top of page

Privacy

1. RESPONSIBLE & CONTACT DETAILS

Responsible for the collection, processing and use of your personal data within the meaning of the GDPR

TORTORELLA

Patricia Tortora

P. I.V.A. 01257460319
Via del Seminario 16
34170 Gorizia, Italia
Email: tortorellaconceptstore@gmail.com

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection regulations, either as a whole or for individual measures, you can send your objection by letter or e-mail to the aforementioned contact details. In addition, you can of course also obtain information about the data stored by us free of charge at any time under the contact details (see also section 7).

When you contact us, the data you provide will be stored by us in order to answer your questions. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.

 This website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2. DATA COLLECTION WHEN VISITING OUR WEBSITE

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

  • IP address used (if necessary: in anonymous form)

  • date and time of access,

  • Name and URL of the retrieved file

  • Website from which access is made (referrer URL)

  • Browser used and, if applicable, the operating system of your computer and the name of your access provider.

 The processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

In addition to purely informational use, we offer use/order processing via our online shop. In accordance with Article 6 (1) (b) GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or open a customer account. Which data is collected can be seen from the respective input forms. We process the data you provide to process your order. For this purpose, we can also pass on your payment data to third parties (e.g. transport companies, logisticians, banks, payment providers), insofar as this is necessary for order and order processing. If we use external service providers to process your data, they have been carefully selected and commissioned by us.

In general, we only pass on your personal data to third parties if you have given your express consent to this in accordance with Article 6 Paragraph 1 Sentence 1 lit this is legally permissible and required for the processing of contractual relationships with you in accordance with Article 6 (1) sentence 1 lit. b GDPR.

A deletion of your customer account is possible at any time and can be done by sending a message to the above address. We store and use the data you provide to process the contract. After the contract has been completed or your customer account has been deleted, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or have reserved a legally permitted further use of data on our part became.

3. COOKIES

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages.  Your browser creates these files automatically, they do not damage your device and contain no viruses. Our session cookies are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit (persistent cookies). However, this does not mean that we are immediately informed of your identity. Cookies that are required to carry out the electronic communication process or to provide certain functions you want (e.g. shopping cart function) are stored on the basis of Article 6 Paragraph 1 lit.
 

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. If cookies are deactivated, the functionality of this website may be restricted.

4. CONTACT US

When contacting us (e.g. via contact form or e-mail), personal data is collected. Our contact form shows which data is collected when a contact form is used. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If you contact us with the aim of concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

5. ANALYSIS TOOLS

The tracking measures listed below are carried out on the basis of Article 6 (1) sentence 1 lit. f GDPR. With the measures used, we want to ensure that our website is designed and optimized to meet needs. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. The respective data processing purposes and data categories can be found in the corresponding tracking tools. The legal basis for the processing of personal data using cookies for analysis purposes is Article 6(1)(a) GDPR if the user has given their consent.

5.1 Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies, which usually transmit information about your use of this website to a Google server in the USA and store it there. Google Analytics cookies are stored on the basis of Article 6 (1) (f) GDPR. We use this tool for the constant optimization and needs-based design of our website.

On behalf of the operator of this website, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookies and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install:  http://tools.google.com/dlpage/gaoptout?hl=de )

Further information on terms of use and data protection can be found under the Google Analytics conditions ( http://www.google.com/analytics/terms/de.html ) or under the Google Analytics overview ( http://www.google.com/ intl/de/policies/privacy/index.html ).

5.2 Google Adwords Conversion Tracking
We use Google Conversion Tracking to statistically record the use of our website and to evaluate it for you in order to optimize our website. Google Adwords places a cookie on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Each Adwords customer receives a different cookie. This means that cookies cannot be tracked via the websites of Adwords customers. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers are informed of the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. You can deactivate cookies for conversion tracking by setting your browser so that cookies from the domain " www.googleadservices.com " are blocked. You can find Google's privacy policy on conversion tracking here  ( https://services.google.com/sitestats/de.html ) .

6. FACEBOOK/INSTAGRAM PLUG-IN

Our websites contain plugins from the social network Facebook (Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA). For example, this plugin shows the Facebook logo.

The plugin transmits log data to the Facebook server in the USA. The content of the plugin is transmitted directly to your device by Facebook and integrated into the online offer. Facebook learns that our website was accessed from your IP address. If you click on a Facebook button while you are logged into your Facebook account, you can, for example, link your Facebook profile to our pages. However, Facebook can also determine that you (user known as Facebook) have visited our pages. We expressly point out that we do not know which data is transmitted to Facebook in detail and how Facebook uses this data. If you do not want Facebook to be able to link your user account to the use of our website, you should log out of your Facebook account while you are on our website.  

Further information on the purpose, scope and further processing and use of the data by Facebook as well as your rights in this regard and options for protecting your privacy can be found in Facebook's data protection information:  https://www.facebook .com/about/privacy/ .

Our website uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”. If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.

The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights in this regard and setting options for protecting your privacy can be found in Instagram's data protection information:

https://help.instagram.com/155833707900388/ . If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.

7. SUBJECT RIGHTS

The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:

  • Right to information according to Art. 15 GDPR: You have the right to request information about your personal data processed by us. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details.

