This Privacy Policy is provided pursuant to art. 13 of European Regulation no. 679/2016 and applies exclusively to all Data collected through the Website hitmeupstore.it . This Privacy Policy is subject to updates that will be published promptly on the Website. This Privacy Policy, together with the Cookie Policy , establishes the basis on which the User's Personal Data will be processed.

Data Controller

The Data Controller of the Data collected by this Website is BLACK LAB by Ruggiero Pasquale, with headquarters in CORSO GARIBALDI, 50, PORTICI (NA) 80055
VAT number: IT0901697211 email: info@blacklabstore.it

Personal Data Processing Methods

The Personal Data provided or acquired will be subject to Processing based on the principles of correctness, lawfulness, transparency and protection of confidentiality in accordance with current legislation. The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

Purpose of the Processing of Personal Data and Legal Basis

Personal Data may be collected independently by the Owner or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of Users, of a technical-IT nature (e.g. IP address, type of browser used, operating system, domain name and website addresses from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the Internet. Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.

The Data that the User chooses to provide spontaneously are collected to allow the Website to provide its services, as well as for the following Purposes:

a) to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations and commercial practices, in particular, in tax/fiscal matters. This processing is mandatory to fulfill a legal obligation to which the Data Controller is subject;

b) for other purposes that are ancillary or connected to those indicated above and in any case falling within the scope of the activities of the Website;

c) to follow up on specific requests addressed to the Owner by the User for communications of an informative nature relating to the Services of the same Owner, via email messages or by filling out the contact form and other communication tools such as telephone or Messenger messaging. This processing is optional and based on the User's consent, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the services offered by the Owner;

d) for sending information and promotional and commercial offers also through the newsletter service. This processing is based on the consent freely expressed by the User;

e) for softspam purposes to allow the Data Controller to send promotional communications to the User by email regarding Products and/or Services purchased without the need for the express and prior consent of the User, as provided for by art. 130, paragraph 4, of the Privacy Code, and provided that the user does not exercise the right to object; This processing is based on art. 130, paragraph 4, of the Privacy Code as amended by Legislative Decree no. 101 of 2018;

f) to carry out statistical analyses on aggregate and anonymous data to analyse the User's behaviour, to improve the products and services provided by the Data Controller and to satisfy the User's expectations;

g) for profiling activities for marketing purposes. This Processing is based on the consent freely expressed by the User.

Category of Personal Data processed

Among the Personal Data processed by this Website, independently or through third parties, there are: Cookies, Usage data, Email and Name. Personal Data may be collected independently by the Owner or through third parties. Personal Data may be provided voluntarily by the User when using the Website, by filling out the contact form, when communicating with the Owner via email, by phone or Messenger chat. The optional, explicit and voluntary sending of emails via the Contact Form or by means of the addresses indicated on this Website, entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other Personal Data included in the email. The User's consent to the provision of Data is necessary to be included in the Owner's databases and for the purposes of establishing and correctly carrying out what is offered by the same to its Users, as well as to third parties for the fulfillment of the individual activity requested. Failure to provide such data therefore prevents registration in the Data Controller's databases, the completion of any contracts, as well as the execution of the same and of any other possible activity.

Data Communication

In addition to the Owner, in some cases, the following may have access to the Data:

a) categories of specifically trained Persons in Charge involved in the organisation of the Website (administrative, commercial, marketing, legal, system administrators);

b) external parties (such as third-party technical service providers, hosting providers, IT companies, communications agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Data Processors, if appointed, may always be requested from the Data Controller;

c) public or private entities that can access the Data in compliance with legal obligations;

d) subjects who carry out tasks that are accessory and instrumental to the Data Controller's activity;

Treatment Times

As expressly provided for by art. 5, co. 1, lett. e) of the GDPR, the Data are stored for the time necessary for the Processing of the same in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:

– The Data collected for contractual obligations will be retained for the time necessary to complete the aforementioned purposes and as required by law;

– The Data collected for fiscal/administrative obligations or for contractual obligations will be retained for the time necessary to complete the aforementioned purposes and as required by law;

– The Data collected for Purposes attributable to the legitimate interest of the Owner will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Owner by contacting the Owner.

– The Data collected based on the User's Consent may be retained until such Consent is revoked;

The Data may be stored by the Owner for a longer period in compliance with legal obligations or by order of an authority.

At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, deletion, rectification and portability of the Data can no longer be exercised.

Cookie

This website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and ads, provide social media features and analyze traffic. Cookie Policy

Place of Processing and Transfer of Data Abroad

The Data is processed at the Data Controller's operational headquarters. For further information, please contact the Data Controller. The Data may be processed by natural persons and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and having their registered office in EU or non-EU member countries. In the event that the Data is transferred outside the EEA, the Data Controller will adopt all appropriate contractual measures to guarantee adequate protection of the Data.

Tools used for the Processing of Personal Data

CONTACT FORM

By filling in the contact form with their data, the User consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal data collected through the contact form: Email, Name and Surname

Klaviyo

Klaviyo is a suite of solutions for creating contact forms. Personal data collected through contact forms: Email, Name and Surname. Place of processing: USA – Privacy Policy

MAIL ADDRESS MANAGEMENT

These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow you to collect data relating to the date and time the messages are viewed by the User, as well as the User's interaction with them, such as information on clicks on links inserted in messages.

