Privacy Policy

Dear User,

ACQUAROMA SRL . (hereinafter for brevity "Company") as Data Controller
- pursuant to EU Regulation 679/2016 - considers privacy and the protection of personal data
a fundamental prerequisite of its activity.

We therefore invite you, before communicating any personal data to the Controller, to read
carefully this Privacy Policy because it contains important information on the protection
of your personal data.

This Privacy Policy:

is intended to be rendered for the site: www.acquaromashop.com and www.shop.acquaroma.com
constitutes an integral part of the Site and the services we offer;

is rendered pursuant to art.13 of the Regulations, to those who interact with the web services of the
Site, either through simple consultation or through the use of specific services made
available through the Site (e.g. contact form).

The Data Controller can be contacted at indirizzo:info@shop.acquaroma.com

This document has been prepared pursuant to Article 13 of the EU Regulation 2016/679 in order
to allow you to learn about our privacy policy, to understand how your
personal information is handled when you use our Site and, where applicable, to
give your express and informed consent to the processing of your personal data. The
information and data provided by you or otherwise acquired as part of your use of the Company's
services will be processed in accordance with the provisions of the Regulations and
of the confidentiality obligations that inspire the Company's business.

According to the rules of the Regulations, the processing carried out by the Company will be based
on the principles of lawfulness, fairness, transparency, purpose limitation and storage,
data minimization, accuracy, integrity and confidentiality.

__________________________________________________

1. DATA CONTROLLER

The Data Controller of the processing carried out through the Site is:

Acquaroma S.r.l. | Via Castellana, 33 | 31011 Asolo (TV) | Owner's email address:
info@acquaroma.it

__________________________________________________

2. PERSONAL DATA SUBJECT TO PROCESSING

As a result of browsing the Site, we inform you that the Company will process your Personal Data
which may consist of an identifier such as your name, an
identification number, an online identifier or one or more characteristic elements of your identity
physical, economic, cultural or social suitable to make the data subject identified or
identifiable.

The Personal Data processed through the Site are as follows:

Contact data such as first name, last name, e-mail, tax code, address and telephone.
Special data that you freely provide in the "Contact" form may be processed.

Navigation data

The computer systems and software procedures used to operate the Site
acquire, in the course of their normal operation, some Personal Data whose transmission
is implicit in the use of Internet communication protocols. This is information that
is not collected to be associated with identified interested parties, but which by its very
nature could, through processing and association with data held by third parties,
allow users to be identified. This category of data includes the IP addresses or
domain names of the computers used by users who connect to the Site, the addresses in
URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the
method used in submitting the request to the server, the size of the file obtained in
response, the numerical code indicating the status of the response given by the server (successful,
error, etc.) and other parameters relating to the user's operating system and computer environment
. These data are used for the sole purpose of obtaining anonymous statistical information
on the use of the Site and to check its correct functioning, to identify
anomalies and/or abuses. The data could be used to ascertain responsibility in
case of hypothetical computer crimes against the Site or third parties.

Special categories of personal data

In the use of the "Contact Us" section of the Site, there may be a conferment of your
Personal Data falling within the group of special categories of Personal Data referred to in Article 9 of the
Regulations, verbatim the "[...] data capable of revealing racial or ethnic origin, opinions
political opinions, religious or philosophical beliefs, or trade union membership, as well as processing
genetic data, biometric data intended to uniquely identify a natural person, data
relating to a person's health or sexual life or sexual orientation." We invite
to communicate such data only where strictly necessary. In fact, we remind you that in
the face of the transmission of special categories of Personal Data, but in the absence of specific
manifestation of consent to process such data (an eventuality that nonetheless allows you
obviously to send a curriculum vitae), the Company cannot be held responsible
under any title, nor can it receive any dispute whatsoever, since in that case the processing will be
permitted insofar as it concerns data manifestly made public by the person concerned, in
compliance with art. 9(1)(e) of the Regulations. However, we specify the importance, as
noted above - of manifesting explicit consent to the processing of special
categories of Personal Data, should you decide to share such information.

Data voluntarily provided by the data subject

In the use of some of the Services of the Site, there may occur a processing of Personal Data of
third parties submitted by you to the Company. With respect to such hypotheses, You stand as an autonomous
Data Controller, assuming all the obligations and responsibilities of the law. In this
sense, it confers on this point the widest indemnity with respect to any dispute, claim,
request for compensation for damages from processing, etc., that may be received by the Company
from third parties whose Personal Data have been processed through your use of the
functions of the Site in violation of the applicable data protection regulations. In any case,
should you provide or otherwise process Personal Data of third parties in the use of the Site,
guarantees as of now - assuming all related liability - that this particular
hypothesis of processing is based on a suitable legal basis under Article 6 of the
Regulations that legitimizes the processing of the information in question.

