Privacy Policy of NO.BA SRL.
NO.BA SRL collects some Personal Data from its Users.

DATA CONTROLLER

Isabel Benenato and related Services
address: Lucca, Via T. Nuvolari 83, 55061, Italy
tax code / VAT number: Camera di Commercio di Lucca
email: info@isabelbenenato.com
pec: noba@pec.it

TYPES OF DATA COLLECTED

Among the Personal Data collected by NO.BA SRL, either independently or through third parties, there are: Cookies, Usage data, email, Various types of Data, name, surname, telephone number, address and password.
Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed at the same time as the data is collected. Personal Data may be entered voluntarily by the User, or collected automatically during the use of NO.BA SRL.
Any use of Cookies - or of other tracking tools - by NO.BA SRL or by the owners of third party services used by NO.BA SRL, unless otherwise specified, has the purpose of identifying the User and recording the related preferences for purposes strictly related to the provision of the service requested by the User. Failure by the User to provide certain Personal Data may prevent NO.BA SRL from providing its services. The User assumes responsibility for the Personal Data of third parties published or shared through NO.BA SRL and guarantees that he has the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

METHOD, PLACE AND PURPOSE OF THE PROCESSING OF COLLECTED DATA
MPROCESSING METHODS

The Data Controller processes the Personal Data of Users by adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
In addition to the Data Controller, in some cases, categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as suppliers of third party technical services, postal couriers) may have access to the Data. hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.

PLACE

The Data is processed at the Data Controller's operating offices and in any other places where the parties involved in the processing are located. For more information, contact the owner.

TIMES

The Data is processed for the time necessary to perform the service requested by the User, or required by the purposes described in this document, and the User can always request the interruption of the processing or the cancellation of the Data.

PURPOSE OF THE PROCESSING OF COLLECTED DATA

The User Data is collected to allow the Owner to provide its services, as well as for the following purposes: Registration and authentication, Remarketing and Behavioral Targeting, Access to accounts on third party services, Statistics, Contacting the User, Advertising, Management addresses and sending of email messages, Hosting and backend infrastructure, Social features, Payment management, Management of support and contact requests, Display of contents from external platforms, Content and functionality performance tests (A / B testing), Interaction with external social networks and platforms and platform and hosting services.
The types of Personal Data used for each purpose are indicated in the specific sections of this document.

Facebook permissions requested by NO.BA SRL

NO.BA SRL may request some Facebook permissions that allow it to perform actions with the User's Facebook account and to collect information, including Personal Data, from it.
For more information on the following permissions, refer to the Facebook permissions documentation and the Facebook privacy policy.

The permissions required are as follows: Contact email and Basic information.

DETAILS ON THE PROCESSING OF PERSONAL DATA

Personal Data is collected for the following purposes and using the following services:

1) Accesso agli account su servizi terzi

This type of services allow NO.BA SRL to collect data from your accounts on third party services and perform actions with them.
These services are not activated automatically, but require the express authorization of the User.
Access to the Facebook account (NO.BA SRL): This service allows NO.BA SRL to connect with the User's account on the Facebook social network, provided by Facebook, Inc ..
Permissions asked: Contact email.
Place of processing: USA – privacy policy

2) CONTACT THE USER/h5>

Mailing List or Newsletter (ISABELBENENATO.COM): By registering with the mailing list or newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional, relating to NO.BA SRL. The User's email address could also be added to this list as a result of registering with ISABELBENENATO.COM or after making a purchase.
Personal data collected: email.

3) SOCIAL FUNCTIONS

Invite and suggest friends (ISABELBENENATO.COM)
NO.BA SRL may use the Personal Data provided to allow Users to invite their friends - for example through the address book, if access has been authorized - and to suggest friends or connections within it.
Personal Data collected: Various types of Data.

4) PAYMENT MANAGEMENT

The payment management services allow NO.BA SRL to process payments by credit card, bank transfer or other tools. The data used for the payment are acquired directly by the manager of the payment service requested without being in any way processed by NO.BA SRL.
Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.
PayPal (Paypal)
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments using their PayPal credentials.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
privacy policy
NEXI (Nexi Payments S.p.A.)
XPay is a payment service provided by Nexi Payments S.p.A.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: Italy – privacy policy

5) MANAGEMENT OF SUPPORT AND CONTACT REQUESTS

This type of service allows NO.BA SRL to manage support and contact requests received via email or through other tools, such as the contact form.
The Personal Data processed depend on the information provided by the User within the messages and the tool used for communication (for example the email address).
Smartsupp
Smartsupp is a support and contact request management service provided by Smartsupp.com S.r.o.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: Czech Republic – privacy policy

