
Simplified Privacy Policy
The purpose of this privacy policy is to ensure maximum transparency regarding the personal data collected by this website and to explain how this information is used.
This privacy policy also outlines the methods used to process personal data of customers collected offline by the data controller, MUTO NAOMI, at their physical stores.
In compliance with the obligations set forth in the European General Data Protection Regulation (GDPR) No. 679/2016, this website respects and safeguards the privacy of visitors and users, making every possible and proportionate effort not to infringe upon users' rights.
This website does not publish advertisements nor use data for the purpose of sending marketing materials. However, it uses third-party services to improve the usability of the site. These third parties may collect user data and subsequently use it to deliver personalized advertisements on other websites. Nevertheless, this website is designed and configured to protect users' privacy as rigorously as possible and minimize the collection of personal data. For example:
- Regarding social plugins designed to simplify sharing articles on social networks, these are configured so that they only send cookies (and potentially collect data) after the user has clicked on the plugin.
- With regard to the collection of analytics data via the Google Analytics service, this service is anonymized through a specific agreement with the provider, and the data collected is used exclusively in aggregated form and is not combined with data from other Google services.
For further clarification, you can read the complete privacy policy below.
Data Controller
The Data Controller, i.e., the entity that determines the means and purposes of processing personal data, is MUTO NAOMI, located at Via Lombardia 12/D, 31038 – Paese (TV) – email mutonaomi@ecozini.com
Types of Data Collected
This website collects data in two ways:
-
- Voluntarily Provided Data: through subscribing to the newsletter, in cases where the email address can be considered personal data.
- Automatically Collected Data: through the Website which autonomously collects it or on behalf of third parties, for example, usage data and cookies.
- Usage Data refers to information automatically collected through this Website (also from third-party applications integrated into this Website), including: IP addresses or domain names of computers used by Users connecting to this Website, URI (Uniform Resource Identifier) addresses, request times, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server's response status (successful, error, etc.), the country of origin, browser and operating system features used by the visitor, various time-related details of the visit (e.g., the time spent on each page) and details concerning the path followed within the Application, with particular reference to the sequence of pages visited, parameters related to the operating system and the User's computing environment.
- Cookies or markers are small text files (essentially packages of information) that are automatically placed on the PC or DEVICE of the navigator inside the browser (Google Chrome, Internet Explorer, Mozilla Firefox, Microsoft Edge Safari) and are automatically resent to the server at each subsequent access to the site. They contain basic information about navigation on the Internet and thanks to the browser, they are recognized every time the user visits the site. They allow this site to check if you have already visited /. Cookies enable us particularly to understand which pages of the site are most visited as they allow us to see which pages are visited and for how long. Through these data, we can make the site more aligned with your requests and simplify navigation.
Cookies themselves are divided into three categories:
- Technical Cookies: These are information packages necessary for viewing the website. These cookies do not require consent by law.
-
Analytical Cookies: These are legally considered equivalent to technical cookies and therefore also do not require consent. They can be owned by this site (for example, used to track the number of pages visited within the site itself) or by third parties (i.e., generated by other websites to deliver content on the site being visited by users).
Users/visitors may, however, choose to block the use of Google Analytics and prevent its data from being stored on their device by using the specific browser add-on for disabling Google Analytics, made available by Google at the following address: https://tools.google.com/dlpage/gaoptout. To activate this feature, which blocks the sending of visit information, it is sufficient to install it by following the on-screen instructions, then close and reopen the browser. -
Profiling Cookies: These are exclusively aimed at understanding individual user preferences in order to present them with targeted content during navigation that is likely to be of interest.
This site does not issue first-party profiling cookies. However, third parties may issue this type of cookie—for example, you might receive such cookies when using embedded YouTube videos, the Facebook "Like" button, through Google Analytics, or by using interactive maps provided by Google Maps.
The most popular browsers allow the option to block only third-party cookies.