__________________________________________________

3. PURPOSE OF THE PROCESSING

The processing we intend to carry out, upon your specific consent where necessary, has the
following purposes:

Enable the provision of the Service you have requested
respond to requests for assistance or information;
fulfill any legal, accounting and tax obligations.
__________________________________________________

4. LEGAL BASIS FOR PROCESSING

The legal basis for the processing of Personal Data for the purposes set out in Section 3(a-b) is
Article 6(1)(b) of the Regulations as the processing is necessary for the provision of the
Services or for the response to requests from the data subject. The provision of Personal Data for
these purposes is optional but failure to do so would result in
being unable to activate the Services provided by the Site. The purpose referred to in section 3c represents
legitimate processing of Personal Data under Article 6(1)(c) of the Regulations. Once
conferred Personal Data, the processing is indeed necessary to fulfill an obligation of
law to which the Company is subject.

__________________________________________________

5. RECIPIENTS OF PERSONAL DATA

Your Personal Data may be shared, for the purposes set out in section 3 above,
with:

entities that typically act as data controllers under Art. 28 of the
Regulations namely: (i) persons, companies or professional firms providing
assistance and advice to the Company in accounting, administrative, legal, tax,
financial and debt collection matters relating to the provision of the Services; ii) subjects with
with whom it is necessary to interact for the provision of the Services (e.g. hosting providers)
iii) or subjects delegated to carry out technical maintenance activities (including the
maintenance of network equipment and electronic communication networks);
(collectively "Recipients"); the list of data processors who process data may
be requested from the Data Controller.

subjects, entities or authorities, autonomous data controllers, to whom it is mandatory to communicate
your Personal Data by virtue of provisions of law or orders of the authorities;

persons authorized by the Company to process Personal Data ex art. 29 of the Regulation
necessary to carry out activities closely related to the provision of the Services, who have
committed themselves to confidentiality or have an appropriate legal obligation of confidentiality (e.g.
employees of the Company).

__________________________________________________

5. DATA RETENTION.

Personal Data processed for the purposes referred to in section 3(a-b) will be kept for the
time strictly necessary to achieve those same purposes in accordance with the principles of
minimization and limitation of storage ex art. 5.1.e) of the Regulations. In any
case, the Data Controller will process Personal Data for as long as necessary to fulfill contractual
and legal obligations.

More information regarding the data retention period and the criteria used to
determine this period may be requested by writing to the Controller.

__________________________________________________

7. RIGHTS OF DATA SUBJECTS

Pursuant to Articles 15 et seq. of the Regulations, You have the right to request at
any time, access to your Personal Data, rectification or deletion of
same, restriction of processing in the cases provided for in Article 18 of the Regulations, obtain in
a structured, commonly used and machine-readable format the data that
concern You, in the cases provided for in Article 20 of the Regulations. At any time, you may revoke
ex art. 7 of the Regulation the consent given; lodge a complaint with the supervisory authority
competent ex art. 77 of the GDPR (Garante per la Protezione dei Dati Personali) in accordance with
art. 77 of the Regulation, if you believe that the processing of your data is contrary to
current legislation.

You may make a request to object to the processing of your data pursuant to Article 21 of
GDPR in which you give evidence of the reasons that justify the opposition: the Data Controller will
reserve the right to evaluate the request, which would not be accepted in the event of the existence of
compelling legitimate grounds for proceeding with the processing that override your interests, rights and
freedoms.

Requests should be addressed in writing to the Controller at info@acquaroma.it

__________________________________________________

8. CHANGES

This privacy policy is effective as of 12.05.2020. The Company reserves the right to modify or
simply update its content, in part or in full, including due to
changes in applicable legislation. The Company will inform you of such changes as soon as
are introduced and they will be binding as soon as they are published on the Site. The Company therefore invites you
to regularly visit this section to acquaint yourself with the most
recent and updated version of the privacy policy so that you are always up to date
on the data collected and the Company's use of it.

__________________________________________________

9. COOKIE POLICY

What cookies are and what they are used for

A cookie is a small text file that a website visited by the user sends to his or her terminal
(computer, mobile device such as smartphone or tablet) where it is stored for
to be then retransmitted to that site on a subsequent visit to that site.

