Privacy policy

Methods and Location of Data Processing

Methods of Processing

The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Owner, in some cases, other individuals involved in the operation of this Application (such as administrative, commercial, marketing, legal personnel, and system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, and communication agencies) may have access to the Data. These individuals may also be appointed, if necessary, as Data Processors by the Owner. An updated list of Data Processors may be requested from the Data Controller at any time.

Location

Data is processed at the operational offices of the Owner and any other locations where the parties involved in processing are located. For further information, contact the Owner.
The User's Personal Data may be transferred to a country other than the one in which the User is located. For more details on the location of processing, the User may refer to the section on Personal Data Processing details.

Retention Period

Unless otherwise specified in this document, Personal Data is processed and retained for the period necessary to fulfill the purpose for which it was collected and may be retained longer due to any legal obligations or based on User consent.

Purposes of Data Processing

User Data is collected to allow the Owner to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activities, and for the following purposes: traffic optimization and distribution, registration and authentication provided directly by this Application, payment management, platform and hosting services, statistics, contacting the User, interaction with live chat platforms, display of content from external platforms, and advertising.

For detailed information on the purposes of processing and on the Personal Data used for each purpose, the User may refer to the section "Details on Personal Data Processing."

Details on Personal Data Processing

Personal Data is collected for the following purposes and using the following services:

Contacting the User

Mailing list or newsletter (this Application)

By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list that may receive email messages containing information, including commercial and promotional information, related to this Application. The User’s email address may also be added to this list as a result of registering for this Application or making a purchase.

Personal Data processed: last name; email; first name; phone number; Tracking Tools.

Contact form (this Application)

By filling in the contact form with their Data, the User consents to its use to respond to information requests, quote requests, or other requests as indicated in the form header.

Personal Data processed: last name; email; first name; phone number; Tracking Tools.

Payment Management

Unless otherwise specified, this Application processes all payments by credit card, bank transfer, or other means via external payment service providers. Generally, unless indicated otherwise, Users are requested to provide payment details and personal information directly to such payment service providers.
This Application is not involved in the collection and processing of such information: instead, it receives only a notification from the relevant payment service provider confirming the payment has been made.

PayPal (PayPal Inc.)

PayPal is a payment service provided by PayPal Inc., allowing Users to make online payments.

Personal Data processed: last name; Usage Data; email; order ID; billing address; shipping address; payment information; device information; first name; phone number; geographic location; Tracking Tools; various types of Data as specified in the service’s privacy policy.

Place of processing: See PayPal's Privacy Policy.

Apple Pay (Apple Inc.)

Apple Pay is a payment service provided by Apple Inc., allowing Users to make payments using their mobile devices.

Personal Data processed: last name; email; billing address; payment information; first name; phone number; various types of Data as specified in the service’s privacy policy.

Place of processing: United States – Privacy Policy.

Google Pay (Google LLC)

Google Pay is a payment service provided by Google LLC, allowing Users to make online payments using their Google credentials.

Personal Data processed: last name; email; billing address; shipping address; payment information; first name; phone number; Tracking Tools.

Place of processing: United States – Privacy Policy.

Klarna (Klarna AB)

Klarna is a payment service provided by Klarna AB.

Personal Data processed: last name; email; billing address; shipping address; payment information; first name; phone number; various types of Data as specified in the service’s privacy policy.

Place of processing: Sweden – Privacy Policy.

Shop Pay

Shop Pay is a payment and checkout page management service provided by Shopify Inc. or Shopify International Limited, depending on how the Data processing is managed by the Owner, allowing Users to make online payments on this Application.

Personal Data processed: last name; email; billing address; shipping address; payment information; first name; phone number; privacy preferences.

Place of processing: Canada – Privacy Policy; Ireland – Privacy Policy.

Visa (Visa Inc.)

Visa is a payment service provided by Visa Inc., allowing Users to make online payments.

Personal Data processed: last name; email; billing address; shipping address; payment information; first name; phone number.

Place of processing: United States – Privacy Policy.

Mastercard (Mastercard Inc.)

Mastercard is a payment service provided by Mastercard Inc., allowing Users to make online payments.

