Policy Summary

• Interaction with Live Chat Platforms
  • Shopify Inbox
    Personal Data: Data provided while using the service.
• Interaction with Social Networks and External Platforms
  • PayPal Button and Widget, LinkedIn Social Buttons and Widgets, and Facebook Like Button and Social Widgets.
    Personal Data: Usage Data; Tracking Tools.
• Collection of Privacy Preferences
  • Consent Solution by iubenda
    Personal Data: Data provided while using the service; Tracking Tools.
  • Cookie Solution by iubenda
    Personal Data: Tracking Tools.
• Registration and Authentication
  • Direct Registration and Profiling
    Personal Data: ZIP code; Tax ID; last name; date of birth; Usage Data; email; User ID; profile picture; billing address; shipping address; physical address; language; street number; phone number; province; gender; state; username; various types of Data.
  • Registration Provided Directly by This Website
    Personal Data: ZIP code; city; Tax ID; last name; date of birth; email; User ID; profile picture; billing address; physical address; language; country; first name; street number; phone number; prefix; province; gender; state; username; various types of Data.
• Remarketing and Behavioral Targeting
  • Facebook Remarketing, Google Analytics Remarketing, and Google Ads Remarketing
    Personal Data: Usage Data; Tracking Tools.
  • Klaviyo Segmentation and Social Advertising
    Personal Data: purchase history; Usage Data; email; device information; Tracking Tools.
  • Facebook Custom Audience
    Personal Data: email; Tracking Tools.
• Statistics
  • Google Analytics, Google Analytics with Anonymized IP, Meta Events Manager, Facebook Ads Conversion Tracking (Facebook Pixel), and Google Ads Conversion Tracking
    Personal Data: Usage Data; Tracking Tools.
  • Google Analytics 4
    Personal Data: device information; number of Users; session statistics; Tracking Tools.
  • Google Analytics Demographics and Interests Reports
    Personal Data: unique identifiers of devices for advertising (e.g., Google Advertiser ID or IDFA); Tracking Tools.
• Displaying Content from External Platforms
  • Google Fonts, Font Awesome, Instagram Widget, and YouTube Video Widget
    Personal Data: Usage Data; Tracking Tools.

Information on Opting Out of Interest-Based Advertising

Additional Information on Personal Data Processing

• Sale of Goods and Services Online
  Personal Data collected is used to provide services to the User or sell products, including payment and delivery. Personal Data collected for payment purposes may include credit card details, bank account information used for wire transfers, or other payment methods. The type of payment data collected by this Website depends on the payment system used.

Contact Information

Complete Privacy Policy

• The User has given consent for one or more specific purposes. Note: In some jurisdictions, the Data Controller may be allowed to process Personal Data without the User's consent or another legal basis specified below, as long as the User does not object ("opt-out"). However, this does not apply when processing of Personal Data is subject to European data protection legislation.
• Processing is necessary for the performance of a contract with the User and/or pre-contractual obligations.
• Processing is necessary for compliance with a legal obligation to which the Data Controller is subject.
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
• Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the contract has been fully performed.
• Personal Data collected for the purposes of the Data Controller’s legitimate interests will be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Data Controller within the relevant sections of this document or by contacting the Data Controller.

• Contacting the User
  • Mailing list or newsletter (this Website)
    By registering for the mailing list or newsletter, the User's email address is added to a contact list that may receive email messages containing information, including commercial and promotional materials, related to this Website. The User's email address may also be added to this list as a result of signing up to this Website or making a purchase.
    Personal Data processed: ZIP code; city; last name; date of birth; Usage Data; email; physical address; country; first name; phone number; province; gender; Tracking Tools.
  • Contact form (this Website)
    By filling in the contact form with their Data, the User authorizes this Website to use these details to reply to requests for information, quotes, or any other kind indicated by the form’s header.
    Personal Data processed: ZIP code; city; Tax ID; last name; date of birth; Usage Data; email; User ID; physical address; country; first name; phone number; province; gender; Tracking Tools; various types of Data.
  Interaction with Data Collection Platforms and Other Third Parties
  This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Website to save and reuse data.
  If one of these services is installed, it may collect Usage Data on the pages where it is installed, even if the Users do not actively use the service.

