PRIVACY POLICY
This Privacy Policy is provided pursuant to Article 13 of European Regulation No. 679/2016 and applies exclusively to all Data collected through the website https://monocromostudio.com/. This Privacy Policy is subject to updates, which will be promptly published on the website. This Privacy Policy, together with the Cookie Policy, sets out the basis on which the User’s personal Data will be processed.
Data Controller
The Data Controller of the Data collected through this website is Monocromostudio, with registered office in Rivoli (TO) at Via Sestriere, 137, 10098, email: info@monocromostudio.com.
Methods of Processing Personal Data
The Personal Data provided or acquired will be processed in accordance with the principles of fairness, lawfulness, transparency and confidentiality protection pursuant to the applicable regulations. The Data Controller processes Users’ Personal Data by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out by means of IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated.
Purposes of the Processing of Personal Data and Legal Basis
Personal Data may be collected independently by the Data Controller or through third parties. In this case, the IT systems and software procedures used to operate this website acquire certain technical and IT-related Personal Data of Users, such as the IP address, browser type, operating system, domain name and the addresses of websites from which access or exit was made, the transmission of which is inherent in the normal functioning of the internet. Such Data may be processed solely for the purpose of obtaining anonymous statistical information on the use of the site and/or to check its proper functioning and will be deleted immediately after processing. The Data that the User chooses to provide voluntarily are collected to allow the website to provide its services, as well as for the following purposes: a) to fulfill obligations arising from the contract entered into between the User and the Data Controller for the sale of the Services available on the website and to provide the information requested by the User. This processing is mandatory for the performance of the contract to which the User is party, for the execution of pre-contractual measures or to comply with a legal obligation to which the Data Controller is subject; b) for the purchase procedure in which the User enters personal Data and billing tax profiles or similar. In this case, the Data are processed to perform the Contract entered into, to contact the User in relation to the Contract and for its management, for the management of legal guarantee requests, assistance, withdrawal requests, management and resolution of the Contract itself. This processing is mandatory for the performance of the contract to which the User is party; c) to comply with any type of obligation provided for by current laws, regulations, related rules and commercial practices, in particular in tax/fiscal matters. This processing is mandatory in order to comply with a legal obligation to which the Data Controller is subject; d) for other ancillary or related purposes to those indicated above and in any case falling within the scope of the website’s activities; e) to follow up on specific requests addressed by the User to the Data Controller for informational communications relating to the Controller’s Services, through email messages or by filling in the contact Form and other communication tools such as telephone or WhatsApp instant messaging. This processing is optional and based on the User’s consent, however failure to provide one or more Data will make it impossible to respond to the request for information and to use the services offered by the Data Controller; f) for sending promotional and commercial information and offers, also through the newsletter service. This processing is based on the freely given consent of the User; g) for soft spam purposes to allow the Data Controller to send the User promotional communications by email concerning Products and/or Services purchased without the need for the User’s prior express consent, as provided for by Article 130, paragraph 4, of the Privacy Code, provided that the user does not exercise the right to object; This processing is based on Article 130, paragraph 4, of the Privacy Code as amended by Legislative Decree No. 101 of 2018; h) to carry out statistical analyses on aggregated and anonymous data in order to analyze User behavior, improve the products and services provided by the Data Controller and meet the User’s expectations; i) for profiling activities for marketing purposes. This Processing is based on the freely given consent of the User.
Categories of Personal Data processed
Among the Personal Data processed by this website, independently or through third parties, there are: Cookies, Usage Data, Email and Name. Personal Data may be collected independently by the Data Controller or through third parties. Personal Data may be voluntarily provided by the User when using the website, by filling in the contact Form, during purchase procedures or similar and analogous operations, when communicating with the Data Controller by email, telephone or WhatsApp. Such data may include information useful for the purchase. The optional, explicit and voluntary sending of email through the Contact Form or by means of the addresses indicated on this website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the email. The User’s consent to the provision of Data is necessary in order to be included in the Data Controller’s databases and for the purposes of establishing and properly carrying out what is offered by the latter to its Users, as well as to third parties for the performance of the requested activity. Failure to provide such Data therefore prevents registration in the Data Controller’s databases, the completion of any contracts, as well as their execution and any other possible activity.