Personal Data processed: last name; email; billing address; shipping address; payment information; first name; phone number.

Place of processing: United States – Privacy Policy.

American Express (American Express Company)

American Express is a payment service provided by American Express Company, allowing Users to make online payments.

Personal Data processed: last name; email; billing address; shipping address; payment information; first name; phone number.

Place of processing: United States – Privacy Policy.

Interaction with Live Chat Platforms

This type of service enables interaction with live chat platforms managed by third parties, directly from the pages of this Application, allowing Users to contact and be contacted by this Application’s support service.
If a live chat interaction service is installed, it may collect Usage Data related to the pages where it is installed, even when Users do not actively use the service. Additionally, live chat conversations may be recorded.

Shopify Chat (Shopify Inc.)

Shopify Chat is a live chat interaction service provided by Shopify Inc.

Personal Data processed: city; last name; message or email content; Usage Data; email; billing address; shipping address; first name; phone number; Tracking Tools.

Place of processing: Canada – Privacy Policy.

Optimization and Traffic Distribution

These services allow this Application to distribute content through geographically distributed servers, optimizing its performance. The Personal Data processed depends on the characteristics and mode of implementation of these services, which by nature filter communications between this Application and the User’s browser.

Given the distributed nature of this system, it is difficult to determine where the content, which may include User Personal Data, is transferred.

Cloudflare (Cloudflare Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. Cloudflare’s integration methods filter all traffic for this Application, i.e., communications between this Application and the User’s browser, allowing for the collection of statistical data as well.

Personal Data processed: Tracking Tools.
Place of processing: United States – Privacy Policy.

Bunny CDN (BunnyWay d.o.o.)

Bunny CDN is a traffic optimization and distribution service provided by BunnyWay d.o.o.

Personal Data processed: Usage Data.
Place of processing: Slovenia – Privacy Policy.

Advertising

This type of service allows the User's Data to be used for communication purposes in commercial advertisements displayed on this Application in the form of banners and other advertising, based on the User’s interests. This does not mean that all Personal Data is used for this purpose. Details and usage conditions are indicated below. Some of the services listed below may use Tracking Tools to identify Users or use behavioral retargeting to display personalized ads based on the User’s interests and behavior or to measure ad performance. For more information, refer to the privacy policies of the respective services. Such services usually allow Users to opt-out of tracking. Users can find out how to opt out of interest-based advertising by visiting the relevant opt-out section of this document.

Meta Ads Conversion Tracking (Meta Pixel)

Meta Ads Conversion Tracking (Meta Pixel) is a statistics service provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited, depending on how the Data Controller manages Data processing, which connects data from the Meta advertising network with actions performed on this Application. Meta Pixel tracks conversions attributable to ads on Facebook, Instagram, and Audience Network.

Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.

Registration and Authentication Provided Directly by this Application

By registering or authenticating, the User allows this Application to identify them and give them access to dedicated services. Personal Data is collected and stored solely for registration or identification purposes. Only the Data necessary to provide the requested service is collected.

Direct Registration (this Application)

The User registers by filling out the registration form and providing their Personal Data directly to this Application.

Personal Data processed: last name; email; country; first name; phone number; Tracking Tools.

Platform and Hosting Services

These services aim to host and operate key components of this Application, enabling it to be delivered from a single platform. These platforms provide the Data Controller with a wide range of tools such as analytics, user registration management, comments management, databases, e-commerce, and payment processing. Using such tools involves collecting and processing Personal Data.
Some of these services operate through servers distributed geographically, making it difficult to determine the exact location where Personal Data is stored.

Shopify

Shopify is a platform provided by Shopify Inc., Shopify Commerce Singapore Pte. Ltd., or Shopify International Limited, depending on how the Data Controller manages Data processing, allowing the Data Controller to develop, operate, and host an e-commerce website.

Personal Data processed: last name; email; billing address; shipping address; payment information; first name; Tracking Tools.
Place of processing: Canada – Privacy Policy; Singapore – Privacy Policy; Ireland – Privacy Policy.

Statistics

The services in this section allow the Data Controller to monitor and analyze traffic data, and are used to track User behavior.

