Privacy Policy of poemiabag.com

This Website collects some Personal Data from its Users.

This document can be printed using the print command in the settings of any browser.

Policy Summary

Personal Data processed for the following purposes and using the following services:

• Contact the User
• Mailing list or newsletter

Personal Data: city; country; date of birth; email address; first name; last name; phone number; province; gender; Usage Data; ZIP/Postal code; Tracking Tools

• Contact form

Personal Data: city; country; date of birth; email address; first name; last name; phone number; province; gender; Usage Data; various types of Data; ZIP/Postal code; Tax ID; Tracking Tools

• Contact by phone

Personal data: telephone number

• Managing contacts and sending messages
• Klaviyo

Personal Data: various types of Data

• Siteground - Godaddy

Personal Data: date of birth; email; first name; last name; phone number; gender

• Payment Management
• PayPal

Personal Data: email address; billing address; first name; last name; phone number; various types of Data as specified in the privacy policy of the service

• Apple Pay and Google Pay

Personal Data: billing address; email address; first name; last name; phone number; Usage Data; various types of Data as specified in the privacy policy of the service

• Klarna

Personal Data: billing address; email address; first name; last name; phone number; various types of Data as specified in the privacy policy of the service

• Stripes

Personal Data: billing address; email address; first name; last name; Usage Data; various types of Data as specified in the privacy policy of the service

• Tag Management
• Google Tag Manager

Personal Data: Usage Data; Tracking Tools

• Data collection and online survey management
• Klaviyo Forms

Personal Data: Data communicated during the use of the service

• Hosting and backend infrastructure
• SiteGround

Personal Data: various types of Data as specified in the privacy policy of the service

• Interaction with live chat platforms
• Shopify Inbox

Personal Data: Data communicated during the use of the service

• Interaction with social networks and external platforms
• PayPal button and widgets, Linkedin social button and widgets and Facebook Like button and social widgets

Personal Data: Usage Data; Tracking Tools

• Collection of privacy preferences
• Consent Solution by iubenda

Personal Data: Data communicated during use of the service; Tracking Tools

• Cookie Solution by iubenda

Personal Data: Tracking Tools

• Registration and authentication
• Direct registration and profiling

Personal Data: CAP; Tax ID; date of birth; email address; User ID; gender; last name; image; profile picture; shipping address; physical address; phone number; province; state; username; various types of Data

• Registration and authentication provided directly by this Website
• Direct registration

Personal Data: CAP; city; country; date of birth; email address; first name; gender; last name; profile picture; address; physical address; phone number; province; state; username; various types of Data; VAT Number; Tax ID; User ID

• Remarketing and behavioral targeting
• Facebook Remarketing, Remarketing with Google Analytics and Google Ads Remarketing

Personal Data: Usage Data; Tracking Tools

• Klaviyo segmentation and social advertising

Personal Data: device information; email address; purchase history; Usage Data; Tracking Tools

• Facebook Custom Audience

Personal Data: email; Tracking Tools

• Statistics
• Google Analytics, Google Analytics with anonymized IP, Meta Events Manager, Facebook Ads conversion tracking (Facebook pixel), Google Ads conversion tracking

Personal Data: Usage Data; Tracking Tools

• Google Analytics 4

Personal Data: device information; number of Users; session statistics; Tracking Tools

• Google Analytics Demographics and Interests Reports

Personal Data: unique device identifiers for advertising (for example, Google Advertiser ID or IDFA); Tracking Tools

• Viewing content from external platforms
• Google Fonts, Font Awesome, Instagram Widget and YouTube Video Widget

Personal Data: Usage Data; Tracking Tools

Information on how to opt out of interest-based ads

In addition to any opt-out functions provided by any of the services listed in this document, Users can read more about how to opt-out of interest-based advertising in the relevant section of the Cookie Policy.

Further information on the processing of Personal Data

• Selling goods and services online

The Personal Data collected are used to provide services to the User or to sell products, including payment and any delivery. The Personal Data collected to complete the payment may be those relating to the credit card, the bank account used for the transfer or other payment instruments provided. The Payment Data collected by this Website depends on the payment system used.

