Welcome to the Privacy Policy of XCV Milano.

Who we are

XCV Milano di Matteo Sozzi CF SZZMTT95R24F205R, P.IVA 11261020967, with registered office in Settimo Milanese (MI), via Albarella 1, is the data controller and can be contacted at info@xcvmilano.com for any question concerning the functioning of the site and the processing of personal data.

What personal data we collect and why we collect it

The data collected by the site are those strictly necessary for the functioning of the website, such as navigation data and those necessary for placing product orders by customers (personal data, shipping address, billing data). Customers can register on the site to make purchases and keep the history of their orders.

Contact form

The contact form on the site transforms the information entered into an email sent to the address info@xcvmilano.com residing on servers provided by Siteground whose server farm is within the territory of the European Union and complies with the rules set by the GDPR .

Here you can find our supplier's security and compliance measures: https://www.siteground.com/term/301.htm

Cookies

Cookies are text fragments that contain some information on the use of the site to make it easier to use the site. For example, they keep the products in the cart or the login data.

If you have an account and access this site, a temporary cookie will be set to determine if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.

When you log in, several cookies will be set to save your login information and your screen display options. Login cookies last for two days and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie does not include any personal data, it simply indicates the ID of the article you just edited. Expires after 1 day.

We have installed the following cookies:

Cookies	Description	Duration	Guy
mailchimp_landing_site	It is a cookie issued by the MailChimp service for managing newsletters	1 years 19 days 15 hours 44 minutes	Functional
Tk_or	It is a cookie issued by the Jetpack plugin for sites that use WooCommerce stores. This cookie analyzes user behavior for Jetpack statistics	1 years 21 days 10 hours 52 minutes	Analytical
Tk_r3d	This cookie is installed by Jetpack. It is used for internal statistics aimed at improving the user experience	1 years 19 days 15 hours 8 minutes	Analytical
Tk_lr	This cookie is released by the JetPack plugin for sites that use WooCommerce stores. Analyze user behavior for JetPack features	1 years 19 days 23 hours 49 minutes	Analytical
_ga	This cookie is installed by Google Analytics. Counts visitors, sessions, logs data for campaigns and tracks site usage for Analytics reporting purposes. Cookies record information anonymously and assign a randomly generated number to uniquely identify visitors	1 years 20 days 8 hours 35 minutes	Analytical
_gid	This cookie is installed by Google Analytics. Records information about how visitors use the site and helps generate reports on site performance. The data collected includes the number of visits, the access devices and the pages visited anonymously	1 years 19 days 15 hours 5 minutes	Analytical
_gat_gtag_UA_160689000_1		1 years 19 days 15 hours 4 minutes	Analytical
_gat	This cookie is installed by Google Universal Analytics to expedite the request to limit data collection on high traffic sites	1 years 19 days 15 hours 4 minutes	Performance
_fbp	This cookie is released by Facebook to promote advertising when users are on Facebook or on a platform that uses Facebook ads after visiting this site	1 years 19 days 17 hours 13 minutes	Advertisers
fr	This cookie is released by Facebook to show relevant advertisements to users and to measure and improve advertisements. The cookie also tracks user behavior across the web on sites that have Facebook pixel or Facebook social plugin installed	1 years 19 days 17 hours 13 minutes	Advertising

Content embedded from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly the same way as if the visitor had visited the other website.

These websites may collect user data, use cookies, integrate additional third-party tracking and monitor your interaction with them, including tracking your interaction with embedded content if you have an account and are logged in to those websites.

Analytics

The Google Analytics software is installed on the site to obtain information on the use of the site and on how to improve the products and services provided.

Who we share your data with

Your data will not be sold or given to third parties. However, it may be necessary to share some of your personal data for the management of the contractual relationship with professionals and partners, such as shipping companies, accountants, legal consultants and public administrations. Some IT service providers, such as the hosting company, WordPress, WooCommerce or plugin providers, such as Google fonts, may know some personal data, such as navigation data. We try to minimize the data that is communicated to third parties and this is done only to take care of the functioning of the website, see the services that are of most interest and give the user the best experience of using the site.

The plugins installed are the following:

Google Analytics: https://policies.google.com/technologies/partner-sites?hl=it

Google Fonts: https://policies.google.com/privacy?hl=en

WooCommerce, Askimet and Jetpack: https://automattic.com/privacy/

Yoast SEO: https://yoast.com/privacy-policy/

Mailchimp: https://mailchimp.com/legal/privacy/

Facebook: https://www.facebook.com/about/privacy

TikTok: https://www.tiktok.com/legal/privacy-policy?lang=en#privacy-eea

How long we keep your data

For users who register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit or delete their personal information at any time (except their username which they cannot change). Website administrators can also see and edit this information.

The data is kept for the purpose of managing the contractual relationship and subsequently for the terms that the law requires for the purpose of keeping the tax documentation.

What rights do you have over your data

If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase all personal data held about you. This does not include data we are required to keep for administrative, legal or security purposes.

In accordance with the provisions of Reg. 2016/679 you have the right, at any time, to request:

– the deletion of data, with the exception of those that the Data Controller has the right or the obligation to keep by law;

– the limitation of the treatment;

– to be informed of the cancellation or limitation of the treatment you may have requested;

– the portability of data held by us in a standard format;

– to object to an automated decision-making process;

– to lodge a complaint with a Supervisory Authority. In Italy it is the Guarantor for the protection of personal data. Find more information on the website www.garanteprivacy.it

You can exercise your rights simply by sending an email to info@xcvmilano.com and you will receive confirmation of receipt of your request as soon as possible and news of your request in relation to the exercise of the rights indicated above within 30 days.

Where we transfer your data

Browsing data and visitor contact requests can be controlled through an automatic spam detection service, managed by JetPack, of the Automattic group. Find more information on the website https://automattic.com/privacy-notice/

Purchases made through the Woocommerce platform involve the sharing of some information through secure SSL connections with banking channels and PayPal. Some information, relating to the purchase process, can be shared with the accountant and legal advisors.

In connection with the purchase of a product, your contact details will be shared with the transport company in charge of the shipment.

Additional Information

I. How we protect your data

Our customers' data is stored on our computers and in the cloud.

The personal data contained in the e-mails end up, however, in the servers of our hosting service provider SiteGround which has the server farm located within the territory of the European Union and compliant with EU Regulation 2016/679.

We have set up organizational and technical procedures to protect your data on our computers and have chosen IT service providers who comply with the legislative provisions on the processing of personal data. We do not share your data unless it is strictly necessary for the execution of the contract or to fulfill legal obligations and we try in every way to prevent personal data violations, according to the provisions of EU Reg. 2016/679

II. From which third parties we receive data

We do not buy data, but we may receive some information through the integration of social networks if you contact us through them.

III. What automated decision making and/or profiling we do with your data

Nobody.

IV. Industry Regulatory Disclosure Requirements

This privacy policy has been drafted according to the provisions of EU Reg. 2016/679 (so-called GDPR) which has been operational throughout the European Union since 25 May 2018.

We may need to update the privacy policy from time to time to adapt it to regulatory changes.

Last updated: July 2023