Google Analytics (Universal Analytics) (Google LLC)

Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC ("Google"). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google.
Google may use Personal Data to contextualize and personalize ads within its advertising network.

To understand Google's use of data, please refer to Google’s partner policy.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out.

Meta Events Manager (Meta Platforms, Inc.)

Meta Events Manager is a statistical service provided by Meta Platforms, Inc. By integrating Meta Pixel, Meta Events Manager can provide the Data Controller with information about traffic and interactions on this Application.

Personal Data processed: Usage Data; pageviews; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt out.

Google Analytics 4

Google Analytics is a statistical service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages Data processing (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads within its advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before any data is recorded in any data center or server. For more information, refer to Google’s official documentation.

To understand how Google uses Data, see Google's partner policy and Google’s Commercial Data page.
Personal Data processed: Usage Data; User count; session statistics; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.

Display of Content from External Platforms

This type of service allows users to view content hosted on external platforms directly on the pages of this Application and interact with it. These services are often referred to as widgets, which are small elements inserted into a website or application. They provide specific information or perform a particular function and often allow user interaction. This type of service could still collect data on the web traffic relating to the pages where the service is installed, even when users do not interact with it.

Google Fonts (Google LLC)

Google Fonts is a font style display service managed by Google LLC that allows this Application to integrate such content into its pages.

• Personal Data processed: Usage Data; Tracking Tools.
• Location of processing: United States – Privacy Policy.

Information on how to disable interest-based advertising

In addition to any opt-out function provided by any of the services listed in this document, users can read more about how to disable interest-based ads in the dedicated section of the Cookie Policy.

Further Information on Personal Data Processing

Sale of goods and online services

The personal data collected is used to provide services to the user or for the sale of products, including payment and delivery. Personal data collected to complete payments may include credit card data, bank account details used for transfers, or other payment methods. The payment data collected by this Application depends on the payment system used.

Preference Cookies

Preference cookies store the user's preferences detected in this Application, such as their time zone and region, in the local domain.

Cookie Policy

This Application uses Tracking Tools. To learn more, users can refer to the Cookie Policy.

Further Information for Users

Legal basis of processing

The Data Controller processes personal data relating to the user if one of the following conditions applies:

• The user has given consent for one or more specific purposes.
• Processing is necessary for the performance of a contract with the user and/or pre-contractual measures;
• Processing is necessary to comply with a legal obligation to which the Data Controller is subject;
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• Processing is necessary for the pursuit of the legitimate interest of the Data Controller or a third party.

It is always possible to ask the Data Controller to clarify the specific legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract, or necessary to conclude a contract.

Further information on retention period

Unless otherwise stated in this document, personal data is processed and stored for the time necessary to fulfill the purposes for which it was collected and may be retained for a longer period due to legal obligations or based on the user's consent.

Therefore:

• Personal data collected for purposes related to the performance of a contract between the Data Controller and the user will be retained until the completion of such contract.
• Personal data collected for purposes related to the legitimate interest of the Data Controller will be retained until that interest is fulfilled. The user can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
• When processing is based on the user's consent, the Data Controller may retain personal data for a longer period until the consent is revoked. Furthermore, the Data Controller may be required to retain personal data for a longer period to comply with a legal obligation or an order from an authority.

When processing is based on the user's consent, the Data Controller may retain personal data for a longer period until the consent is revoked. Furthermore, the Data Controller may be obligated to retain personal data for a longer period to comply with a legal obligation or an order from an authority.

At the end of the retention period, the personal data will be deleted. Therefore, once this period expires, the rights of access, deletion, correction, and the right to data portability can no longer be exercised.

User Rights under the General Data Protection Regulation (GDPR)

Users can exercise certain rights with regard to the data processed by the Data Controller. In particular, within the limits set by law, the user has the right to:

• Withdraw consent at any time. The user can withdraw their previously given consent for the processing of their personal data.
• Object to the processing of their data. The user can object to the processing of their data when it is based on a legal basis other than consent.
• Access their data. The user has the right to obtain information about the data processed by the Data Controller, regarding specific aspects of the processing, and to receive a copy of the processed data.
• Verify and request correction. The user can verify the accuracy of their data and request its update or correction.
• Obtain restriction of processing. The user can request the restriction of processing of their data. In such a case, the Data Controller will not process the data for any other purpose except for its storage.
• Obtain deletion or removal of their personal data. The user can request the deletion of their data by the Data Controller.
• Receive their data or have it transferred to another controller. The user has the right to receive their data in a structured, commonly used, and machine-readable format, and, where technically feasible, to have it transferred without hindrance to another controller.
• File a complaint. The user can file a complaint with the competent data protection authority or seek judicial remedy.