Newsletter

By registering for the newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be transmitted. The User's email address may also be added to this list as a result of registering on this Website or after making a purchase. The User may choose to unsubscribe from the newsletter at any time by clicking on a specific button found within the emails. After clicking on the unsubscribe button, the User's Data will be immediately deleted by the "email marketing" software. Personal Data collected: email and Name. This Website uses the newsletter service provided by:

1.Klaviyo

Klaviyo provides a newsletter platform that allows Data Controllers to reach their customers, understand how they interact with such communications and other content, and personalize marketing based on their interests. The User can choose at any time to unsubscribe from the newsletter by clicking on a specific button that will be found inside the emails. After clicking the unsubscribe button, his/her Data will be immediately deleted from the software. Personal Data collected: Email and Name. Place of Processing: USA – Privacy Policy

STATISTICS

Statistics services allow the Data Controller exclusively to monitor and analyze traffic data and are used to track User behavior. This Website uses the following services:

1. Google Analytics (Google Ireland Limited)

Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the advertisements of its own advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. The IP address anonymisation function is active on this site. The IP address transmitted by the browser for purposes related to Google Analytics will not be incorporated into other data already held by Google.

At the following link https://tools.google.com/dlpage/gaoptout?hl=it, Google makes available the browser add-on for deactivating Google Analytics. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

2. Facebook pixel conversion tracking (Facebook Ireland Ltd.)

Facebook conversion tracking (Facebook pixel) is a statistics service provided by Facebook. The Facebook pixel tracks conversions that can be attributed to Facebook ads. Personal Data collected: Cookies; Usage data. Place of processing: Ireland – Privacy Policy.

3. Google Tag manager (Google Ireland Limited)

Google Tag manager is a service that allows you to manage and monitor all third-party Tags on the Website to have information on the interest shown by Users towards the Website itself and consequently on the quality of the contents. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

INTERACTION WITH SOCIAL NETWORKS

These services allow interaction with social networks directly from the pages of this Website. The interactions and information acquired from this Website are in any case subject to the User's privacy settings for each social network. If a service for interaction with social networks is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages in which it is installed.

1. Facebook (Facebook Ireland Ltd.)

Facebook buttons are services of interaction with the social network Facebook, provided by Facebook Ireland Ltd. Personal Data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy

REMARKETING AND RETARGETING

These services allow this Website to communicate, optimize and serve advertisements based on the User's past use of this Website. This activity is performed by tracking Usage Data and using Cookies. This Website uses the following services:

1. Facebook Remarketing (Facebook Ireland Ltd)

Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which connects the activity of this Website with the Facebook advertising network. This Website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel, it is possible to understand the actions that people perform on the Website. The Data collected can be used to:

– ensure that your ads are shown to the right people;

– create audience groups to target ads to;

– take advantage of the additional advertising tools of the platform on which you advertise

The information collected is anonymous to the operators of this Site and cannot be used to identify the identity of a single user. However, the information is saved and analyzed by Facebook, which could link the action to a single profile and use this information for internal advertising purposes on Facebook, as outlined in the Facebook privacy policy. This will allow Facebook to show ads both on Facebook and on third-party sites. The Owner of the Site has no control over how this data is used. For more information on how users can protect their privacy, please refer to the Facebook Privacy Policy.

2. Google ADS

Google ADS is a service provided by Google Ireland Limited that connects this Website with the Google advertising network. This Website uses the Remarketing features of Google Analytics combined with the possibility of adaptation to different devices of Google ADS. This feature makes it possible to connect the target groups for promotional campaigns created by the Marketing function of Google Analytics with the adaptability to different devices of Google ADS. This allows to show advertisements based on the personal interests of the user, identified through an analysis of the behavior of the user on the web, whether on a mobile device or on other devices. It is possible to permanently disable the targeting and remarketing functions by disabling the "personalized advertising" function in the Google account. To do so, simply follow this link: https://www.google.com/settings/ads/onweb/ Personal Data collected: Cookies and Usage data. Place of processing: Ireland – Privacy Policy

CONTENT ON EXTERNAL PLATFORMS

These services allow you to view content hosted on external platforms directly from the pages of this website and interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages on which it is installed.

This website uses

Google Fonts

Google Fonts is a typeface visualization service provided by Google Ireland Limited that allows this Website to integrate such content within its pages. Personal Data collected: Usage data; various types of Data as specified in the privacy policy of the service. Place of processing: Ireland – Privacy Policy

Exercise of the rights of the interested party

The interested party has the right to exercise the rights provided for in articles 7, 15-22 of the European Regulation 679/2016. In particular, he/she has the right to withdraw his/her consent at any time and, upon simple request to the Data Controller, he/she may request access to the Personal Data, receive the Personal Data provided to the Data Controller and where possible transmit them to another Data Controller without impediments (so-called portability), obtain the updating, the limitation of the processing, the rectification of the Data and the cancellation of those processed in breach of the current legislation. He/she has the right, for legitimate reasons, to oppose the Processing of Personal Data concerning him/her and the Processing for the purpose of sending advertising material, direct sales and for carrying out market research. He/she also has the right to lodge a complaint with the Privacy Guarantor as the supervisory authority in matters of personal data protection. The interested party may exercise his/her rights by contacting the Data Controller by email at the address: hitmeupstoreonline@gmail.com

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as a reference the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this Privacy Policy, the User is required to cease using this Website and can request that the Data Controller removes his/her Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that point. The Data Controller is not responsible for updating all the links that can be viewed in this Privacy Policy, therefore whenever a link is not working and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by that link.

Privacy Policy updated February 2021