Contact information

• Data Controller

Poemia srl ​​- Via G.Puccini 22, 25080 Padenghe sul Garda – Brescia

Owner's email address: amministrazione@poemia.com

Full Policy

Data Controller

Poemia srl ​​- Via G.Puccini 22, 25080 Padenghe sul Garda – Brescia

Owner's email address: amministrazione@poemia.com

Types of Data collected

Among the types of Personal Data that this Website collects, by itself or through third parties, there are: Trackers; Usage Data; email address; first name; last name; phone number; province; country; ZIP/Postal code; gender; date of birth; city; physical address; various types of Data; Tax ID; User ID; billing address; Data communicated while using the service; shipping address; username; status; picture; profile picture; house number; language; prefix; device information; purchase history; number of Users; session statistics; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).

Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data are collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.
Users who have doubts about which Data are mandatory are encouraged to contact the Owner.
Any use of Cookies - or other tracking tools - by this Website or by the owners of third-party services used by this Website, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and guarantees that he/she has the right to communicate or disseminate them, freeing the Owner from any liability towards third parties.

Method and place of processing of the collected data

Treatment methods

The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using computer and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Owner, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal, system administration personnel) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Owner. The updated list of Data Processors may always be requested from the Data Controller.

Legal basis for processing

The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

• the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be allowed to process Personal Data without the User's consent or any other of the legal bases specified below, until the User objects (“opts-out”) to such processing. However, this does not apply when the processing of Personal Data is regulated by European legislation on the protection of Personal Data;
• processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
• processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• processing is necessary for the pursuit of the legitimate interest of the Owner or third parties.

However, it is always possible to ask the Owner to clarify the specific legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

Place

The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section concerning the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis of the transfer of Data outside the European Union or to an international organization governed by public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Owner to protect the Data.

The User can verify whether one of the transfers described above is taking place by checking the section of this document relating to the details on the processing of Personal Data or by asking the Owner by contacting him at the contact details provided at the beginning.

Retention period

The Data is processed and stored for the time required by the purposes for which it was collected.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until the performance of such contract is completed.
• Personal Data collected for purposes related to the legitimate interest of the Owner will be retained until such interest is fulfilled. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When the processing is based on the User's consent, the Owner may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of such period, the right of access, deletion, rectification and the right to portability of the Data can no longer be exercised.

Purpose of the Processing of Collected Data

The User's Data is collected to allow the Owner to provide its Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of its Users or third parties), identify any malicious or fraudulent activity, as well as the following: Analytics, Displaying content from external platforms, Tag Management, Contacting the User, Managing contacts and sending messages, Interaction with support and feedback platforms, Handling payments, Heat mapping and session recording, Interaction with online survey platforms, Interaction with data collection platforms and other third parties, Managing data collection and online surveys, Managing support and contact requests, Hosting and backend infrastructure, Interaction with live chat platforms, Interaction with external social networks and platforms, Collection of privacy preferences, Registration and authentication, Registration and authentication provided directly by this Website, Remarketing and behavioral targeting and Platform and hosting services.

To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User may refer to the section “Details on the processing of Personal Data”.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

• Contact the User

Mailing list or newsletter (this Website)

By registering on the mailing list or for the newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be transmitted. The User's email address may also be added to this list as a result of registering on this Website or after making a purchase.

Personal Data processed: city; country; date of birth; email address; first name; last name; phone number; province; gender; Usage Data; ZIP/Postal code; Tracking Tools.

Contact form (this website)

By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header.

Personal Data processed: city; country; date of birth; email address; first name; last name; phone number; province; gender; Usage Data; various types of Data; ZIP/Postal code; Tax ID; Tracking Tools.

Contact by phone (this Website)

Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Website, as well as to satisfy support requests.

Personal Data processed: telephone number.

• Managing contacts and sending messages

This type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User.
These services may also allow us to collect data relating to the date and time the messages are viewed by the User, as well as the User's interaction with them, such as information on clicks on links inserted in messages.

Klaviyo (Klaviyo Inc.)

Klaviyo is an email address management and message sending service provided by Klaviyo Inc.

To use the service provided by Klaviyo, the Owner generally shares information regarding Users (who make purchases), such as contact details and purchase history. For further information regarding the scope of such sharing, check the indications below under the heading “Personal Data processed”.

Personal Data processed: various types of Data.

Place of processing: United States – Privacy Policy – ​​Opt out .

Sendgrid (Sendgrid)

Sendgrid is an email address management and message sending service provided by Sendgrid Inc.