Users have the right to obtain information about the legal basis for transferring data abroad, including to any international organization governed by international law or constituted by two or more countries, such as the UN, as well as information about the security measures adopted by the Data Controller to protect their data.

Details on the right to object

When personal data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue the legitimate interest of the Data Controller, users have the right to object to the processing for reasons related to their particular situation.

It is pointed out to users that, when their data is processed for direct marketing purposes, they can object to the processing at any time, free of charge and without providing any justification. If users object to the processing for direct marketing purposes, the personal data will no longer be processed for such purposes. To find out whether the Data Controller processes data for direct marketing purposes, users can refer to the relevant sections of this document.

How to exercise rights

Requests to exercise user rights can be addressed to the Data Controller using the contact details provided in this document. The request is free, and the Data Controller will respond as soon as possible, in any case, within one month, providing the user with all the information required by law. Any corrections, deletions, or restrictions on processing will be communicated by the Data Controller to each of the recipients, if any, to whom the personal data has been transmitted, unless this proves impossible or involves disproportionate effort. The Data Controller will inform the user of such recipients if they request it.

Further Information on Processing

Defense in Court

The user’s personal data may be used by the Data Controller in legal proceedings or in preparatory stages for such proceedings to defend against abuses in the use of this application or related services by the user.
The user acknowledges that the Data Controller may be required to disclose data by order of public authorities.

Specific Notices

At the user’s request, in addition to the information contained in this privacy policy, this application may provide the user with additional and contextual notices concerning specific services or the collection and processing of personal data.

System Logs and Maintenance

For operational and maintenance purposes, this application and any third-party services it uses may collect system logs, which are files that record interactions and may also contain personal data, such as the user's IP address.

Information not contained in this policy

Additional information regarding the processing of personal data may be requested at any time from the Data Controller using the contact details provided.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying users on this page and, if possible, within this application. Furthermore, when technically and legally feasible, the Data Controller will notify users via one of the contact methods it holds. Therefore, users are encouraged to consult this page regularly, referring to the date of the last modification indicated at the bottom.

If the changes concern processing based on consent, the Data Controller will collect the user’s consent again, if necessary.

Cookie Policy of www.pallyvintagecloset.com

This document contains information regarding the technologies that allow this Application to achieve the purposes described below. These technologies enable the Data Controller to collect and store information (for example, through the use of Cookies) or to use resources (for example, by running a script) on the User's device when the User interacts with this Application.

For simplicity, in this document, these technologies are generically referred to as "Tracking Tools," unless there is a reason to differentiate.
For example, although Cookies can be used in both web and mobile browsers, it would be inappropriate to speak of Cookies in the context of mobile apps since they are Tracking Tools that require the presence of a browser. For this reason, within this document, the term "Cookies" is used only to specifically refer to that particular type of Tracking Tool.

Some of the purposes for which Tracking Tools are used may also require the User's consent. If consent is given, it can be freely revoked at any time by following the instructions in this document.

This Application uses Tracking Tools managed directly by the Data Controller (commonly called "first-party" Tracking Tools) and Tracking Tools that enable services provided by third parties (commonly called "third-party" Tracking Tools). Unless otherwise specified in this document, these third parties have access to their respective Tracking Tools.
The duration and expiration of Cookies and other similar Tracking Tools may vary depending on what is set by the Data Controller or each third-party provider. Some expire at the end of the User's browsing session.
In addition to what is specified in the description of each of the categories listed below, Users can obtain more detailed and updated information on the duration, as well as any other relevant information - such as the presence of other Tracking Tools - in the privacy policies of their respective third-party providers (via the links provided) or by contacting the Data Controller.

