Privacy policy

This Privacy Policy describes how cartiv.org (the "Site" or "we") collects, uses, and discloses your Personal Information when you visit or make a purchase on the Site.

Personal information we collect 

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, the websites or search terms that referred you to the Site, and how you interact with the Site. We call this automatically collected information "Device Information." When we talk about "Personal Information" in this Privacy Policy, we refer to both Device Information and Order Information.

• Device information
• Purpose of collection:load the Site accurately and perform analysis on Site usage to optimize it.
• Source of collection:Automatically collected when you access our Site through cookies, log files, web beacons, tags, or pixels.
• Disclosure for business purposes:shared with our data processor Shopify and any other software we may use to better manage our business, including, but not limited to, sales channels, payment gateways, shipping and order fulfillment apps.
• Personal information collected:web browser version, IP address, time zone, cookie information, sites or products viewed, search terms, and how you interact with the Site.
• Order information
• Purpose of collection:to provide you with products or services to fulfill our contract, process your payment information, arrange shipping and provide you with invoices and/or order confirmations, communicate with you, check our orders for potential risks or fraud, and, when in line with the preferences you have shared with us, provide you with information or advertising related to our products or services.
• Source of collection:collected from you.
• Disclosure for business purposes:shared with our data processor Shopify and any other software we may use to better manage our business, including, but not limited to, sales channels, payment gateways, shipping and order fulfillment apps.
• Personal Information Collected:name, billing address, shipping address, payment information (including credit card numbers and accounts used to make a payment), email address, and phone number.

Marketing and SMS notifications: By signing up for SMS notifications, you agree to receive recurring automated marketing messages at the phone number provided. Consent is not a condition of purchase. Reply STOP to unsubscribe. HELP for assistance. Message and data rates may apply. For more information, see the Privacy Policy and Terms of Service.

Marketing data is collected.

We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with Personal Information, please contact us at the address above to request its deletion.

How do we use your personal information? 

We use your Personal Information to provide you with our services, including: offering products for sale, processing payments, shipping and fulfilling your order, and keeping you updated on new products, services, and offers.

We generally use the Order Information we collect to fulfill any orders placed through the Site (including processing payment information, arranging for shipping, and providing invoices and/or order confirmations). Additionally, we use this Order Information to: 

- To communicate with you;

- To check our orders for potential risks or fraud; and

- When in line with the preferences you have shared with us, to provide you with information or advertising related to our products or services.

We use the Device Information we collect to help us identify potential risks and fraud (in particular, your IP address) and, more generally, to improve and optimize our Site (for example, by generating analytics on how our customers browse and interact with the Site and to evaluate the success of our marketing and advertising campaigns).

Legal basis

Under the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we process your personal data based on the following legal bases:

• Your consent;
• The performance of the contract between you and the Site;
• The fulfillment of our legal obligations;
• To protect your vital interests;
• To perform a task carried out in the public interest;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Sharing your Personal Information 

We share your Personal Information with third parties to help us use your Personal Information as described above. For example, we use Shopify to manage our online store: you can learn more about how Shopify uses your Personal Data here: https://www.shopify.com/legal/privacy. We also use Google Analytics to understand how our customers use the Site: you can learn more about how Google uses your Personal Data here: https://www.google.com/intl/en/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may share your Personal Data also to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other legitimate information requests we receive, or to protect our rights.

Behavioral advertising 

As described above, we use your Personal Information to provide you with targeted advertising or marketing communications that we believe may be of interest to you. For more information on how targeted advertising works, you can visit the Network Advertising Initiative ("NAI") information page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising using the links below (please note that these opt-out links may change over time): 

- Facebook: https://www.facebook.com/settings/?tab=ads 

- Google: https://www.google.com/settings/ads/anonymous 

- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads 

- Amazon: https://www.amazon.com/gp/help/customer/display.html?nodeId=201909010

- LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

- Twitter: https://twitter.com/personalization

- Instagram: https://www.instagram.com/about/legal/privacy/ad-settings/

- Pinterest: https://help.pinterest.com/en/articles/personalization-and-data

- Snapchat: in the app settings

- TikTok: in the app settings

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance opt-out portal at: http://optout.aboutads.info/.

Data retention 

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to delete it. For more information about your right to deletion, see the "Your Rights" section.

Automated decision-making

If you are a resident of the European Economic Area (EEA), you have the right to object to processing based solely on automated decision-making (including profiling) when such decision-making has a legal effect on you or otherwise significantly affects you.

We MAY to adopt fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our Shopify data controller uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

• Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a limited number of hours.
• Temporary blacklist of credit cards associated with IP addresses entered in the blacklist. This blacklist persists for a limited number of days.

Sale of personal information

Our site sells personal information, as defined by the California Consumer Privacy Act of 2018 ("CCPA").

We may sell or disclose the personal information of California residents to third parties. If you wish to opt out of the sale of your personal information, click the link [Non vendere le mie informazioni personali]on our website and follow the provided instructions.

We may also share your personal information with service providers who perform services on our behalf, such as payment processors, shipping companies, and marketing partners. We require our service providers to use your personal information only as necessary to provide us with the services and to maintain its confidentiality and security.

California residents have the right to request that we disclose the categories and specific personal information we have collected about them, as well as the categories of sources from which we collected the information, the purpose for which we collected it, and the categories of third parties with whom we have shared the information. To exercise your right of access or your right to delete your personal information, please contact us.

We do not discriminate against California residents who exercise their privacy rights under the CCPA. However, we may offer financial incentives or apply different prices or rates for goods or services based on the value of the personal information we collect from you. If we offer such incentives or different prices or rates, we will send you a notice and obtain your consent before proceeding.