Disclosure of Data
In addition to the Data Controller, in some cases the following may have access to the Data: a) categories of personnel specifically trained for this purpose involved in the organization of the website, such as administrative, commercial, marketing and legal personnel, and system administrators; b) external parties such as third-party technical service providers, hosting providers, IT companies and communication agencies, also appointed as Data Processors by the Data Controller pursuant to Article 28 GDPR. The updated list of Data Processors, where appointed, may always be requested from the Data Controller; c) public or private entities that may access the Data in compliance with legal obligations; d) parties carrying out ancillary and instrumental tasks with respect to the Data Controller’s activity;
Data Retention Period
As expressly provided for by Article 5, paragraph 1, letter e) of the GDPR, Data are stored for the time necessary to process them in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:
- Data collected for contractual obligations will be retained for the time necessary to fulfill the above purposes and as provided for by law;
- Data collected for tax/administrative obligations or contractual obligations will be retained for the time necessary to fulfill the above purposes and as provided for by law;
- Data collected for Purposes attributable to the legitimate interest of the Data Controller will be retained until such interest has been satisfied; the User may obtain further information regarding the legitimate interest pursued by the Data Controller by contacting the Controller;
- Data collected on the basis of the User’s Consent may be retained until such Consent is revoked;
Data may be retained by the Data Controller for a longer period in compliance with legal obligations or by order of an authority. At the end of the retention period, Personal Data will be deleted and therefore the rights of access, deletion, rectification and Data portability may no longer be exercised.
Cookies
This website uses cookies. Cookies are small text files that may be used by websites to make the user experience more efficient and to personalize content and advertisements, provide social network functions and analyze traffic. Cookie Policy
Place of Processing and transfer of Data abroad
The Data are processed at the Data Controller’s operational headquarters. For further information, the Data Controller may be contacted. Data may be processed by natural persons and/or legal entities acting on behalf of the Data Controller and under specific contractual obligations, with headquarters in EU or non-EU member countries. In the event that Data are transferred outside the EEA, the Data Controller will adopt every appropriate contractual measure to ensure adequate Data protection.
Tools used for the Processing of Personal Data
CONTACT FORM
By filling in the contact Form with his or her Data, the User consents to their use for responding to requests for information, or for any other purpose indicated by the form heading. Personal Data collected through the contact Form: Email, Name and Surname
Contact Form 7 (Rock Lobster LLC)
is a form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Various types of Data as specified in the service’s Privacy Policy. Place of Processing: Japan – Privacy Policy
OTHER CONTACT TOOLS
WhatsApp (WhatsApp Ireland Limited)
WhatsApp is an instant messaging service provided by WhatsApp Ireland Limited. Personal Data collected: phone number, email, Usage Data, Cookies. Place of Processing: Ireland – Privacy Policy
EMAIL ADDRESS MANAGEMENT
These services make it possible to manage a database of email contacts, phone contacts or contacts of any other type, used to communicate with the User. These services may also make it possible to collect Data relating to the date and time messages are viewed by the User, as well as the User’s interaction with them, such as information on clicks on links included in the messages.
Newsletter
By registering for the newsletter, the User’s email address is automatically entered into a contact list to which email messages containing information, including commercial and promotional content, relating to this website may be sent. The User’s email address may also be added to this list as a result of registration on this Site or after making a purchase. The User may choose at any time to unsubscribe from the newsletter by clicking on a specific button included in the emails. After clicking on the unsubscribe button, the User’s Data will be immediately deleted from the email marketing software. Personal Data collected: email and Name. This website uses the newsletter service provided by:
Mailchimp (The Rocket Science Group)
Mailchimp is a service that organizes and analyzes newsletter distribution. If a User does not want their Data to be handled by Mailchimp, they will need to unsubscribe from the newsletter. For this purpose, a link is provided in every newsletter sent. Personal Data collected: email and name. Place of Processing: USA – Privacy Policy
SECURITY MEASURES ADOPTED
This website, in order to make secure the moment in which Personal Data are entered, has an SSL certificate and uses the HTTPS protocol. By using this protocol, transactions and data transmitted on websites take place with the highest level of security and the content of the communication is not read or manipulated in any way by third parties.
reCAPTCHA
This website uses reCAPTCHA, which is a service subject to Google’s privacy policy and terms and conditions of use.