Personal Data processed: date of birth; email address; first name; last name; phone number; gender.

Place of processing: United States – Privacy Policy .

• Payment Management

Unless otherwise specified, this Website processes all payments by credit card, bank transfer or other means through external payment service providers. In general and unless otherwise stated, Users are requested to provide their payment details and personal information directly to such payment service providers.
This Website is not involved in the collection and processing of such information: it will instead only receive a notification from the relevant payment service provider that payment has been made.

PayPal (Paypal)

PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.

Personal Data processed: billing address; email address; first name; last name; phone number; various types of Data as specified in the privacy policy of the service.

Place of processing: See Paypal’s privacy policy – ​​Privacy Policy .

Apple Pay (Apple Inc.)

Apple Pay is a payment service provided by Apple Inc., which allows the User to make payments using their mobile phone.

Personal Data processed: billing address; email address; first name; last name; phone number; Usage Data; various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy .

Google Pay

Google Pay is a payment service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which allows the User to make online payments using their Google credentials.

Personal Data processed: billing address; email address; first name; last name; phone number; Usage Data; various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Klarna (Klarna AB)

Klarna is a payment service provided by Klarna AB.

Personal Data processed: billing address; email address; first name; last name; phone number; shipping address; various types of Data as specified in the privacy policy of the service.

Place of processing: Sweden – Privacy Policy .

Stripe (Stripe Technology Europe Ltd)

Stripe is a payment service provided by Stripe Technology Europe Ltd.

Personal Data processed: billing address; email address; first name; last name; Usage Data; various types of Data as specified in the privacy policy of the service.

Place of processing: Ireland – Privacy Policy .

• Tag Management

This type of service is functional to the centralized management of the tags or scripts used on this Website.
The use of such services involves the flow of User Data through them and, if applicable, their retention.

Google Tag Manager

Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

• Data collection and online survey management

This type of service allows this Website to manage the creation, implementation, administration, distribution and analysis of online forms and surveys in order to collect, save and reuse the Data of the Users who respond.
The Personal Data collected depends on the information requested and provided by Users in the corresponding online form.

These services may be integrated with a wide range of third-party services to allow the Owner to perform subsequent actions with the processed Data - for example, contact management, sending messages, statistics, advertising and payment processing.

Hotjar surveys (Hotjar Ltd.)

Hotjar surveys is a survey generator and data collection platform provided by Hotjar Ltd.
Hotjar surveys may use cookies to track User behavior. Users may opt out of Hotjar surveys cookie tracking by visiting this opt-out page .

Hotjar surveys respects the “Do Not Track” option available in most modern browsers, which, if activated, sends a special signal to stop tracking the User’s activity. Users can find more information on how to enable the “Do Not Track” option for each supported browser here .

Personal Data processed: Data communicated during use of the service.

Place of processing: Malta – Privacy Policy – ​​Opt Out .

Klaviyo Forms (Klaviyo Inc.)

Klaviyo Forms is a form builder and data collection platform provided by Klaviyo Inc.

To use the service provided by Klaviyo, the Owner generally shares information regarding Users (who make purchases), such as contact details and purchase history. For further information regarding the scope of such sharing, check the indications below under the heading “Personal Data processed”.

Personal Data processed: Data communicated during use of the service.

Place of processing: United States – Privacy Policy .

• Heat mapping and session recording

Heat mapping services are used to identify the areas of this Website with which Users interact most frequently, in order to detect which of them attract the most interest. These services allow you to monitor and analyze traffic data and are used to track User behavior.
Some of these services may record sessions and make them available for later viewing.

Hotjar Heat Maps & Recordings (Hotjar Ltd.)

Hotjar is a heat mapping and session recording service provided by Hotjar Ltd.
Hotjar honors generic “Do Not Track” headers. This means that the browser can tell the script not to collect any data from the User. This is a setting that is available in all major browsers. More information about opting out from Hotjar can be found here.

Personal Data processed: Usage Data; Tracking Tools; various types of Data as specified in the privacy policy of the service.

Place of processing: Malta – Privacy Policy – ​​Opt Out .

• Hosting and backend infrastructure

This type of service has the function of hosting Data and files that allow this Website to function, allow its distribution and provide a ready-to-use infrastructure to provide specific features of this Website.

Some services among those listed below, if present, may operate on geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored.