6) Gestione indirizzi e invio di messaggi email

ADDRESS MANAGEMENT AND SENDING OF EMAIL MESSAGES
This type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User.
These services may also allow the collection of data relating to the date and time the messages are displayed by the User, as well as the User's interaction with them, such as information on clicks on links inserted in messages.
MailChimp (The Rocket Science Group, LLC.)
MailChimp is an address management and email message sending service provided by The Rocket Science Group, LLC.
Personal data collected: email.
Place of processing: USA – privacy policy
Send in blue (Sendinblue SAS)
Sendinblue is an address management and email message sending service.
Personal Data collected: email, name, surname, country, community VAT number, postal address, telephone number, IP address (s) and domain name, access data and navigation data when the user gives the authorization, bank details when the user gives authorization, order history and complaints.
Place of processing: FRANCE – privacy policy

7) HOSTING AND BACKEND INFRASTRUCTURE

This type of service has the function of hosting data and files that allow NO.BA SRL to function, allow its distribution and provide a ready-to-use infrastructure to provide specific NO.BA SRL functions.
Some of these services work through servers geographically located in different places, making it difficult to determine the exact place where Personal Data is stored.
OVH (Web Services)
OVH is a hosting service provided by OVH GROUPE SAS.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Aruba (Web Services)
Aruba is a hosting service provided by ARUBA SPA.
Personal Data collected: various types of Data as specified in the privacy policy of the service.

8) INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS

This type of service allows interaction with social networks or other external platforms directly from the pages of NO.BA SRL ..
The interactions and information acquired by NO.BA SRL. they are in any case subject to the User's privacy settings relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
PayPal button and widget (Paypal)
The PayPal button and widget are interaction services with the PayPal platform, provided by PayPal Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: Consult the PaypalPrivacy Policy.

9) ADVERTISING

This type of service allows the use of User Data for commercial communication purposes in various forms of advertising, such as banners, also in relation to the User's interests. This does not mean that all Personal Data is used for this purpose. Data and conditions of use are indicated below.
Some of the services listed below may use cookies to identify the user or use the behavioral retargeting technique, ie display personalized advertisements based on the interests and behavior of the user, also detected outside NO.BA SRL. For more information on this, we suggest you check the privacy policies of the respective services. Direct Email Marketing (DEM)
NO.BA SRL uses User Data to send commercial proposals relating to services and products provided by third parties or not related to the product or service provided by NO.BA SRL.
Personal data collected: email.
Send in blue (Sendinblue SAS)
Sendinblue is an address management and email message sending service.
Personal Data collected: email, name, surname, country, community VAT number, postal address, telephone number, IP address (s) and domain name, access data and navigation data when the user gives the authorization, bank details when the user gives authorization, order history and complaints.
Place of processing: FRANCE – Privacy Policy.

10) REGISTRATION AND AUTHENTICATION

By registering or authenticating, the User allows the Application to identify him and give him access to dedicated services.
Depending on what is indicated below, the registration and authentication services could be provided with the help of third parties. If this happens, this application will be able to access some data stored by the third party service used for registration or identification.
Facebook Authentication (Facebook, Inc.)
Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and connected to the Facebook social network.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: USA – Privacy Policy
Twitter OAuth (Twitter, Inc.)
Twitter Oauth is a registration and authentication service provided by Twitter, Inc. and connected to the Twitter social network.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: USA – Privacy Policy
Google OAuth (Google Inc.)
Google OAuth is a registration and authentication service provided by Google Inc. and connected to the Google network.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: USA – Privacy Policy
Direct registration
The User registers by filling out the registration form and providing his Personal Data directly to ISABELBENENATO.COM.
Personal Data collected: surname, email, address, name, telephone number and password.
Log In with PayPal (Paypal)
Log In with PayPal is a registration and authentication service provided by PayPal Inc. and connected to the PayPal network.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: See the Paypal privacy policy – Privacy Policy

