Privacy and Cookie Policy

PRIVACY POLICY

from: https://ribesoflove.com/

Data Controller

RIBES OF LOVE BY SARA BERTELLONI

REGISTERED OFFICE and OPERATIONAL HEADQUARTERS: VIA PIEDIMONTE 3, 540380 MONTIGNOSO (MS)

Tax code/VAT number/COMPANY REGISTRATION NO.: IT01298530450

REA NUMBER: MS-129714

Owner's email address: ribesoflove@gmail.com

As the data controller (hereinafter "Controller"), we hereby inform you, pursuant to EU Regulation 679/2016 ("GDPR") and applicable national and international data protection legislation ("Privacy Law"), that your data will be processed in the following ways and for the following purposes:

Types of Data collected

The following personal data is collected on the ribesoflove.com website, either independently or through third parties:

name, surname, email, telephone number, postcode, city, address, province, state, company name.

Personal Data, provided freely by the User or, in the case of Usage Data, collected automatically during use of the site, unless otherwise specified, are all mandatory.

Usage Data means information that the computer systems and software procedures used to operate the website acquire during their normal operation and whose transmission is implicit in the use of internet communication protocols (see the section Further information on processing > Definitions and legal references).

However, if the user refuses to provide the mandatory data requested, the provision of the service may not be possible.

It will be up to the user to decide whether or not to provide optional data without this affecting the availability of the Service or its operation.

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data is collected.

Any use of Cookies or other tracking tools by ribesoflove.com or by the owners of third-party services used by it, unless otherwise specified, is intended to provide the Service requested by the User in addition to any other purposes described in this privacy policy and/or in the Cookie Policy, where applicable.

The User, assuming responsibility for the Personal Data of third parties obtained, published, or shared through ribesoflove.com, guarantees that he or she has the right to communicate or disseminate them, freeing the Data Controller from any liability towards third parties.

Method and place of processing of the collected data

Treatment methods

The Data Controller declares to adopt appropriate security measures aimed at preventing and preventing unauthorized access, disclosure, modification, or destruction of Personal Data.

The processing is carried out using electronic and/or telematic methods, organizational methods, and with logic strictly related to the indicated purposes.

In some cases, in addition to the Data Controller, other parties involved in the organization of ribesoflove.com may have access to the data, such as, for example:

employees and/or collaborators of the Data Controller, in their capacity as data processors and/or internal data managers and/or system administrators;

Third-party companies or other entities (for example, third-party technical service providers, customer care operators, IT service providers, credit institutions, professional firms, couriers, information technology companies, communications agencies, etc.) that perform outsourced activities on behalf of the Data Controller, in their capacity as external data processors (an updated list may be requested from the Data Controller at any time).

Legal basis for processing

In some cases, specified below, the Data Controller may be authorized to process Personal Data without the express consent of the User or other legal bases, until the User objects to such processing ("opt-out"), where the processing is necessary:

for the execution of a contract with the User and/or the fulfillment of pre-contractual obligations;

to prevent or detect fraudulent activity or abuse that is harmful to the Site;

for the pursuit of the legitimate interest of the Data Controller or third parties;

to fulfill a legal obligation to which the Data Controller is subject;

for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;

to perform aggregate statistical analyses on an anonymous basis, in particular of browsing data, in order to guarantee and improve the functioning of the site.

It is however understood that it will be possible at any time to request clarifications from the Data Controller regarding the specific legal basis of each processing in addition to the specification whether it is based on the law, provided for by a contract or necessary for its

conclusion.

Place

The Data is processed at the Data Controller's operating offices and in any other locations where the parties involved in the processing are located. Further information may be obtained by contacting the Data Controller.

Please note that the User's Personal Data may be transferred to a country other than the one in which the User is located. For further information on the place of processing, the User can refer to the section containing details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

If one of the transfers described above takes place, the User can refer to the respective sections of this document or request information from the Data Controller by contacting him at the contact details provided at the beginning.

Retention period

Personal data are processed and stored for the time required by the purposes for which they were collected:

those collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of such contract is completed;

Those collected for purposes related to the Data Controller's legitimate interest will be retained until such interest is fulfilled. The User can obtain further information in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User's consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. It is also understood that the Data Controller may be required to retain the Personal Data for a longer period.

longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted and therefore the right to access, erasure, rectification, and the right to portability will be precluded.