SiteGround

SiteGround is a hosting service

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: Italy – Privacy Policy .

• Interaction with live chat platforms

This type of service allows you to interact with live chat platforms managed by third parties, directly from the pages of this Website, in order to contact and be contacted by the support service of this Website.
If an interaction service with live chat platforms is installed, it is possible that, even if Users do not use the service, it collects Usage Data relating to the pages in which it is installed. Furthermore, live chat conversations may be recorded.

Spotify Inbox

Spoyify Inbox is an interaction service with the Spotify live chat platform

Personal Data processed: Data communicated during use of the service.

Place of processing: United States – Privacy Policy .

• Interaction with data collection platforms and other third parties

This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Website for the purpose of saving and reusing data.
If one of these services is installed, it is possible that, even if the Users do not use the service, it collects Usage Data relating to the pages on which it is installed.

• Interaction with social networks and external platforms

This type of service allows interaction with social networks, or other external platforms, directly from the pages of this Website.
The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out from the respective services to ensure that the data processed on this Website are not linked to the User's profile.

PayPal button and widget (Paypal)

The PayPal button and widgets are interaction services with the PayPal platform, provided by PayPal Inc.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: See Paypal’s privacy policy – ​​Privacy Policy .

Linkedin button and social widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are services of interaction with the Linkedin social network, provided by LinkedIn Corporation.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy .

Facebook Like button and social widgets

The “Like” button and Facebook social widgets are services of interaction with the Facebook social network, provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of the Data,

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

• Collection of privacy preferences

This type of service allows this Website to collect and save Users' preferences regarding the collection, use and processing of their personal information, as required by applicable privacy legislation.

Consent Solution by iubenda (iubenda srl)

iubenda's Consent Solution allows you to save and retrieve records of Users' consent to the processing of Personal Data, as well as the information and preferences expressed in relation to the consent provided.
To this end, it uses a Tracking Tool that temporarily stores the pending information on the User's device until it is processed by the API. The Tracking Tool (a browser feature called localStorage) is then deleted.

Personal Data processed: Data communicated during use of the service; Tracking Tools.

Place of processing: Italy – Privacy Policy .

Cookie Solution by iubenda (iubenda srl)

iubenda's Cookie Solution allows the Owner to collect and save Users' preferences regarding the processing of personal data and in particular the use of Cookies and other Tracking Tools on this Website.

Personal Data processed: Tracking Tools.

Place of processing: Italy – Privacy Policy .

• Registration and authentication

By registering or authenticating, the User allows this Website to identify him/her and give him/her access to dedicated services.
Depending on what is indicated below, registration and authentication services may be provided with the help of third parties. If this occurs, this Website will be able to access some Data stored by the third party service used for registration or identification.
Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to learn more, please refer to the description of each service.

Direct registration and profiling (this Website)

By registering or authenticating, the User allows this Website to identify him/her and give him/her access to dedicated services. The Owner may process the Data collected at the time of registration or authentication by Users for targeting and profiling purposes; to learn more, Users can contact the Owner using the contact details provided in this document.

Personal Data processed: CAP; Tax ID; date of birth; email address; User ID; gender; last name; picture; profile picture; billing address; shipping address; physical address; phone number; province; state; username; various types of Data.

• Registration and authentication provided directly by this Website

By registering or authenticating, the User allows this Website to identify him/her and give him/her access to dedicated services. Personal Data is collected and stored exclusively for registration or identification purposes. The Data collected is only that necessary to provide the service requested by the User.

Direct registration (this Website)

The User registers by filling out the registration form and providing this Website with his/her Personal Data directly.

Personal Data processed: CAP; city; Fiscal Code; date of birth; email address; User ID; image; profile picture; billing address; language; nation; name; street number; physical address; phone number; prefix; province; sex; state; username; various types of Data.

• Remarketing and behavioral targeting

This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the User's past use of this Website.
This activity is facilitated by tracking Usage Data and using Tracking Tools to collect information that is then transferred to partners who manage remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
Generally, services of this type offer the possibility to disable such tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can read more about how to disable interest-based advertising in the dedicated section "How to disable interest-based advertising" in this document.

Facebook Remarketing

Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the processing of the Data, which connects the activity of this Website with the Facebook advertising network.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Klaviyo segmentation and social advertising (Klaviyo Inc.)