How This Application Uses Tracking Tools

Necessary Tracking Tools

This Application uses Cookies commonly called "technical" or other similar Tracking Tools to carry out activities strictly necessary to ensure the functioning or provision of the Service.

Tracking Tools Managed Directly by the Data Controller

Direct Registration (this Application)

The User registers by filling out the registration form and directly providing their Personal Data to this Application.
Personal Data processed: surname, email, country, first name, phone number, and Tracking Tools.

Preference Cookies (this Application)

Preference Cookies store the User's preferences detected on this Application, such as their time zone and region, in the local domain.
Personal Data processed: Tracking Tools.

Tracking Tools Managed by Third Parties

Cloudflare (Cloudflare Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
Cloudflare's integration methods involve filtering all traffic to this Application, i.e., communications between this Application and the User's browser, and also allow the collection of statistical data on it.
Personal Data processed: Tracking Tools.
Location of processing: United States – Privacy Policy.

PayPal (PayPal)

PayPal is a payment service provided by PayPal Inc. that allows the User to make online payments.
Personal Data processed: surname, usage data, email, order ID, billing address, shipping address, payment information, device information, first name, phone number, geographical location, Tracking Tools, and various types of data as specified in the service's privacy policy.
Location of processing: Please refer to the PayPal Privacy Policy.

Storage duration:

• paypal_storage: undefined
• akavpau_ppsd: session duration
• enforce_policy: session duration
• l7_az: session duration
• nsid: session duration
• ts: session duration
• tsrce: session duration
• x-cdn: session duration
• x-pp-s: session duration

Google Pay (Google LLC)

Google Pay is a payment service provided by Google LLC that allows the User to make online payments using their Google credentials.
Personal Data processed: surname, email, billing address, shipping address, payment information, first name, phone number, and Tracking Tools.
Location of processing: United States – Privacy Policy.

Shopify

Shopify is a platform provided by Shopify Inc., Shopify Commerce Singapore Pte. Ltd, or Shopify International Limited, depending on how the Data Controller manages Data processing, which allows the Data Controller to develop, operate, and host an e-commerce website.
Personal Data processed: surname, email, billing address, shipping address, payment information, first name, and Tracking Tools.
Location of processing: Canada – Privacy Policy; Singapore – Privacy Policy; Ireland – Privacy Policy.

Storage duration:

• _ab: 3 years
• _cmp_a: 1 day
• _customer_account_shop_sessions: 1 month
• _landing_page: 14 days
• _orig_referrer: 14 days
• _pay_session: session duration
• _s: 30 minutes
• _secure_account_session_id: 1 month
• _secure_session_id: 1 day
• _shopify_country: session duration
• _shopify_d: session duration
• _shopify_evids: session duration
• _shopify_fs: 1 year
• _shopify_ga: undefined
• _shopify_m: session duration
• _shopify_s: 30 minutes
• _shopify_sa_p: 30 minutes
• _shopify_sa_t: 30 minutes
• _shopify_tm: session duration
• _shopify_tw: session duration
• _shopify_y: 1 year
• _storefront_u: 1 minute
• _tracking_consent: session duration
• _y: 1 year
• c: 2 years
• card_update_verification_id: 20 minutes
• cart: 14 days
• cart_currency: 14 days
• cart_sig: 14 days
• cart_ts: 14 days
• cart_ver: 14 days
• checkout: 28 days
• checkout_prefill: 5 minutes
• checkout_queue_checkout_token: 2 years
• checkout_queue_token: 2 years
• checkout_session_lookup: 21 days
• checkout_session_token: 21 days
• checkout_session_token*: 21 days
• checkout_token: 2 years
• checkout_worker_session: 3 days
• customer_account_locale: 1 year
• customer_account_new_login: 20 minutes
• customer_account_preview: 7 days
• customer_auth_provider: undefined
• customer_auth_session_created_at: undefined
• customer_payment_method: 1 hour
• customer_shop_pay_agreement: 20 minutes
• discount_code: undefined
• dynamic_checkout_shown_on_cart: 30 minutes
• hide_shopify_pay_for_checkout: undefined
• identity-state: 1 day
• identity-state-*: 1 day
• identity_customer_account_number: 3 months
• keep_alive: 14 days
• localization: 14 days
• login_with_shop_finalize: 5 minutes
• master_device_id: 2 years
• order: 21 days
• pay_update_intent_id: 20 minutes
• preview_theme: undefined
• previous_step: 2 years
• profile_preview_token: 5 minutes
• remember_me: 2 years
• secure_customer_sig: 1 year
• shopify-editor-unconfirmed-settings: 16 hours
• shopify_pay: 2 years
• shopify_pay_redirect: 1 hour
• source_name: undefined
• storefront_digest: 3 years
• tracked_start_checkout: 2 years