STATISTICS
Statistics services allow the Data Controller exclusively to monitor and analyze traffic data and are used to track User behavior. This website uses the following services:
1. Google Analytics (Google Ireland Limited)
Google Analytics is an analysis service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may also transfer this information to third parties where required to do so by law or where such third parties process the aforementioned information on Google’s behalf. On this site, the IP anonymization function is active. The IP address transmitted by the browser for purposes connected to Google Analytics will not be incorporated with other data already held by Google. At the following link https://tools.google.com/dlpage/gaoptout?hl=it Google makes available the browser add-on for disabling Google Analytics. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
2. Facebook Pixel conversion tracking (Facebook Ireland Ltd.)
Facebook conversion tracking (Facebook pixel) is a statistics service provided by Facebook. The Facebook pixel monitors conversions that can be attributed to Facebook ads. Personal Data collected: Cookies; Usage Data. Place of processing: Ireland – Privacy Policy.
INTERACTION WITH SOCIAL NETWORKS
These services allow interaction with social networks directly from the pages of this website. The interactions and information acquired by this website are in any case subject to the User’s privacy settings for each social network. If a social network interaction service is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages on which it is installed.
1. Facebook (Facebook Ireland Ltd.)
Facebook buttons are services allowing interaction with the social network Facebook, provided by Facebook Ireland Ltd. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
2. Instagram (Facebook Ireland Ltd.)
Instagram buttons are services allowing interaction with the social network Instagram, provided by Facebook. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
3. LinkedIn (LinkedIn Ireland Unlimited Company)
LinkedIn buttons are services allowing interaction with the social network LinkedIn, provided by LinkedIn Corporation. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
REMARKETING AND RETARGETING
These services allow this website to communicate, optimize and serve advertisements based on the User’s past use of this website. This activity is carried out through the tracking of Usage Data and the use of Cookies. This website uses the following services:
Facebook Remarketing (Facebook Ireland Ltd)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which connects the activity of this website with the Facebook advertising network. This website uses the Facebook Pixel tool in order to measure conversions. Thanks to the Facebook Pixel, it is possible to understand the actions that people perform on the website. The Data collected may be used to:
- ensure that ads are shown to the right people;
- create audience groups to which ads can be targeted;
- make use of the platform’s additional advertising tools on which advertising is carried out.
The information collected is anonymous to the operators of this website and cannot be used to identify the identity of an individual user. However, the information is stored and analyzed by Facebook, which may link the action to an individual profile and use this information for internal Facebook advertising purposes, as outlined in Facebook’s privacy policy. This will allow Facebook to show ads both on Facebook and on third-party sites. The website owner has no control over how these data are used. For more information on how users can protect their privacy, please refer to Facebook’s Privacy Policy.
CONTENT ON EXTERNAL PLATFORMS
These services allow content hosted on external platforms to be displayed directly from the pages of this website and to interact with it. If a service of this kind is installed, it is possible that, even if Users do not use the service, it collects traffic Data relating to the pages on which it is installed. This website uses:
1. Google Maps
Google Maps is a map display service managed by Google that allows this website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy
2. YouTube (Google Ireland Limited)
YouTube is a video content display service managed by Google that allows this website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy
3. Google Fonts
Google Fonts is a font style display service provided by Google Ireland Limited that allows this Website to integrate such content within its pages. Personal Data collected: Usage Data; various types of Data as specified in the service’s privacy policy. Place of processing: Ireland – Privacy Policy
Exercise of the rights of the data subject
The Data Subject has the right to exercise the powers provided for in Articles 7 and 15-22 of European Regulation 679/2016. In particular, he or she has the right to withdraw consent at any time and, upon simple request to the Data Controller, may request access to Personal Data, receive the personal Data provided to the Data Controller and, where possible, transmit them to another data controller without hindrance, so-called portability, obtain the updating, restriction of processing, rectification of Data and deletion of Data processed in breach of the applicable legislation. He or she has the right, for legitimate reasons, to object to the Processing of Personal Data concerning him or her and to the Processing for the purpose of sending advertising material, direct sales and carrying out market research. He or she also has the right to lodge a complaint with the Data Protection Authority as supervisory authority for personal data protection. The data subject may exercise his or her rights by contacting the Data Controller by email at: info@monocromostudio.com.
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Users are therefore requested to consult this page frequently, taking as reference the date of last modification indicated at the bottom. In the event of non-acceptance of the changes made to this Privacy Policy, the User must cease using this website and may request that the Data Controller remove his or her Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that time. The Data Controller is not responsible for updating all links displayed in this Privacy Policy, therefore whenever a link is not working and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by such link. Privacy Policy updated in May 2021