Klaviyo segmentation and social advertising is a remarketing and behavioral targeting service provided by Klaviyo Inc.

Klaviyo segmentation and social advertising uses tracking technology to monitor User behavior. This Data is then used to personalize the User experience and to provide targeted advertising. Klaviyo segmentation and social advertising may also connect the collected Data with other networks, including advertising networks, and enable these third parties to track and target the User. The Owner, unless otherwise provided in this document, has no direct relationship with the third parties that Klaviyo segmentation and social advertising may include.

To use the service provided by Klaviyo, the Owner generally shares information regarding Users (who make purchases), such as contact details and purchase history. For further information regarding the scope of such sharing, check the indications below under the heading “Personal Data processed”.

Personal Data processed: device information; email address; purchase history; Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt out .

Facebook Custom Audience

Facebook Custom Audience is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the processing of the Data, which connects the activity of this Website with the Facebook advertising network.

Users may opt out of Facebook's use of Tracking Tools for ads personalization by visiting this opt-out page .

Personal Data processed: email; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Remarketing with Google Analytics

Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, which connects the tracking activity carried out by Google Analytics and its Tracking Tools with the Google Ads advertising network and the Doubleclick Cookie.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out Opt Out .

Google Ads Remarketing

Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, which connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.

To understand Google's use of Data, please see Google's partner policy .

Users may opt out of using Google Tracking Tools for ads personalization by visiting Google's Ads Settings .

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

• Platform and hosting services

These services have the purpose of hosting and running key components of this Website, making it possible to provide this Website from a single platform. These platforms provide the Owner with a wide range of tools such as, for example, analytical tools, for managing user registration, for managing comments and databases, for e-commerce, for payment processing, etc. The use of such tools involves the collection and processing of Personal Data.
Some of these services work through servers geographically distributed in different locations, making it difficult to determine the exact location where the Personal Data is stored.

WordPress.com (Automattic Inc.)

WordPress.com is a platform provided by Automattic Inc. that allows the Owner to develop, operate and host this Website.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy .

• Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics

Google Analytics is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the advertisements of its own advertising network.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Google Analytics with anonymized IP

Google Analytics is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the advertisements of its own advertising network.
This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the IP address of Users within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to a Google server and shortened within the United States.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Meta Events Manager (Meta Platforms Ireland Limited)

Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can provide the Owner with information on traffic and interactions on this Website.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: Ireland – Privacy Policy .

Facebook Ads Conversion Tracking (Facebook Pixel)

Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the processing of the Data, which connects data from the Meta advertising network with actions performed within this Website. The Facebook pixel monitors conversions that can be attributed to Facebook, Instagram and Audience Network ads.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Google Analytics 4

Google Analytics is a statistics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the advertisements of its own advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is recorded in any data center or server. To learn more, you can consult the official Google documentation .

Personal Data processed: device information; number of Users; session statistics; Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

Google Ads Conversion Tracking

Google Ads conversion tracking is a statistics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, which connects data from the Google Ads advertising network with actions performed within this Website.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Google Analytics Demographics and Interests Reports

Google Analytics Demographics and Interests Reporting is an Advertising Reporting feature that makes available demographic and interest data within Google Analytics for this Website (demographics means age and gender data).

Users may opt out of Google's use of cookies by visiting Google's [Ads Settings] (https://adssettings.google.com/authenticated).

Personal Data processed: unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Tracking Tools.

Place of processing: United States – Privacy Policy – ​​Opt Out ; Ireland – Privacy Policy – ​​Opt Out .

• Viewing content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service may still collect data on web traffic relating to the pages where the service is installed, even when users do not use it.

Google Fonts

Google Fonts is a service for displaying font styles managed by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, which allows this Website to integrate such content within its pages.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Font Awesome (Fonticons, Inc.)

Font Awesome is a font visualization service managed by Fonticons, Inc. that allows this Website to integrate such content within its pages.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy .

Instagram Widgets

Instagram is an image visualization service managed by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the processing of the Data, which allows this Website to integrate such content within its pages.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

YouTube Video Widgets

YouTube is a video content viewing service managed by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of the Data, which allows this Website to integrate such content within its pages.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

Information on how to opt out of interest-based ads

In addition to any opt-out functions provided by any of the services listed in this document, Users can read more about how to opt-out of interest-based advertising in the relevant section of the Cookie Policy.