To disable this type of cookie, simply follow the instructions provided on the following pages:
- For Firefox: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie
- For Microsoft Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies
- For Microsoft Edge: https://support.microsoft.com/it-it/help/4027947/windows-delete-cookies
- For Google Chrome: https://support.google.com/chrome/answer/95647?hl=it
- For Opera: https://help.opera.com/en/latest/web-preferences/
- For Apple Safari: https://support.apple.com/it-it/HT201265
This website uses cookies from the following third parties.
-
Google Ireland Ltd
To learn more about how Google uses and processes data, we recommend reviewing Google's privacy policy at the following page: https://policies.google.com/privacy?hl=it -
Google Analytics: Used to analyze how users interact with the site, generate reports on site activity and user behavior, track how often users visit the site, how they find the site, and which pages are visited most frequently. The information is combined with data collected from other websites to create a comparative overview of this site's usage compared to others in the same category. Collected data includes: browser identifier, date and time of interaction with the site, referring page, IP address. Data processing location: European Union, as anonymization is enabled for this service. When anonymized—as is the case on this site—the Italian Data Protection Authority (Garante) has clarified that these cookies are equivalent to technical cookies and therefore do not require user consent. The collected data does not allow personal identification of users and is not combined with other personal information. The data is processed in aggregated and anonymized form (IP addresses are truncated after the last octet). Under a specific agreement (Data Processing Agreement), Google Ireland (the data processor) is prohibited from combining this data with data obtained from other services. For further details on Google Analytics cookies, please refer to the following page: Google Analytics Cookie Usage on Websites: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
Users can disable (opt-out) the collection of data by Google Analytics in a selective manner by installing the appropriate add-on provided by Google on their browser. It can be downloaded at: https://tools.google.com/dlpage/gaoptout -
Social Network Plugins
This website also includes plugins and/or buttons to allow easy sharing of content on your preferred social networks. When you visit a page on our website that contains such a plugin, your browser connects directly to the servers of the social network where the plugin is hosted. This server may record your visit to our website and, if applicable, associate it with your social network account, especially if you are logged in at the time or have recently visited any websites containing social plugins. If you do not wish for the social network to collect data related to your visit on our website, you should log out of your social account and, possibly, delete the cookies that the social network has installed in your browser. On this website, plugins with advanced privacy protection features are installed. These plugins do not send cookies or access cookies stored in the user’s browser upon page load but only after the user clicks on the plugin. The collection and use of information by these third parties is governed by their respective privacy policies, which we encourage you to review.
Facebook (cookie policy link): https://www.facebook.com/policies/cookies/
Twitter (cookie policy link): https://help.twitter.com/it/rules-and-policies/twitter-cookies
LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=it_IT
In accordance with the GDPR, every website must provide an easy and immediate way to disable and/or block cookies, even when these cookies are anonymous and do not involve the recording of personally identifiable data such as IP addresses.
As already explained in the section “Legal Basis,” the use of profiling cookies is permitted, but users may disable them by expressing their preference, including by clicking on the dedicated banner that appears when accessing the website.
Legal Basis
The submission of data through the contact form is based on the user’s freely given consent. Providing consent is optional. If consent is not granted, it will not be possible to send your data and request, nor will we be able to respond to you.
The collection of browsing data (cookies) is also carried out following the user’s free and voluntary consent, in the case of profiling (marketing) cookies. Profiling cookies may be processed by third parties. The use of profiling cookies is only permitted after the user has given their consent, which is expressed by clicking on the dedicated banner that appears when accessing the website or browsing its pages. However, some cookies (technical and anonymized analytical cookies) cannot be disabled without affecting the browsing experience. For these types of cookies, consent is not required.
In specific cases, personal data may be processed to fulfill a legal obligation.
The personal data of customers collected in stores is voluntarily provided by the individuals, after receiving a simplified information notice that refers to this document for further details. The legal basis for processing this data is the legitimate interest of the data controller.
Once the original purpose for which the data was collected has been fulfilled, the data may still be processed if there is a legal obligation or a legitimate interest of the data controller.