Purpose of Processing Collected Data

User Data is collected to allow the Owner to provide its Services, as well as for the following purposes:

Mailing list / Newsletter, Contact form, Direct registration, Sale of goods and/or services online, Google Analytics with anonymized IP (Google Inc.), Google AdWords conversion tracking (Google Inc.), PayPal (Paypal).

The user may, however, obtain detailed information on the purposes of the processing and on the Personal Data specifically relevant to each purpose in the relevant sections of this document or by contacting the Data Controller.

Details on the processing of personal data

Personal Data is collected for the following purposes and using the following services:

Mailing list / Newsletter ribesoflove.com

By registering for the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to ribesoflove.com may be sent. The User's email address may also be added to this list as a result of registering for ribesoflove.com or after making a purchase.

Personal Data collected: first name, last name, email address.

Contact and/or registration forms on ribesoflove.com

By filling out the contact forms on the site with their data, the User consents to their use to respond to requests for information, quotes, or any other kind of request indicated by the form header.

Personal data collected: name, surname, email, telephone number.

Direct registration on ribesoflove.com

The User registers by filling out the registration form and providing his/her Personal Data directly to ribesoflove.com.

Personal Data collected: first name, last name, email address, postcode, city, address, telephone number, province, state, company name.

Online sale of goods and/or services ribesoflove.com

The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery.

The Personal Data collected to complete the payment may include the credit card, the bank account used for the transfer, or other payment instruments provided.

The payment data collected by ribesoflove.com depends on the payment system used.

Google Analytics with anonymized IP (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”).

Google uses the Personal Data collected for the purpose of tracking and examining the use of ribesoflove.com, compiling reports and sharing them with other services developed by Google.

Google may use Personal Data to contextualize and personalize the ads of its own advertising network.

This Google Analytics integration anonymizes your IP address.

Anonymization works by shortening Users' IP addresses within the borders of the member states of the European Union or in other countries party to the Agreement on the European Economic Area.

Only in exceptional cases will the IP address be sent to Google servers and shortened within the United States.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States.

Privacy Policy ( https://policies.google.com/privacy?hl=it ) - Opt Out &. ( https://tools.google.com/dlpage/gaoptout?hl=it )

Entity adhering to the Privacy Shield.

Google AdWords conversion tracking (Google Inc.)

Google AdWords conversion tracking is a statistics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed on ribesoflove.com.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States

Entity adhering to the Privacy Shield.

PayPal (Paypal)

PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.

Personal Data collected: various types of Data as specified in the service's privacy policy.

Place of processing: See PayPal's privacy policy

User Rights

The user, as an interested party, has the right to:

obtain confirmation of the existence or otherwise of Personal Data, even if not yet recorded, and that such Data be made available to you in an intelligible form; revoke your previously expressed consent to the processing of your Personal Data at any time;

object to the processing of your Data where the processing is based on a legal basis other than consent (for further details see the section below);

Access your Data, obtain information on the Data processed by the Data Controller, request specifications on certain aspects of the processing, and receive a copy. Specifically, the User may request information:

a) the origin and category of the Personal Data;

b) the logic applied in case of processing carried out with the aid of electronic instruments;

c) the purposes and methods of processing;

d) the identifying details of the Data Controller and the persons responsible;

e) the subjects or categories of subjects to whom the Personal Data may be communicated or who may become aware of them, in particular if recipients are in third countries or international organizations;

e) where possible, the period for which the Data will be retained or the criteria used to determine that period;

f) the existence of an automated decision-making process and, if so, the logic used, the significance and the expected consequences for the data subject;

g) the existence of adequate guarantees in case of transfer of Data to a non-EU country or to an international organisation;

obtain, without undue delay, the updating and rectification of inaccurate Data or, when interested, the integration of incomplete Data

obtain the limitation of processing when the following conditions occur:

a) contesting the accuracy of the Personal Data;

b) unlawful processing by the Data Controller to prevent its deletion;

c) exercise of a right in court;

d) verification of the possible prevalence of the legitimate reasons of the Data Controller over those of the interested party;

In this case, the Data Controller will not process the Data for any purpose other than their storage.

obtain the cancellation, blocking, removal of your Personal Data or, where possible, transformation into anonymous form if the following conditions exist:

a) the data are processed unlawfully;

b) the data are no longer necessary in relation to the purposes for which they were collected or subsequently processed;

c) the consent on which the processing is based has been revoked and there is no other legal basis

d) if there has been opposition to the processing and there is no overriding legitimate reason to continue the processing;

e) in case of fulfillment of a legal obligation;

f) in the case of data relating to minors.