Further information on the processing of Personal Data

• Selling goods and services online

The Personal Data collected are used to provide services to the User or to sell products, including payment and any delivery. The Personal Data collected to complete the payment may be those relating to the credit card, the bank account used for the transfer or other payment instruments provided. The Payment Data collected by this Website depends on the payment system used.

User Rights

Users may exercise certain rights with reference to the Data processed by the Owner.

In particular, the User has the right to:

• revoke consent at any time. The User may revoke consent to the processing of their Personal Data previously expressed.
• object to the processing of your Data. The User may object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below.
• access their Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
• verify and request rectification. The User can verify the accuracy of their Data and request its updating or correction.
• obtain the limitation of the processing. When certain conditions apply, the User can request the limitation of the processing of their Data. In this case, the Owner will not process the Data for any purpose other than their conservation.
• obtain the deletion or removal of their Personal Data. When certain conditions apply, the User may request the deletion of their Data by the Owner.
• receive your Data or have it transferred to another owner. The User has the right to receive his/her Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain the transfer without hindrance to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it.
• lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public authority vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing for reasons related to their particular situation.

Users are hereby informed that, if their Data is processed for direct marketing purposes, they may object to the processing without providing any justification. To find out whether the Data Controller processes data for direct marketing purposes, Users may refer to the respective sections of this document.

How to exercise your rights

To exercise User rights, Users may direct a request to the Owner's contact details indicated in this document. Requests are filed free of charge and processed by the Owner as soon as possible, in any case within one month.

Cookie Policy

This Website uses Tracking Tools. To learn more, the User can consult the Cookie Policy .

More information about the treatment

Defense in court

The User's Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this Website or related Services by the User.
The User declares to be aware that the Owner may be required to reveal the Data by order of public authorities.

Specific information

Upon request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Website and any third-party services used by it may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to “Do Not Track” requests

This Website does not support “Do Not Track” requests.
To find out if any third-party services used support them, the User is invited to consult their respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page and, if possible, on this Website and, if technically and legally feasible, by sending a notification to Users through one of the contact details in its possession. Please therefore consult this page frequently, referring to the date of the last modification indicated at the bottom.

If the changes affect treatments whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.

Definitions and legal references

Personal Data (or Data)

Personal data is any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

This information is collected automatically through this Website (including third-party applications integrated into this Website), including: the IP addresses or domain names of the computers utilized by the User who connects to this Website, the URI (Uniform Resource Identifier) ​​addresses, the time of the request, the method utilized to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system utilized by the visitor, the various temporal connotations of the visit (for example, the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages visited, the parameters relating to the operating system and the User's IT environment.

User

The individual using this Website who, unless otherwise specified, coincides with the Data Subject.

Interested

The natural person to whom the Personal Data refers.

Data Controller (or Controller)

The natural person, legal person, public administration or any other entity that processes personal data on behalf of the Owner, as set out in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools used, including the security measures relating to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or this Application)

The hardware or software tool by which the Personal Data of Users is collected and processed.

Service

The Service provided by this Website as defined in the relevant terms (if any) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.

Cookie

Cookies are Tracking Tools that consist of small portions of data stored within the User's browser.

Tracking Tool

By Tracking Tool we mean any technology - e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that allows tracking Users, for example by collecting or storing information on the User's device.

Legal references

This privacy policy is drafted on the basis of multiple legislative systems, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy policy applies exclusively to this Website.

Integrations

This information is provided by Poemia Srl as data controller (hereinafter also “Company” or “Owner”) of the personal data acquired through the website [poemia.com], of which it is the owner, pursuant to the current privacy and data protection legislation and taking into account the provisions of the Authority for the Protection of Personal Data (hereinafter also “Guarantor”), Regulation (EU) 2016/679 (hereinafter also “Regulation”), Legislative Decree no. 196/2003 and subsequent amendments (hereinafter also “Privacy Code”) and, in general, the applicable reference legislation.

This information is provided to users who browse and use the services available on the website [poemia.com].
Your registration on the website [poemia.com] is subject to prior reading and acceptance of this information regarding the processing of personal data and your authorization for the related processing.