  • Right to rectification in accordance with Art. 16 GDPR: You have the right to request the immediate correction of incorrect or incomplete personal data stored by us.

  • Right to deletion in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or is required to assert, exercise or defend legal claims.

  • Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request that the processing of your personal data be restricted if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we reject the data no longer need it, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

  • Right to information in accordance with Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or Restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

  • Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible.

  • Right to revoke granted consent in accordance with Art. 7 Para. 3 DSGVO: You have the right to revoke the consent you have given us at any time. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement.

8. RIGHT OF OBJECTION AND WITHDRAWAL

If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are reasons for this, arising from your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If your personal data is processed by us in order to operate direct advertising, you have the right to object at any time to the processing of personal data for the purpose of this advertising. If you make use of your objection, we will stop processing the data concerned for direct marketing purposes.

9. PERIOD OF STORAGE OF PERSONAL DATA

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - also based on the respective statutory retention period (e.g. commercial and tax retention periods). When processing personal data on the basis of an express consent in accordance with Article 6 Paragraph 1 lit. a GDPR, this data is stored until the person concerned revokes his consent. If there are statutory retention periods for data that are processed as part of legal or similar obligations on the basis of Article 6 (1) (b) GDPR, this data will be routinely deleted after the retention period has expired, provided that it is no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage. When personal data is processed on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises his or her right to object under Article 21 (1) GDPR, unless we can provide compelling reasons worthy of protection for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. When processing personal data for the purpose of direct advertising on the basis of Article 6 Paragraph 1 lit. f GDPR, this data is stored until the data subject exercises his right of objection under Article 21 Paragraph 2 GDPR. Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

10. DATA SECURITY

When you visit our website, we use the widespread SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

11. UPDATE & AMENDMENTS TO THIS PRIVACY POLICY

This data protection declaration is currently valid and has the status September 2021. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration.

12. PRIVACY STATEMENT FOR OUR INSTAGRAM PROFILE

The content of our Instagram profile is the responsibility of

TORTORELLA

Patricia Tortora

P. I.V.A. 01257460319
Via del Seminario
34170 Gorizia, Italia
Email: tortorellaconceptstore@gmail.com

The same applies to our presence on Instagram. Instagram is part of the Facebook group of companies and shares infrastructure, systems and technology with Facebook and other Facebook companies. Joint controllers for the operation of this Facebook page and our Instagram presence are Facebook Ireland Ltd. within the meaning of the EU General Data Protection Regulation and other data protection regulations. (hereinafter "Facebook"), 4 Grand Canal Square, Grand Canal, Harbour, Dublin 2, Ireland and Patricia Tortora, Via del Seminario 16, 534170 Gorizia, Italia, email: tortorellaconceptstore@gmail.com.

Information about our representation in the mentioned social media:

We operate these pages to draw attention to our services/products and to get in touch with you as a visitor and user of this Facebook page and our website. When you visit our page, Facebook collects personal data from users, for example through the use of cookies. Such data collection by Facebook can also take place from visitors to this page who are not logged in or registered with Facebook. Information about data collection and further processing by Facebook can be found in Facebook's data protection information ( https://www.facebook.com/about/privacy/ ).

We receive anonymous statistics from Facebook about the use and usage of the page. The following information is provided here, for example:

  • Followers: Number of people who follow us - including growth and development over a defined time frame.

  • Reach: Number of people who see a specific post. Number of interactions on a post. From this it can be deduced, for example, which content is better received in the community than others. 

  • Ad performance: How much does a click cost us? How many people saw an ad? 

  • Demographics: Average age of visitors, gender, place of residence, language

We use these statistics, from which we cannot draw any conclusions about individual users, to constantly improve our online offer on Facebook and to better respond to the interests of our users. We cannot link the statistical data with the profile data of our fans. You can use your Facebook settings to decide how targeted advertising is displayed to you. 

We receive personal data via Facebook if you actively communicate this to us via a personal message on Facebook. We use your data (e.g. first name, last name) to answer your request in our customer service. Your data will be stored in our CRM system for this purpose. We also receive personal data via Facebook if you use a form with pre-filled fields with data from your profile to transmit the data to us and actively send the data to us by clicking on a button. 

We use this data, which is available in aggregate form, to make our posts and activities on our Facebook page more attractive to users. For example, we use the distribution by age and gender for an adapted address and the preferred visiting times of the users for a time-optimized planning of our contributions. Information about the type of end devices used by visitors helps us to adapt the design of the posts to it. According to the Facebook Terms of Service, which each user agrees to when creating a Facebook profile, we can identify the subscribers and fans of the page and see their profiles and other information shared by them.

The transmission and further processing of personal user data in third countries, such as the USA, and the associated possible risks for the user cannot be ruled out by us as the operator of the site. As the operator of the Facebook page, we have no interest in the collection and further processing of your individual personal data for analysis or marketing purposes. Due to the constant development of Facebook, the availability and processing of the data changes, so that we refer to the aforementioned data protection declaration of Facebook for further details. The operation of this Facebook page, including the processing of users' personal data, is based on our legitimate interests in a contemporary and supportive opportunity for information and interaction for and with our users and visitors in accordance with Article 6 (1) (f) GDPR .

bottom of page