  ---

  Interaction with Social Networks and External Platforms

  This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
  The interactions and information acquired by this Website are always subject to the User’s privacy settings for each social network.
  This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
  It is recommended to log out from respective services to ensure that the data processed on this Website is not linked back to the User's profile.
  • PayPal Button and Widget (PayPal)
    A service enabling interaction with the PayPal platform, provided by PayPal Inc.
    Personal Data processed: Usage Data; Tracking Tools.
    Location of processing: Refer to PayPal’s Privacy Policy.
  • LinkedIn Social Buttons and Widgets (LinkedIn Corporation)
    Services enabling interaction with the LinkedIn social network, provided by LinkedIn Corporation.
    Personal Data processed: Usage Data; Tracking Tools.
    Location of processing: United States – Privacy Policy.
  • Facebook Like Button and Social Widgets
    A service enabling interaction with the Facebook social network, provided by Meta Platforms, Inc., or Meta Platforms Ireland Limited, depending on how the Data Controller processes the Data.
    Personal Data processed: Usage Data; Tracking Tools.
    Location of processing: United States – Privacy Policy; Ireland – Privacy Policy.

  ---

  Collecting Privacy Preferences

  This type of service allows this Website to collect and save User preferences regarding the collection, use, and processing of their Personal Data, as required by applicable privacy laws.
  • Consent Solution by iubenda (iubenda srl)
    Allows storing and retrieving records of User consent for Personal Data processing, along with preferences expressed regarding consent.
    Personal Data processed: Data provided while using the service; Tracking Tools.
    Location of processing: Italy – Privacy Policy.
  • Cookie Solution by iubenda (iubenda srl)
    Allows the Data Controller to collect and save User preferences regarding Personal Data processing, particularly for the use of Cookies and other Tracking Tools.
    Personal Data processed: Tracking Tools.
    Location of processing: Italy – Privacy Policy.

  ---

  Registration and Authentication

  By registering or authenticating, Users allow this Website to identify them and grant them access to dedicated services. Depending on what is described below, third-party services may provide registration and authentication services. In this case, this Website can access some Data stored by these third-party services for registration or identification purposes.
  Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to learn more, refer to the description of each service.
  • Direct Registration and Profiling (this Website)
    Users register directly by filling out a registration form, providing their Personal Data.
    Personal Data processed: ZIP code; Tax ID; last name; date of birth; Usage Data; email; User ID; profile picture; billing address; shipping address; physical address; language; street number; phone number; province; gender; state; username; various types of Data.

  ---

  Remarketing and Behavioral Targeting

  These services allow this Website and its partners to inform, optimize, and serve advertising based on the User’s past use of this Website.
  This activity is facilitated by tracking Usage Data and using Tracking Tools to collect information transferred to the partners that manage the remarketing and behavioral targeting activity.
  • Facebook Remarketing
    A service provided by Meta Platforms, Inc., or Meta Platforms Ireland Limited, depending on how the Data Controller processes the Data. It connects the activity of this Website with the Facebook advertising network.
    Personal Data processed: Usage Data; Tracking Tools.
    Location of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.

  ---

  User Rights

  Users may exercise certain rights regarding their Data processed by the Data Controller, including:
  • Withdraw their consent at any time.
  • Object to Data processing.
  • Access their Data.
  • Verify and seek rectification.
  • Obtain the restriction of Data processing.
  • Have their Personal Data erased.
  For more details or to exercise these rights, Users can contact the Data Controller at the contact information provided.
  - receive its Data or have it transferred to another data controller.The User has the right to receive its Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred unimpeded to another data controller. This provision is applicable when the Data are processed by automated means and the processing is based on the User's consent, a contract to which the User is a party or contractual measures related thereto.
  - Propose a complaint.The User may propose a complaint to the competent data protection supervisory authority or take legal action.
• Details of the right to object
  When Personal Data are processed in the public interest, in the exercise of public authority vested in the Data Controller or in pursuit of a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
  Users should note that if their Data were processed for direct marketing purposes, they may object to the processing without providing any reasons. To find out whether the Data Controller processes Data with direct marketing purposes, Users may refer to the respective sections of this document.
  How to Exercise Rights
  To exercise the User's rights, Users may address a request to the contact details of the Controller indicated in this document. Requests are filed free of charge and processed by the Controller as soon as possible, in any case within one month.
  Cookie Policy
  This Website makes use of Tracking Tools. To learn more, the User may consult the Cookie Policy.
  More information about the processing
  Defense in Court
  The User's Personal Data may be used by the Owner in legal proceedings or in the preparatory stages to its possible establishment for the defense against abuses in the use of this Web Site or related Services by the User.
  The User declares that he/she is aware that the Data Controller may be obliged to disclose the Data by order of public authorities.
  Specific Disclosures
  Upon the User's request, in addition to the information contained in this privacy policy, this Web Site may provide the User with additional and contextual disclosures regarding specific Services, or the collection and processing of Personal Data.
  System Logs and Maintenance
  For operation and maintenance purposes, this Web Site and any third-party services it uses may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as the User's IP address.
  Information not contained in this policy
  Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
  Responding to “Do Not Track” Requests
  This Web Site does not support “Do Not Track” requests.
  To find out whether any third-party services used support them, the User is encouraged to consult their respective privacy policies.
  Changes to this privacy policy
  The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website as well as, if technically and legally feasible, by sending a notification to Users through one of the contact details it has. Therefore, please consult this page frequently, referring to the date of last modification indicated at the bottom.
  