Source and categories of data processed
The personal data that the Company may acquire will be acquired directly from the interested user who browses the website [poemiabag.com]
The data processed may be, by way of example:

Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified subjects, but by its very nature could allow users to be identified. This category of data includes (i) the IP addresses or domain names of the computers used by users who connect to the site, (ii) the URI (Uniform Resource Identifier) ​​addresses of the resources requested, (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numerical code indicating the status of the response given by the server (successful, error) and (vii) other parameters relating to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of this website and to check its correct functioning and are deleted immediately after processing.
This website uses technical, analytical, profiling cookies, both its own and third-party,

Data provided voluntarily by the user
The optional, explicit and voluntary sending by the user who navigates this website and interacts with it via
• The discount form for you on the page https://www.poemiabag.com/
• The registration form on the site, on the page https://www.poemiabag.com/account/register
• The purchase form on the page https://www.poemiabag.com/it/checkout/
• The return form on the page poemiabag.com/pages/resi-e-rimbrsi
• The contact form on the page poemiabag.com/it/pages/contatti

involves the acquisition and processing by the Data Controller of such data and any other information contained in such communications for the purposes indicated in the following paragraph.
The data that may be processed are mainly identification, contact and personal data (for example, name and surname, residential address, telephone number, e-mail address, etc.). In no case will personal data of a sensitive nature be processed pursuant to art. 9 of the Regulation) or judicial data pursuant to art. 10 of the Regulation).

Furthermore, for needs related to the operation of this website or its maintenance, system logs may be processed, i.e. files that record interactions with the user and which may also include personal data, including the user's IP address.

Full details on each type of data collected will be provided in the dedicated sections of this privacy policy or through specific information texts that the user can view before the data is collected.

Purpose of the processing
The processing of personal data acquired is carried out for:
a) outline the authentication profile required to access the site and therefore allow the user to register on the same (also for the purposes of issuing the loyalty card), execute the conditions of use of the site accepted during registration, allow the use of the services provided by this site (for example, the purchase of products, shipping of purchased products, managing any returns) following the user's registration, for the management of any requests made by the user via the website. The provision of data is, depending on the case, a contractual obligation or a pre-contractual measure adopted at the request of the interested party and failure to provide such data will make it impossible for the Company to accurately execute what has just been outlined;
b) fulfill the obligations set forth by provisions of laws and regulations, or execute an order of the judicial authority or other authorities to which the Data Controller is subject. The provision of data is a legal obligation and failure to provide it will make it impossible for the Company to fulfill the obligations outlined above exactly;
c) allow the Data Controller to carry out direct marketing activities, in order to provide the user with information on promotions, discounts, benefits, events, products and other services by the Data Controller, including through the sending of specific advertising and/or information material (e.g. catalogues) in paper and/or electronic form, by means of newsletters (via e-mail) or other tools (e.g. SMS, instant messaging). The provision of data is optional and requires the user's prior, free and specific consent, and failure to provide such data will make it impossible for the Company to carry out the marketing activities contemplated therein (and will not have any negative consequences regarding the possibility of registering or browsing the website);
d) the collection, analysis of user behavior, profiling, recording and processing of purchase data, including those relating to the details of the frequency, quantity and type of purchases (even if only potential) for the purpose of analyzing the propensity to purchase and, in general, of profiling the user to prepare and propose personalized promotions and offers, as well as for market analysis and research. The provision of data is optional and requires the prior consent of the user, free and specific, and failure to provide such data will make it impossible for the Company to carry out the profiling activities contemplated therein (and will not have any negative consequences regarding the possibility of registering or browsing the website).
e) the transfer of personal data to third parties operating in the sector of [•] for marketing purposes, market research or other sample research, to measure the level of satisfaction, to receive informational, promotional, commercial and advertising material or material relating to competitions and initiatives, also through the sending of specific material (e.g. catalogues, flyers) in paper and/or electronic form, by means of newsletters (e-mail) or other tools (instant messaging). The provision of data is optional and requires the prior consent of the user, free and specific, and failure to provide such data will make it impossible for the Company to carry out the activities contemplated therein (and will not have any negative consequences regarding the possibility of registering or browsing the website).
f) allow the Data Controller to register, following the user's registration to the newsletter service or after making a purchase through this site, the user's email address in a contact list to which emails containing information of a commercial and promotional nature may be sent. The provision of data is optional and requires the user's prior, free and specific consent, and failure to provide such data will make it impossible for the Company to carry out the activities contemplated therein (and will not have any negative consequences regarding the possibility of registering or browsing the website).