Features

This Application uses Tracking Tools to enable simple interactions and activate features that allow Users to access specific resources of the Service and facilitate communication with the Data Controller.

Tracking Tools Managed Directly by the Data Controller

Mailing list or newsletter (this Application)

By registering for the mailing list or newsletter, the User's email address is automatically added to a contact list where email messages containing information, including commercial and promotional content, regarding this Application may be sent. The User's email address might also be added to this list as a result of registering with this Application or after making a purchase.
Personal Data processed: surname, email, first name, phone number, and Tracking Tools.

Contact form (this Application)

By filling out the contact form with their Data, the User consents to their use for responding to requests for information, quotes, or any other type of request indicated in the form's header.
Personal Data processed: surname, email, first name, phone number, and Tracking Tools.

Third-Party Tracking Tools

Shopify Chat (Shopify Inc.)

Shopify Chat is a live chat interaction service provided by Shopify Inc.

Personal Data processed: city, surname, message or email contents, usage data, email, billing address, shipping address, name, phone number, and Tracking Tools.

Location of processing: Canada – Privacy Policy

Retention period:

• _customer_account_shop_sessions: 1 month
• _secure_account_session_id: 1 month
• _shopify_country: undefined
• _storefront_u: 1 minute
• customer_account_locale: 2 years

Experience

This Application uses Tracking Tools to improve the quality of user experience and enable interactions with external content, networks, and platforms.

Third-Party Tracking Tools

Google Fonts (Google LLC)

Google Fonts is a font rendering service provided by Google LLC that allows this Application to integrate such content into its pages.

Personal Data processed: Usage data and Tracking Tools.
Location of processing: United States – Privacy Policy

Measurement

This Application uses Tracking Tools to measure traffic and analyze user behavior to improve the Service.

Third-Party Tracking Tools

Google Analytics (Universal Analytics) (Google LLC)

Google Analytics (Universal Analytics) is a web analytics service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the usage of this Application, compile reports, and share them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the ads of its advertising network.

For an understanding of how Google uses the data, please refer to Google’s partner policies.
Personal Data processed: Usage data and Tracking Tools.
Location of processing: United States – Privacy Policy – Opt Out.

Retention period:

• AMP_TOKEN: 1 hour
• _ga: 2 years
• _gac*: 3 months
• _gat: 1 minute
• _gid: 1 day

Meta Events Manager (Meta Platforms, Inc.)

Meta Events Manager is a statistics service provided by Meta Platforms, Inc. By integrating the Meta pixel, Meta Events Manager can provide the Controller with information about traffic and interactions on this Application.

Personal Data processed: Usage data, pageview, and Tracking Tools.
Location of processing: United States – Privacy Policy – Opt out

Retention period:

• _fbp: 3 months

Google Analytics 4

Google Analytics is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Controller manages the processing of Data (“Google”). Google uses the Personal Data collected to track and examine the usage of this Application, compile reports, and share them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the ads of its advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then removed before the data is logged in any data center or server. To learn more, refer to Google’s official documentation.

For details on how Google uses the data, consult their partner policy and their Commercial Data page.
Personal Data processed: Usage data, number of users, session statistics, and Tracking Tools.
Location of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.

Retention period:

• _ga: 2 years
• ga*: 2 years

Marketing

This Application uses Tracking Tools to provide personalized ads or marketing content and measure their performance.