11) REMARKETING AND BEHAVIORAL TARGETING

This type of service allows NO.BA SRL and its partners to communicate, optimize and serve advertisements based on the past use of ISABELBENATO.COM by the User.
This activity is carried out through the tracking of Usage Data and the use of Cookies, information that is transferred to the partners to whom the remarketing and behavioral targeting activity is connected.
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that connects the activity of NO.BA SRL with the Facebook advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy PolicyOpt Out
Remarketing with Google Analytics for display advertising (Google Inc.)
Google Analytics for display advertising is a Remarketing and Behavioral Targeting service provided by Google Inc. that connects the tracking activity carried out by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy PolicyOpt Out
AdWords Remarketing (Google Inc.)
is a Remarketing and Behavioral Targeting service provided by Google Inc. that connects the activity of NO.BA SRL with the Adwords advertising network and the Doubleclick Cookie.
Personal Data collected: Cookies and Usage Data
Place of processing: USA – Privacy PolicyOpt Out
Facebook Custom Audience (Facebook, Inc.)
Facebook Custom Audience is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that connects the activity of NO.BA SRL with the Facebook advertising network.
Personal Data collected: Cookies and emails.
Place of processing: USA – Privacy PolicyOpt Out

12) PLATFORM AND HOSTING SERVICES

These services are intended to host and operate key components of NO.BA SRL, making it possible to provide NO.BA SRL from a single platform. These platforms provide the Owner with a wide range of tools such as, for example, analytical tools, for managing user registration, for managing comments and the database, for e-commerce, for processing payments etc. The use of these tools involves the collection and processing of Personal Data. Some of these services work through servers geographically located in different places, making it difficult to determine the exact place where Personal Data is stored.

13) Statistica

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of NO.BA SRL, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy PolicyPrivacy Policy
Facebook Ads conversion tracking (Facebook, Inc.)
Facebook Ads conversion tracking is a statistics service provided by Facebook, Inc. that connects data from the Facebook ad network with actions performed within NO.BA SRL.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
Google Tag Manager (Google Inc.)
Google Tag Manager is a statistics service provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
Twitter Ads conversion tracking (Twitter, Inc.)
Twitter Ads conversion tracking is a statistics service provided by Twitter, Inc. that links data from the Twitter ad network with actions performed within NO.BA SRL.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
User ID extension for Google Analytics (Google Inc.)
Google Analytics on NO.BA SRL uses a function called User ID. This allows a more accurate tracking of Users by assigning each one a unique ID for various sessions and devices, but in such a way as not to allow Google to personally identify an individual or permanently identify a specific device.
The User ID extension also allows you to connect data from Google Analytics with other user data collected by NO.BA SRL.
The Opt Out link provided below allows you to disable tracking for the device you are using, but does not exclude further tracking activities carried out by the Owner. To disable the latter as well, contact the owner via the contact email address.
Personal Data collected: Cookies.
Place of processing: USA – Privacy PolicyOpt Out

14) CONTENT AND FUNCTIONALITY PERFORMANCE TEST (A / B TESTING)

The services contained in this section allow the Data Controller to track and analyze the response from the User, in terms of traffic or behavior, in relation to changes in the structure, text or any other component of NO.BA SRL.
Google Website Optimizer (Google Inc.)
Google Website Optimizer is an A / B testing service provided by Google Inc. ("Google").
Google may use the Personal Data to contextualize and personalize the advertisements of its advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy

15) DISPLAY OF CONTENT FROM EXTERNAL PLATFORMS

This type of service allows you to view content hosted on external platforms directly from the pages of NO.BA SRL and interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
Google Fonts (Google Inc.)
Google Fonts is a font style visualization service managed by Google Inc. that allows NO.BA SRL to integrate such content within its pages.
Personal Data collected: Usage data and various types of Data as specified in the privacy policy of the service.
Place of processing: USA – Privacy Policy
Widget Google Maps (Google Inc.)
Google Maps is a map visualization service managed by Google Inc. that allows NO.BA SRL to integrate such content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy

ONLINE SALE OF GOODS AND SERVICES

The Personal Data collected will eventually also be used for the provision of services to the User or for the sale of products, including payment and possible delivery. The Personal Data collected to complete the payment may be those relating to the credit card, the current account used for the transfer or other payment instruments provided. The payment data collected by NO.BA SRL depend on the payment system used.

COOKIE POLICY

NO.BA SRL uses Cookies. To learn more and for detailed information, you can consult the Cookie Policy.

FURTHER INFORMATION ON THE TREATMENT
DEFENSE IN JUDGMENT

The User's Personal Data may be used by the Owner in court or in the stages leading to its eventual establishment for the defense against abuse in the use of NO.BA SRL or related services by the User.
The User declares to be aware that the Data Controller may be required to disclose the Data at the request of the public authorities.

SPECIFIC INFORMATION

At the request of the User, in addition to the information contained in this privacy policy, NO.BA SRL may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

SYSTEM LOG AND MAINTENANCE

For needs related to operation and maintenance, NO.BA SRL and any third party services used by it may collect system logs, which are files that record the interactions and which may also contain Personal Data, such as the User IP address.