 

Your Rights 

GDPR - If you are a resident of Europe, you have the right to access the personal information we hold about you and to request its correction, update, or deletion. If you wish to exercise this right, please contact us using the contact information below.

Additionally, if you are a resident of Europe, we inform you that we are processing your information in order to fulfill contracts we may have with you (for example, if you place an order through the Site) or otherwise to pursue our legitimate business interests listed above. Also, please note that your information will be transferred outside of Europe, including to Canada and the United States. For more information on how data transfers comply with GDPR, see Shopify's GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

CCPA - If you are a California resident, you have the right to access the Personal Information we hold about you (also known as the "Right to Know"), to transfer it to a new service, and to request that your Personal Information be corrected, updated, or deleted. If you wish to exercise these rights, please contact us using the contact information provided above.

If you wish to designate an authorized agent to submit these requests on your behalf, please contact us.

Cookies

A cookie is a small amount of information that is downloaded to your computer or device when you visit our Site. We use different types of cookies, including functional, performance, advertising, and social media or content cookies. Cookies enhance your browsing experience by allowing the website to remember your actions and preferences (such as login and region selection). This means you won't have to re-enter this information every time you return to the site or navigate from one page to another. Cookies also provide information about how people use the website, for example, whether it is their first time visiting or if they are regular visitors.

We use the following cookies to optimize your experience on our site and to provide our services.

Cookies necessary for the store to function

Name	Function	Duration
_ab	Used in relation to admin login.	2y
_secure_session_id	Used in relation to browsing a storefront.	24h
_shopify_country	Used in relation to checkout.	session
_shopify_m	Used to manage customer privacy settings.	1 year
_shopify_tm	Used to manage customer privacy settings.	30 min
_shopify_tw	Used to manage customer privacy settings.	2 weeks
_storefront_u	Used to facilitate updating customer account information.	1 min
_consenso_di_tracciamento	Tracking preferences.	1 year
c	Used in relation to payment.	1st
cart	Used in relation to the shopping cart.	2s
valuta_carrello	Used in relation to the shopping cart.	2w
cart_sig	Used in relation to checkout.	2w
cart_ts	Used in relation to checkout.	2w
cart_ver	Used in relation to the cart.	2w
checkout	Used in relation to checkout.	4 weeks
token_checkout	Used in relation to checkout.	1 year
dynamic checkout displayed on the cart	Used in relation to checkout.	30 min
hide_shopify_pay_for_checkout	Used in relation to checkout.	session
keep_alive	Used in relation to buyer localization.	2w
master_device_id	Used in relation to merchant login.	2y
previous_step	Used in relation to checkout.	1 year
remember me	Used in relation to checkout.	1 year
secure_customer_sig	Used in relation to customer login.	20 years
shopify_pay	Used in relation to checkout.	1 year
shopify_pay_redirect	Used in relation to checkout.	30 minutes, 3 weeks, or 1 year depending on value
storefront_digest	Used in relation to customer login.	2 years
tracked_start_checkout	Used in relation to checkout.	1 year
checkout_one_experiment	Used in relation to checkout.	session
checkout_session_lookup	Used in relation to checkout.	3w
checkout_session_token_<<token>>	Used in relation to checkout.	3w
identity-state	Used in relation to customer authentication.	24 hours
identity-status-<	Used in relation to customer authentication.	24 hours
customer_identity_account_number	Used in relation to customer authentication.	12w

 

Reporting and analysis

Name	Function	Duration
_landing_page	Track landing page pages.	2 weeks
_orig_referrer	Monitor the landing pages.	2 weeks
_s	Shopify Analytics.	30 min
_shopify_d	Shopify Analytics.	session
_shopify_s	Shopify Analytics.	30 min
_shopify_sa_p	Shopify analysis related to marketing and referral.	30 min
_shopify_sa_t	Shopify analysis related to marketing and referral referral.	30 min
_shopify_y	Shopify Analytics.	1 to
_y	Shopify analysis.	1 year
_shopify_ga	Shopify and Google Analytics.	session
customer_auth_provider	Shopify Analytics.	session
customer_auth_session_created_at	Shopify Analytics.	session

 

The duration a cookie remains on your computer or mobile device depends on whether it is a "persistent" or "session" cookie. Session cookies last until you stop browsing, while persistent cookies last until they expire or are deleted. Most cookies we use are persistent and expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please note that removing or blocking cookies may negatively affect your user experience and some parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether to accept them via browser controls, often found in the "Tools" or "Preferences" menu. For more information on how to change browser settings or how to block, manage, or filter cookies, consult your browser's help or visit sites such as: www.allaboutcookies.org.

Also, please note that blocking cookies may not completely prevent information sharing with third parties, such as our advertising partners. To exercise your rights or deny consent to certain uses of your information by these parties, follow the instructions in the "Behavioral Advertising" section above.

Do Not Track 

Please note that we do not change our Site's data collection and use practices when we receive a "Do Not Track" signal from your browser. 

Changes 

We may periodically update this privacy policy to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

If you wish to file a complaint, please contact us by email using the details provided in the "Contacts" section

If you are not satisfied with our response to your complaint, you have the right to submit your complaint to the competent data protection authority. You can contact the local data protection authority or our supervisory authority here: https://ico.org.uk/make-a-complaint/

CONTACT US

Company name: CIMBOLI LORENA
Registered office address: Via Castel dei Capecchi 10, 51100, Pistoia (PT), Italy
VAT Number: IT02084110473
REA Number: PT - 616518
Contact email: support@cartiv.org
Contact phone: +39 3460853547