Ways to express consent to profiling cookies

On your first visit to the Site, you may accept all cookies by
performing one of the following actions:

closing the banner by clicking on "I accept" present in the banner itself;

accessing another area of the site or clicking on any element of the page (image
or link) external to the banner;

scrolling the page.

In any case, through the browser settings, the user can

manage cookie preferences directly within his or her browser,
preventing their installation;

delete from his or her browser any cookies that have already been installed, including the cookie in which the
consent, if any, given by the user to the sites' installation of cookies has been saved.
The user can find information on how to manage cookies through his or her browser at the following
addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Windows Explorer.

Cookies are distinguished from each other based on:

- to the party that installs them on the user's terminal, depending on whether it is the same
operator of the site that the user is visiting (so-called "first-party cookies") or a different site
, which installs cookies through the first site (so-called "third-party cookies")

- to the purpose of each cookie: some cookies allow the website that installed them to
remember, for example, the preferences expressed by the user while browsing or
make a purchase or authenticate to access restricted areas (so-called
"technical cookies")

Other cookies allow the site that installed them to monitor the user's browsing
also for the purpose of sending advertisements and/or offering services in line with the preferences
expressed by the user while browsing the web (so-called "profiling cookies"). Only the
profiling cookies require the user's prior consent to their use.

First- and third-party technical cookies and profiling cookies and/or
other first- and third-party markers are installed through the Sites, as further described in the tables below.

Technical cookies that do not require the User's prior consent

Technical cookies are used to enable the Sites to function and/or to provide
the User with a service or function that the User has expressly requested.

They ensure, therefore, the normal navigation and enjoyment of the Sites, allowing, also,
save the preferences expressed by the User and optimize, thus, his navigation. The Sites
use both first- and third-party technical cookies.

The technical cookies used by the Sites can be divided into the following subcategories:

"user input" cookies: session cookies used to keep track of the data provided by the user
by filling out the appropriate online forms (for example, the forms present during the
purchase process for entering the shipping or billing address) or, as
happens in the case of the shopping cart, to remember the items that the user has selected
and placed in the cart by clicking on the appropriate button

authentication cookies: cookies used to identify the user after logging in and allow him
to authenticate himself and access the content and/or functionality for which this log-in is necessary
(e.g: purchase,access to the Personal Area)

other functionality cookies: cookies used to activate specific functionalities of the Sites and to
store the choices made by the User regarding the viewing of the pages of the
Sites

"consent cookie": cookie that documents the manifestation of the User's consent to
installation of profiling cookies through the performance of one of the actions described
in the banner/short information, recognizes the User upon the second access to the Site so that
does not request consent to the installation of cookies again and has a duration of 12 months.
Other types of Cookies or third-party tools that may make use of them

Some of the services listed below may not require the User's consent or
may be operated directly by the owner - depending on what is described - without
the help of third parties.

If among the tools listed below there are services operated by third parties, these
could - in addition to what is specified and also without the knowledge of the Owner - perform
tracking activities of the User. For detailed information in this regard, we recommend that you
consult the privacy policies of the services listed.

Statistics

The services contained in this section allow the Data Controller to
monitor and analyze traffic data and serve to track the behavior
of the User.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google
uses the Personal Data collected for the purpose of tracking and examining the use of this
online space, compiling reports and sharing them with other services developed by Google.

Google may use Personal Data to contextualize and personalize
ads in its advertising network.

Personal Data collected: Cookies and Usage Data.

__________________________________________________

10. DEFINITIONS

Personal Data (or Data).

Personal Data is any information relating to a natural person, identified or
identifiable, even indirectly, by reference to any other information, including
including a personal identification number

Usage Data

This is the personal data collected automatically through the Sites, including: the IP addresses or
domain names of the computers used by the User who connects to the Sites, the addresses in
URI (Uniform Resource Identifier) notation, the time of the request, the method used in
submit the request to the server, the size of the file obtained in response, the numeric code
indicating the status of the response from the server (successful, error, etc.) the country of origin, the
characteristics of the browser and operating system used by the visitor, the various
temporal connotations of the visit (e.g. the time spent on each page)
and the details of the itinerary followed within the Sites, with particular reference to the

sequence of the pages consulted, the parameters relating to the User's operating system and computer environment

User

The natural person browsing the Sites.
Interested

The User to whom the Personal Data refers.

_______________

Version 1.0 dated March 1, 2024