INFORMATION NOT CONTAINED IN THIS POLICY

More information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

EXERCISE OF RIGHTS BY USERS

The subjects to whom the Personal Data refer have the right at any time to obtain confirmation of the existence or otherwise of the same from the Data Controller, to know its content and origin, to verify its accuracy or request its integration , cancellation, updating, rectification, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller.
NO.BA SRL does not support "Do Not Track" requests.
To find out if any third-party services used support them, the User is invited to consult the respective privacy policies.

CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Please therefore consult this page often, referring to the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this privacy policy, the User is required to cease using NO.BA SRL and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that time.

INFORMATION ABOUT THIS PRIVACY POLICY

The Data Controller is responsible for this privacy policy, drawn up.

DEFINITIONS AND LEGAL REFERENCES
PERSONAL DATA (OR DATA)

Any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number, constitutes personal data.

DATA OF USE

This is the information collected automatically by NO.BA SRL (or by third-party applications that NO.BA SRL uses), including: IP addresses or domain names of the computers used by the User who connects with NO. BA SRL, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (good end, error, etc.) the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed to inside the Application, with particular reference to the sequence of the pages consulted, to the parameters relating to the operating system and the IT environment of the User.

Utente

The individual who uses NO.BA SRL, who must coincide with the interested party or be authorized by him and whose Personal Data are being processed.

INTERESTED

The natural or legal person to whom the Personal Data refers.

RESPONSIBLE FOR TREATMENT (OR RESPONSIBLE)

The natural person, legal person, public administration and any other body, association or organization appointed by the Data Controller to process Personal Data, as established by this privacy policy.

HOLDER OF THE TREATMENT (OR HOLDER)

The natural person, legal person, public administration and any other body, association or organization which is responsible, even jointly with another owner, for decisions regarding the purposes, methods of processing personal data and the tools used, including the profile of the safety, in relation to the operation and use of NO.BA SRL. The Data Controller, unless otherwise specified, is the owner of NO.BA SRL.

NO.BA SRL

The hardware or software tool through which the Personal Data of Users are collected.

Cookie

Small portion of data stored in the User's device.

LEGAL REFERENCES

Notice to European Users: this privacy statement has been prepared in fulfillment of the obligations under Art. 10 of Directive no. 95/46 / EC, as well as the provisions of Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, on the subject of Cookies.

This privacy statement only concerns NO.BA SRL.

Cookie Policy of NO.BA SRL.
General model of clauses for "cookies" information

WHAT COOKIES ARE

The website of the company NO.BA SRL (the "Site") uses cookies to make its services simple and efficient for users who view the pages. Users who access the Site will see minimal amounts of information entered in the devices in use, whether they are computers or mobile devices, in small text files called "cookies" saved in the directories used by the user's web browser. There are various types of cookies, some to make the use of the Site more effective, others to enable certain features.

COOKIES OF THE SITE MANAGER

- Technical cookies: The Site uses only "technical" cookies, such as navigation or session cookies, analytical ones.
- Navigation or session cookies: Specifically, navigation or session cookies are used, aimed at ensuring normal navigation and use of the website, and therefore aimed at making navigation within the site functional and optimizing.
- Analytical cookies: Finally, there are analytics cookies, used exclusively by the site manager alone, to collect information, in aggregate and anonymous form, on the number of users and on how users visit the site. There are no profiling cookies used by the site manager, nor by third parties.

THIRD PARTY COOKIES

- Third-party service analysis cookies: These cookies are used in order to collect information on the use of the Site by users anonymously such as: pages visited, time spent, origins of the traffic of origin, geographical origin, age , gender and interests for marketing campaigns. These cookies are sent from third-party domains external to the Site.
- Cookies to integrate third-party products and software functions: This type of cookie integrates functions developed by third parties within the pages of the Site such as icons and preferences expressed in social networks in order to share the contents of the site or for the '' use of third-party software services (such as software to generate maps and additional software offering additional services). These cookies are sent from third-party domains and from partner sites that offer their functionality on the pages of the Site.

COOKIE INSTALLATION / UNINSTALLATION. BROWSER OPTIONS

The user can oppose the registration of cookies on his device by configuring the browser used for navigation: if he uses the Site without changing the browser settings, it is assumed that he intends to receive all the cookies used by the Site and to use all the functions. Please note that the user can prevent the use of some or all of the cookies described above, by configuring the browser used for navigation, and precisely to disable or enable the browser cookie of Explorer click here for Firefox click here, for Chrome click here and for Safari click here.

31.01.2020