  
  If the changes affect processing whose legal basis is consent, the Controller will collect the User's consent again, if necessary.
  
  
Definitions and legal references
Personal Data (or Data)
Personal Data is any information that, directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
Usage Data
This is the information collected automatically through this Web Site (including by third party applications integrated into this Web Site), including: the IP addresses or domain names of the computers used by the User who connects with this Web Site, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.. ) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the User's operating system and computer environment.
User
The individual using this Web Site who, except where otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Controller (or Processor)
The natural person, legal entity, public administration and any other entity that processes Personal Data on behalf of the Data Controller, as set out in this privacy policy.
Data Controller (or Controller).
The natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data and the instruments adopted, including the security measures relating to the operation and use of this Web Site. The Data Controller, unless otherwise specified, is the owner of this Web Site.
This Web Site (or this Application)
The hardware or software tool by which Users' Personal Data are collected and processed.
Service.
The Service provided by this Web Site as defined in the relevant terms (if any) on this site/application.
European Union (or EU).
Unless otherwise specified, any reference to the European Union in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.
Cookies
Cookies are Tracking Tools that consist of small portions of data stored within the User's browser.
Tracking Tool
Tracking Tool means any technology - e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting - that enables tracking of Users, for example, by collecting or storing information on the User's device.
Legal references
This privacy policy is written on the basis of multiple legislative orders, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy policy covers this Website only.
Integrations
This information is provided by Poemia S.r.l. as the data controller (hereinafter also “Company” or “Data Controller”) of personal data acquired through the website [poemia. com], of which it is the owner, pursuant to the in force in the field of privacy and data protection and taking into account the provisions of the Guarantor Authority for the Protection of Personal Data (hereinafter, also “Guarantor”), Regulation (EU) 2016/679 (hereinafter also “Regulation”), Legislative Decree no. 196/2003 and ss.mm.ii. (hereinafter also “Privacy Code”) as well as, in general, the applicable reference legislation.


This information is provided to users who browse and use the services available on the website [poemia.com].
Your registration on the [poemia.com] website is subject to your prior reading and acceptance of this information regarding the processing of personal data and your authorization to its processing.


Source and categories of data processed
The personal data that the Company may acquire will be acquired directly from the interested user who browses the [poemiabag.com] website.
The data processed may be by way of example:

he processing of acquired personal data is carried out for the following purposes:
a) To establish an authentication profile necessary to access the website, enabling user registration (including for the issuance of a loyalty card), enforcing the website’s terms of use accepted during registration, and allowing access to the services offered by the website (e.g., product purchases, shipment of purchased products, handling potential returns) following the user's registration. Additionally, this includes managing any requests made by the user through the website. Providing the data is, depending on the circumstances, a contractual obligation or a pre-contractual measure adopted at the request of the data subject. Failure to provide the data will prevent the Company from accurately executing the outlined activities.
b) To comply with obligations established by laws and regulations or to fulfill an order from judicial authorities or other authorities to which the Data Controller is subject. Providing the data is a legal obligation, and failure to do so will prevent the Company from fulfilling the obligations as described above.

• Adopting security measures suitable to ensure appropriate data protection, considering the potential impacts of processing on the rights and fundamental freedoms of the data subject.
• Notifying any personal data breaches to the data subjects within the timeframes and cases required by applicable law.
• Ensuring that processing operations comply with applicable legal provisions.

• Companies engaged by the Company to perform technical and organizational tasks (e.g., management of IT systems and communication networks, maintenance, and support services related to the website).
• Third-party companies in the review sector for marketing purposes.
• Firms or third-party companies providing assistance and consultancy services.
• Third-party companies supporting the Data Controller in delivering/handling purchases (e.g., couriers).
• Third-party companies enabling statistical and aggregate user monitoring (e.g., Google Analytics 4).

• Obtain confirmation at any time as to whether or not their personal data is being processed, access the data and information outlined in Article 15 of the Regulation, and receive a copy of such data or request its rectification (Articles 15 and 16 of the Regulation).
• Request the erasure of their data, restriction of processing, or data portability.
• Lodge a complaint with the supervisory authority.
• Object to the processing of their data for legitimate reasons (Article 17 et seq. of the Regulation).
• More generally, exercise all rights granted under current legislation.