1 – Information Regarding the Website’s Privacy Policy

  1. This section contains information regarding the management of shopkosmima, owned by Eleonora Ira Amato, in relation to the processing of user data.
  2. This privacy policy is also provided in accordance with Article 13 of Regulation (EU) No. 2016/679, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, for users interacting with shopkosmima.
  3. The policy applies only to shopkosmima and not to any other websites that may be accessed by users via links contained within the site.
  4. The purpose of this document is to provide information on the methods, timing, and nature of the information that data controllers must provide to users when they visit the pages of shopkosmima, regardless of the purpose of their connection, according to Italian and European legislation.
  5. The privacy policy may be subject to changes due to the introduction of new regulations in this regard. Users are therefore encouraged to check this page periodically.
  6. If the user is under fourteen years of age, according to Article 8, paragraph 1 of Regulation (EU) 2016/679 and Article 2 – Quinquies of Legislative Decree 196/2003, as amended by Legislative Decree 181/18, they must provide authorization through parental consent or by a legal guardian.

2 – Data Controller

  1. The data controller is the natural or legal person, public authority, service, or other body that, individually or together with others, determines the purposes and means of processing personal data. The data controller also oversees security measures.
  2. For this website, the data controller is Eleonora Ira Amato, and for any clarification or to exercise user rights, they can be contacted via email at: ira@shopkosmima.com.

3 – Data Processing Location

  1. The data processing generated by the use of shopkosmima takes place at Via dei Velluti 15r.
  2. In case of necessity, the data related to the newsletter service may be processed by the data controller or entities appointed by it at their respective locations.

4 – Legal Basis for Data Processing

  1. The processing of personal data by shopkosmima is based on the user’s consent — pursuant to Article 6, paragraph 1, letter a) of Regulation (EU) 2016/679 — expressed by navigating and consulting this website, thereby accepting this privacy policy.
  2. Consent is optional and can be revoked at any time by sending an email request to ira@shopkosmima.com, specifying that without consent, some services may not be provided, and website navigation may be compromised.

5 – Cookies

  1. This section describes how the site and third parties use cookies and similar technologies. The use of cookies complies with European (Directive 2009/136/EC, which amended Directive 2002/58/EC “E-Privacy”) and national regulations (The Italian Data Protection Authority’s decision of May 8, 2014, and subsequent clarifications, as well as Cookie Guidelines and other tracking tools of June 10, 2021, No. 231).
  2. For full information regarding cookies, please visit our Cookie Policy: www.shopkosmima.com/cookies.

6 – Types of Data Processing

  1. The processing of personal data is necessary to pursue the legitimate interest of the data controller in providing information about shopkosmima’s activities, in accordance with Article 6, paragraph 1, letter f) of Regulation (EU) 2016/679, and in compliance with the same regulation.
  2. This site uses Log Files where information collected automatically during user visits is stored. The information collected may include the following:
    • Internet protocol (IP) address
    • Browser type and parameters of the device used to connect to the site
    • Internet service provider (ISP) name
    • Date and time of the visit
    • The web page from which the visitor arrived (referral) and exit page
    • The number of clicks (if applicable)
  3. The above information is processed automatically and collected in aggregate form only to verify the proper functioning of the site and for security purposes. This information will be processed based on the legitimate interests of the data controller.
  4. For security purposes (spam filters, firewalls, virus detection), automatically recorded data may include personal data such as the IP address, which could be used, in accordance with applicable laws, to block attempts to damage the site or to harm other users, or to engage in harmful or illegal activities. Such data is never used to identify or profile the user but is used solely for the purpose of protecting the site and its users. This information will be processed based on the legitimate interests of the data controller.

7 – Types of Data Collected

  1. shopkosmima collects user data either directly from the site or through third parties. The data collected is necessary for website navigation.
  2. The data collected by shopkosmima includes:
    • First and last name, billing and shipping address, email address, and phone number (if applicable).

8 – Data Provided by the User

  1. If the website allows for the submission of comments or in the case of specific services requested by the user, including the possibility of submitting a Curriculum Vitae for a potential employment relationship, the website will automatically detect and register certain user identification data, including the email address. Such data is voluntarily provided by the user at the time of requesting the service.
  2. By submitting a comment or other information, the user expressly accepts this privacy policy. The data received will be used solely for the provision of the requested service and only for the time necessary to provide the service.
  3. The information that users choose to make public via the services and tools provided by the site is knowingly and voluntarily provided by the user. This exempts the site from any responsibility regarding possible violations of the law. It is the user’s responsibility to ensure they have permission to input third-party personal data or content protected by national and international laws.
  4. The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
  5. Specific summary information will be progressively displayed or reported on the pages of the site prepared for particular services on request.

9 – Purpose of Data Processing

  1. The data collected by the site during its operation is used for the purposes indicated above and for the following purposes:
    • Marketing purposes and newsletters.

10 – Data Retention

  1. In accordance with Article 5.1(c) of the Regulation, the information systems and software used by shopkosmima are configured to minimize the use of personal and identification data; such data will be processed only to the extent necessary to achieve the purposes stated in this policy.
  2. The data will be retained for the period strictly necessary to achieve the purposes for which it is collected. In any case, the criteria used to determine the retention period comply with applicable laws and principles of data minimization and retention limitation.
  3. Data used for security purposes (blocking attempts to damage the site) will be retained for the time strictly necessary to achieve the aforementioned purpose.

