your right to withdraw consent at any time by making a request to the Data Controller.

More information about the data retention period and the criteria used to determine these periods can be obtained by writing to: ecommercemanageritalia@gmail.com.

Your rights

You have the right to access the data concerning you at any time, pursuant to art. 7 of the Privacy Code and art. 15-22 GDPR. In particular, you can request access (Article 15 of the Regulation), rectification (Article 16 of the Regulation), cancellation (Article 17 of the Regulation), limitation of the processing of the data in the cases provided for by art. 18 of the Regulation, the portability of data concerning you in the cases provided for by art. 20 of the Regulation, as well as to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data). You also have the right to withdraw your consent at any time, pursuant to Article 7 of the Regulations; it is specified that the withdrawal of consent does not in any case affect the lawfulness of the treatment based on the consent prior to the withdrawal.

You can make a request to object to the processing of your data pursuant to art. 21 of the Regulation in which to highlight the reasons justifying the opposition: the Data Controller reserves the right to evaluate your request, which would not be accepted in the event of the existence of binding legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms .

How to exercise your rights or request information on the privacy policy

For any information and needs, as well as for the exercise of the aforementioned rights, we are at your disposal at the e-mail address: ecommercemanageritalia@gmail.com.

Changes

This privacy policy is effective from 22/05/2018. The Owner reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. The Data Controller will inform you of these changes and they will be binding as soon as they are published on the Site. The Data Controller therefore invites you to regularly visit this section to become aware of the most recent and updated version of the privacy policy in order to always be updated on the data collected and on the use made of it by the Data Controller.

INFORMATION ON COOKIES

What is a cookie?

Cookies are small text strings that the sites visited by the user send to his terminal (usually the browser), where they are stored before being re-transmitted to the same sites at the next visit by the same user. While browsing a site, the user can also receive cookies on his terminal that are sent from different sites or web servers (so-called "third parties"), on which some elements may reside (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the site that the same is visiting.

Why does LoveMeToo.eu use cookies?

Cookies are used for different purposes, such as the execution of computer authentication, session monitoring, storage of information on specific configurations or for targeted advertising.

Which cookies are used?

The Site uses the following cookies that can be de-selected, except for third-party cookies for which it must refer directly to the relative methods of selection and de-selection of the respective cookies, indicated by means of links:

• Technical navigation or session cookies and strictly necessary for the functioning of the Site or to allow you to use the content and services requested.

• Functionality cookies, i.e. used to activate specific functions of the Site and a series of selected criteria (for example, the language) in order to improve the service rendered.

ATTENTION: by disabling technical and / or functional cookies, the Site may not be available for consultation or some services or certain functions of the Site may not be available or may not work properly and you may be forced to modify or manually enter some information or preferences each time you visit the Site.

Third-party cookies, i.e. cookies from websites or web servers other than that of Business Services s.n.c. used for the purposes of these third parties. It should be noted that these third parties, listed below with the relative links to the privacy policies, are typically independent data controllers of the data collected through the cookies they serve; therefore, it will have to refer to their personal data processing policies, information and consent forms (selection and de-selection of the respective cookies), as specified in the aforementioned Provision. For the sake of completeness, it is also specified that Business Services s.n.c. does its utmost to be able to track cookies on its website. These are updated on a regular basis in the table below, where we give transparency on the cookies directly sent by Business Services s.n.c. and their purposes. As regards the third parties that send cookies through our Site, we provide below the links to the respective privacy policies: to these third parties we delegate, as already specified, the responsibility to provide the information and collect your consent, as required by Measure. This responsibility is to be referred not only to the cookies that third parties send directly, but also to any additional cookies that are sent through our Site by virtue of the use of services that the third parties themselves use. In fact, with respect to these cookies, sent by service providers of the aforementioned third parties, Business Services s.n.c. it does not have the possibility of exercising any control and does not know its characteristics or purposes. Below are the links to information on third-party cookies:

• Google: https://www.google.com/policies/privacy/partners/

• Google Adwords: https://policies.google.com/technologies/cookies

• Facebook: https://www.facebook.com/policies/cookies/

• Bing: https://privacy.microsoft.com/it-it/privacystatement

• Hotjar: https://www.hotjar.com/legal/policies/cookie-information

In detail, the cookies sent by Business Services s.n.c. through the Site are indicated below:

Type of cookie and owner	Technical name cookies	Operation and purpose	Persistence time
Tecnico - Hot Jar	_hjIncludedInSample	This cookie is functional to the evaluation of site navigation problems	1 years
Technical - Google Analytics	_ga	This cookie is functional to the evaluation of the performance of the site and the traffic carried out on it and to distinguish unique users.	2 years
Technical - Google Analytics	_grid	This cookie is functional to the evaluation of the performance of the site and the traffic carried out on it and to distinguish unique users.	24 ore
Analytical - MailChimp		This cookie is functional to evaluate orders, purchases, conversions and commercial statistics in aggregate form.

How can I disable cookies?

You can authorize, block or delete (in whole or in part) cookies through the specific functions of your browser.