The Data Controller may refuse cancellation only in the case of:

a) exercise of the right to freedom of expression and information;

b) fulfillment of a legal obligation, performance of a task carried out in the public interest or exercise of official authority;

c) reasons of public health interest;

d) archiving in the public interest, scientific or historical research or for statistical purposes;

e) exercise of a right in court;

receive, where the processing is carried out by automated means and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it, without hindrance and in a structured, commonly used and machine-readable format, the Personal Data concerning the User to transmit them to another controller or, if technically feasible, to obtain direct transmission from the Controller to another controller.

lodge a complaint with the Italian Data Protection Authority or take legal action.

In the cases mentioned above, where necessary, the Data Controller will inform third parties to whom the Personal Data is disclosed of any exercise of rights by the user, except in specific cases (e.g., when such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right being protected).

Details on the right to object

In the event that Personal Data is processed in the public interest, in the exercise of public authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to such processing for reasons related to their particular situation.

If the data is processed for direct marketing purposes, users may object to the processing without providing any justification. To this end, to determine whether the Data Controller is processing data for direct marketing purposes, users can refer to the relevant sections of this document.

How to exercise your rights

To exercise your rights, you may send a request directly to the Data Controller at the contact details indicated in this document. The Data Controller will process your request as quickly as possible and, in any case, within one month.

Cookie Policy

ribesoflove.com uses cookies.

For further information and to view the detailed information, the User can consult the Cookie Policy.

Further information on treatment

Defense in court

The Data Controller may use the User's personal data in court or in the preparatory stages of its establishment for the defense against abuse in the use of ribesoflove.com or related Services by the User.

The User declares to be aware that the Data Controller may be required to disclose data by order of public authorities.

Specific information

Upon request, in addition to what is set forth in this privacy policy, ribesoflove.com may provide the User with additional and contextual information regarding specific services or the collection and processing of personal data.

System logs and maintenance

For operational and maintenance purposes, ribesoflove.com and any third-party services it uses may collect system logs, which are files that record interactions and may also contain personal data, such as the User's IP address.

Information not contained in this policy

Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details provided in this document.

Response to "Do Not Track" requests

ribesoflove.com does not support “Do Not Track” requests.

To find out whether any third-party services used support them, the User is invited to consult their respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users through the same channels, on ribesoflove.com, and, where technically and legally feasible, by sending a notification to Users via one of the contact details available to the Data Controller. Users are therefore encouraged to check this page regularly, referring to the last modification date indicated at the bottom.

If the changes affect processing whose legal basis is consent, the Data Controller will, if necessary, collect the User's consent again.

Definitions and legal references

Personal Data (or Data)

Personal data is any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

This information is collected automatically through ribesoflove.com (also from third-party applications integrated into ribesoflove.com), including: the IP addresses or domain names of the computers used by the User who connects with

ribesoflove.com addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server

(successful, error, etc.) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example, the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

User

The individual who uses ribesoflove.com who, unless otherwise specified, coincides with the Data Subject.

Interested

The natural person to whom the Personal Data refers.

Data Controller (or Controller)

The natural person, legal person, public administration or any other entity that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools used, including the security measures relating to the operation and use of ribesoflove.com.

The Data Controller, unless otherwise specified, is the owner of ribesoflove.com.

ribesoflove.com

The tool through which Users' Personal Data is collected and processed.

Service

The Service provided by ribesoflove.com as defined in the relevant terms (if any) on this site/application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.

Cookie

Small portion of data stored within the User's device.

Legal references

This privacy policy is drafted on the basis of multiple legislative provisions, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy policy applies exclusively to ribesoflove.com.

Last modified: 4/8/2025