Purpose of Processing
Interaction with Social Networks and External Platforms
The purpose of this type of service is to allow the Data Controller to interact with social networks or other external platforms directly from the pages of this Website. Interactions and information acquired by this Website are in any case subject to the User's privacy settings related to each social network. If a service for interacting with social networks is installed, it is possible that even if Users do not use the service, it may collect traffic data related to the pages where it is installed.
Statistics
The purpose of this type of service is to allow the Data Controller to monitor and analyze traffic data and track user behavior.
Google Analytics
The purpose of this type of service is to allow the Data Controller and third parties to track and examine the usage of this Website, compile reports, and share them with other services developed by Google. Google might use Personal Data to contextualize and personalize its own advertising network ads.
Security
Data collection and information to ensure the security of the site (anti-spam filters, firewalls, virus detection) and Users, and to prevent or uncover fraud or abuse against the website. Data are automatically recorded and may potentially include personal data (IP address) which could be used, in accordance with applicable laws, to block attempts to damage the site itself or harm other users, or otherwise harmful activities or crimes. Such data are never used for the identification or profiling of the User and are periodically deleted.
Data Controller
Google Ireland Ltd is appointed as the Data Processor, as it processes data on behalf of the controller (in relation to the Google Analytics service).
Data Retention Period
Personal data will be stored, even in digital format, for a period not exceeding the achievement of the purposes, unless there is a legal obligation or a legitimate interest of the Data Controller that requires a longer retention period.
Processing Methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using both IT and/or telematic tools, as well as on paper, with organizational methods and logics strictly related to the indicated purposes.
Transfer of Collected Data to Third Parties
Data collected by the site are generally not provided to third parties, except in specific cases and namely: a legitimate request from a judicial authority and only in cases provided by law; if necessary for the provision of a specific service requested by the User; for the execution of security checks or optimization of the site. Apart from the Data Controller, in some cases other subjects involved in the organization of this Website (administrative personnel, legal advisors, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) appointed, when necessary, as Data Processors by the Data Controller may have access to the data. The updated list of Data Processors can always be requested from the Data Controller.
Place of Processing
The processing will primarily take place within the European Economic Area and specifically, in most cases, at the Data Controller's premises.
If there are transfers of personal data outside the European Economic Area, this will be allowed exclusively under the following conditions:
- When the transfer of personal data is directed towards a third country such as Mailchimp platform, or an international organization that the European Commission deems provides an adequate level of protection.
- In the absence of a decision by the European Commission, when said country or international organization offers adequate guarantees and data subjects can exercise their rights and there is the possibility of legal recourse.
- When the transfer is necessary for the execution of a contract between the data subject and the Data Controller or for pre-contractual activities, such as sending a quote or for a legal obligation.
Data Subject Rights
Users may exercise certain rights regarding the Data processed by the Data Controller, as outlined by EU Regulation 679/2016, articles 15, 16, 17, 18, 20, 21.
The User has the right to:
- revoke consent at any time. The User can revoke previously given consent for the processing of Personal Data.
- object to the processing of their Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below.
- access their Data. The User has the right to obtain information about the Data processed by the Data Controller, specific aspects of the processing, and receive a copy of the processed Data.
- verify and request correction. The User can verify the accuracy of their Data and request updates or corrections.
- obtain restriction of processing. Under certain conditions, the User can request the restriction of processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than their storage.
- obtain the erasure or removal of their Personal Data. Under certain conditions, the User can request the erasure of their Data from the Data Controller.
- receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller. This provision applies when Data is processed using automated means and the processing is based on the User’s consent, a contract to which the User is party, or measures connected to such a contract.
- file a complaint. The User can file a complaint with the competent personal data protection authority or seek judicial remedy.
Details on the Right to Object
Users are informed that if their Data is processed for direct marketing purposes, they can object to such processing without providing any reason. To find out whether the Data Controller processes data for direct marketing purposes, Users can refer to the relevant sections of this document.
Changes to This Privacy Policy
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page. Therefore, please check this page regularly, taking as reference the date of last modification indicated at the bottom. If you do not agree with the changes made to this privacy policy, you must cease using this Website and may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected up until that point.