Legal basis for processing
The legal basis for data processing is given depending on the processing by law, by the execution of contractual obligations or pre-contractual measures adopted at the request of the interested party as well as by the specific consent possibly given by the same.

Data processing methods and data retention
The processing of personal data will take place mainly through computer or telematic tools, or, with regard to the use of personalized services through profiling, where the relevant consent is given, the processing will take place through an automated decision-making process using a specific algorithm that will decide which communications are best suited to the user's profile or which could be of greatest interest.
In any case, with reference to all the treatments referred to herein, the Data Controller will adopt adequate security measures to guarantee the security and confidentiality of your personal data, all in compliance with the provisions of the legislation in force.
In carrying out processing activities, the Company undertakes, among other things, to:
• adopt suitable security measures to guarantee adequate data protection, taking into account the potential impacts that the processing has on the fundamental rights and freedoms of the interested party;
• notify, within the timeframes and in the cases provided for by the mandatory legislation, any violations of personal data to the interested parties;
• ensure that processing operations comply with applicable legal provisions.
The personal data of the users of the site will be stored for the time strictly necessary to carry out the primary purposes illustrated in this information, or in any case as necessary for the protection of the rights of both the interests of the users and of the Company and in any case, where applicable, until the revocation of your consent, which may occur at any time.
Specifically, the data will be processed in compliance with the timeframes established within the relevant procedure, to be requested at the address amminstration@poemia.com
With specific reference to the transfer of data to third parties for the aforementioned purposes, please refer to the specific information prepared by such third parties pursuant to art. 14 of the Regulation. In any case, the user is free, even in this case, to revoke the consent given at any time.

Scope of communication of personal data
In compliance with the minimum security measures, the data may also be communicated to public security entities and other public and private entities for the fulfillment of obligations established by law.
Furthermore, personal data will not be disclosed. However, they may be communicated to the following recipients:
• to companies that the Company uses to carry out technical and organisational tasks (by way of example but not limited to, companies that provide management services for the information system and communication networks, maintenance and assistance connected to the website);
• third-party companies operating in the review sector for marketing purposes;
• third-party firms or companies in the context of assistance and consultancy relationships;
• third-party companies that support the data controller for the delivery/delivery of purchases (i.e. couriers).
• third-party companies that allow user monitoring in a statistical and aggregate manner (e.g. GA4)
The subjects belonging to the above categories perform the function of Data Controller, or operate in complete autonomy as separate Data Controllers.

The data processing will be carried out by the Data Controller's employees specifically identified by the latter as authorised data processing personnel, who have received adequate training.

In compliance with the conditions and guarantees established by the Regulation, the data may be transferred to countries outside the European Economic Area, including for example the United States of America (USA), which do not offer a level of privacy and personal data protection comparable to that guaranteed by Italian and European laws. Such transfers may only take place in the presence of adequate guarantees or the explicit consent of the user.

Rights of the interested party
The subjects to whom the personal data refer have the right at any time to obtain confirmation as to whether or not personal data concerning them are being processed and, where that is the case, to obtain access to the data and information referred to in art. 15 of the Regulation, to obtain a copy of such data or the relative rectification (arts. 15 and 16 of the Regulation).
Furthermore, interested parties have the right to request the cancellation, the limitation of processing, the portability of data as well as to lodge a complaint with the supervisory authority and to oppose in any case, for legitimate reasons, their processing (art. 17 et seq. of the Regulation) as well as, more generally, to exercise all the rights that are recognized to them by the current provisions of law.
The possibility of denying or revoking the consent previously provided at any time remains unchanged, without prejudice to the lawfulness of the processing based on the consent before the revocation.
These rights may be exercised by written communication to be sent to: [•]

OWNER AND DATA CONTROLLER
The data controller is Poemia srl ​​via G.Puccini 22 Padenghe sul Garda Brescia 25080

A list of External Managers is available at the registered office of the Data Controller.

Notice regarding children under 14 years of age
Minors under the age of 14 cannot provide personal data. The Company will not be in any way responsible for any collection of personal data, as well as false declarations, provided by the minor, and in any case, if its use is detected, the Owner will facilitate the right of access and cancellation forwarded by the legal guardian or by whoever exercises parental responsibility.