11 – Payments

  1. shopkosmima uses payment services to process payments by credit card, bank transfer, or other methods. shopkosmima does not collect or store payment data.
  2. Payment data is collected directly by the payment service provider, such as credit card companies, PayPal, Stripe, or similar providers. These services may send messages to the user, such as email or SMS payment notifications.
  3. The data collected and the use of such data by third-party services are governed by their respective privacy policies.
    • PayPal: PayPal, Inc. provides the service for processing online payments. Personal data collected: types of data as specified in the privacy policy of the service. Processing location: as specified in the privacy policy of the service. Privacy Policy.
    • Stripe: Stripe, Inc. provides the service for processing online payments. Personal data collected: types of data as specified in the privacy policy of the service. Processing location: as specified in the privacy policy of the service. Privacy Policy.

12 – Newsletter

  1. With the user’s prior consent, and through voluntary email registration, the user’s email address is added to a contact list to receive periodic updates, including promotional and marketing emails from the website.
  2. A confirmation email will be sent to the user (to the email address provided), containing a link to confirm that the user is indeed the owner of the email address.
  3. Personal data that may be collected through the newsletter: first and last name, full address, and email address.

13 – Contact Forms

  1. The user may complete contact/information request forms, providing their data and consenting to its use in order to respond to requests as indicated in the form’s header.
  2. Personal data that may be collected: first and last name, email address.

14 – Social Media Interaction

  1. This site includes plugins and/or buttons for social networks to allow for easy sharing of content on the user’s favorite social networks. These plugins are configured to not set any cookies when users access the page to safeguard user privacy. Cookies are only set, if applicable, when the user actively uses the plugin.
  2. This type of service allows interaction with social networks or other external platforms directly from the pages of shopkosmima.
  3. The interactions and information acquired by shopkosmima are subject to the user’s privacy settings on each social network. In the event that a social network interaction service is installed, it is possible that, even if the users do not use the service, it may collect traffic data related to the pages on which it is installed.
    • LinkedIn Button and Social Widgets (LinkedIn Corporation): Allows interaction with the LinkedIn social network. Personal Data collected: cookies and usage data. Privacy Policy.
    • Facebook Like Button and Social Widgets (Facebook, Inc.): Allows interaction with the Facebook social network. Personal Data collected: cookies and usage data. Privacy Policy.
    • Twitter Tweet Button and Social Widgets (Twitter, Inc.): Allows interaction with the Twitter social network. Personal Data collected: cookies and usage data. Privacy Policy.
    • Google+ +1 Button and Social Widgets (Google Inc.): Allows interaction with the Google+ social network. Personal Data collected: cookies and usage data. Privacy Policy.
    • Pinterest Pin It Button and Social Widgets (Pinterest, Inc.): Allows interaction with the Pinterest social network. Personal Data collected: cookies and usage data. Privacy Policy.
    • Instagram Button and Social Widgets (Instagram, Inc.): Allows interaction with the Instagram social network. Personal Data collected: cookies and usage data. Privacy Policy.

15 – User Rights

  1. Users are guaranteed respect for their rights regarding the protection of personal data. In line with the GDPR, users have the right to:
    • Access: Users may request confirmation of whether or not their data is being processed, as well as more detailed information regarding this privacy policy.
    • Rectification: Users may request that incorrect or incomplete data they have provided be corrected or completed.
    • Erasure: Users may request that their data be deleted if it is no longer necessary for our purposes, if consent is withdrawn, if they object to the processing, if the processing is unlawful, or if there is a legal obligation to delete the data, or in the case of minors under fourteen years old.
    • Restriction: Users may request that their data be processed only for storage purposes, excluding other processing, for the time necessary to correct their data, in cases of unlawful processing where they object to deletion, or if the user needs the data for legal purposes and the data held by the controller may be useful, or in cases of objection to processing pending verification of the legitimate reasons of the controller.
    • Objection: Users may object at any time to the processing of their data unless there are legitimate reasons of the controller that override their rights, such as for the exercise or defense of legal claims.
    • Portability: Users may request to receive their data, or have it transmitted to another controller indicated by them, in a structured, commonly used, and machine-readable format.
    • Withdrawal: Users may withdraw their consent to the use of cookies (Cookie Policy) at any time, as consent is the basis for processing. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  2. Users can exercise these rights at any time by contacting shopkosmima at ira@shopkosmima.com.
  3. Users also have the right to lodge a complaint with the Italian Data Protection Authority (“Garante per la Protezione dei Dati Personali”) if they believe that their rights have been violated by shopkosmima or if shopkosmima’s responses to their requests are unsatisfactory.

16 – Data Security

  1. This site processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the data. The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes.
  2. In addition to the data controller, in some cases, categories of persons involved in the site’s organization (administrative, commercial, marketing, legal staff, and system administrators) or external parties (such as third-party technical service providers, couriers, hosting providers, IT companies, and communication agencies) may have access to the data.

17 – Changes to this Document

  1. This document, which constitutes the privacy policy of this site, is published at: www.shopkosmima.com/privacy.
  2. It may be subject to changes or updates. If these changes and updates are significant, they will be reported to users through appropriate notifications.
  3. Previous versions of the document will still be accessible on this page.
  4. This document was last updated on July 19, 2024, to comply with regulatory provisions, specifically in accordance with Regulation (EU) 2016/679.