Third-Party Tracking Tools

Meta Ads Conversion Tracking (Meta Pixel)

Meta Ads Conversion Tracking (Meta Pixel) is a statistics service provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited, depending on how the Controller manages the processing of Data, which links data from the Meta advertising network with actions performed within this Application.
The Meta pixel monitors conversions that can be attributed to Facebook, Instagram, and Audience Network ads.

Personal Data processed: Usage data and Tracking Tools.
Location of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out

Retention period:

• _fbp: 3 months
• fr: 3 months

How to manage preferences and give or withdraw consent on this Application

When the use of Trackers is based on consent, the User can provide or withdraw such consent by setting or updating their preferences via the relevant privacy preferences panel available on this Application.

For Third-Party Tracking Tools, Users can manage their preferences by visiting the relevant opt-out link (if available), using the tools described in the third-party privacy policy, or contacting the third party directly.

How to control or delete Cookies and similar technologies through your device settings

Users can use their browser settings to:

• See which Cookies or other similar technologies have been set on the device.
• Block Cookies or similar technologies.
• Delete Cookies or similar technologies from the browser.
  However, browser settings do not allow granular control over consent by category.

For example, Users can find information on how to manage Cookies in some of the most popular browsers at the following links:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Internet Explorer
• Microsoft Edge
• Brave
• Opera

Users can also manage some Tracking Tools for mobile apps by disabling them through the device’s settings, such as the mobile advertising settings or tracking-related settings in general (Users can refer to the device settings to find the relevant option).

How to disable interest-based advertising

Notwithstanding the above, Users are informed about the possibility of using the information available on YourOnlineChoices (EU and UK), Network Advertising Initiative (USA), Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Giappone), or other similar services. These services allow Users to manage tracking preferences for most advertising tools. Therefore, the Controller recommends that Users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance also offers an application called AppChoices that helps Users control behavioral advertising on mobile apps.

Consequences related to refusing the use of Tracking Tools

Users are free to decide whether to allow the use of Tracking Tools. However, please note that Tracking Tools enable this Application to provide Users with a better experience and advanced features (in line with the purposes outlined in this document). Therefore, if the User decides to block the use of Tracking Tools, the Controller may not be able to provide the related functionalities.

Data Controller

Pally Vintage Closet, Via Villani 9, 50124, Florence (FI)

Email address of the Controller: pallyvintage@gmail.com

Since the use of Third-Party Tracking Tools on this Application cannot be fully controlled by the Controller, any specific reference to Third-Party Tracking Tools should be considered indicative. For complete information, Users are kindly invited to consult the privacy policies of the respective third-party services listed in this document.

Due to the inherent complexity of identifying tracking technologies, Users are invited to contact the Controller if they would like to receive further information regarding the use of such technologies on this Application.

Definitions and Legal References

Personal Data (or Data)

Personal Data means any information that, directly or indirectly, even in conjunction with any other information, including a personal identification number, can make a natural person identified or identifiable.

Usage Data

Usage Data is information collected automatically through this Application (including by third-party applications integrated into this Application), including: IP addresses or domain names of the computers used by the User connecting to this Application, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the server response status (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal aspects of the visit (e.g., time spent on each page) and the details about the path followed within the Application, particularly with regard to the sequence of pages viewed, system operating parameters, and the computing environment of the User.

User

The individual who uses this Application, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public authority, agency, or any other body that processes Personal Data on behalf of the Controller, as outlined in this privacy policy.

Data Controller (or Controller)

The natural or legal person, public authority, service, or any other body that, individually or in conjunction with others, determines the purposes and means of processing Personal Data, including security measures for the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This Application

The hardware or software tool through which the Personal Data of Users is collected and processed.

Service

The Service provided by this Application as defined in the relevant terms (if available) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union in this document refers to all current member states of the European Union and the European Economic Area.

Cookie

Cookies are Tracking Tools that consist of small portions of data stored inside the User's browser.

Tracking Tool

A Tracking Tool is any technology – e.g., Cookies, unique identifiers, web beacons, integrated scripts, e-tags, and fingerprinting – that enables tracking Users, for example by collecting or storing information on the User's device.

Legal References

Unless otherwise specified, this privacy notice applies exclusively to this Application.

Last update: November 6, 2024
Version: 10