Cookie Policy

Cookies — characteristics

In accordance with art. 12 et seq. of Reg. (EU) 679/2016 and art. 122, para. 1 of the Privacy Code, we provide the following information. With regard to their origin, cookies may be:

• First-party cookies, sent to the user's browser directly by the website being visited;
• Third-party cookies, sent to the user's device by websites other than the one being visited.

The types and characteristics of the cookies that BARBARARIZZI.COM installs on the user's devices, directly or via third parties, are as follows:

• a) Technical cookies — necessary (first-/third-party): used solely to carry out the transmission of a communication over an electronic communications network, or as strictly necessary to provide a service explicitly requested by the user (art. 122, para. 1 of the Privacy Code). These cookies cannot be disabled.
• b) Analytical cookies — analysis (first-/third-party): collected to understand how users interact with the site; used to gather information and report usage statistics, or — together with some profiling cookies — to display more relevant adverts and measure interactions with them.
• c) Functional cookies — functionality (third-party): collected to ensure the website functions properly; usually set only in response to information you provide, to personalise and optimise your experience and remember your chat history.

List of cookies processed

• wordpress_test_cookie — WordPress — checks that your browser accepts cookies — session
• wordpress_logged_in_[hash] — WordPress — logged-in user authentication (only after login) — session / 15 days
• wordpress_sec_[hash] — WordPress — HTTPS security for the private area (only after login) — session / 15 days
• wp-settings-[id] / wp-settings-time-[id] — WordPress — logged-in user display preferences — 1 year
• woocommerce_cart_hash — WooCommerce — maintains cart contents — session / persistent
• woocommerce_items_in_cart — WooCommerce — number of items in cart — session
• wp_woocommerce_session_[hash] — WooCommerce — cart and checkout session ID — 2 days
• woocommerce_recently_viewed — WooCommerce — recently viewed products (if used) — session
• wpconsent / wpconsent_[...] — WPConsent (consent banner) — stores user consent choices — ~12 months
• PHPSESSID — server (PHP) — technical session identifier — session
• payment session cookie — Nexi XPay — transaction management during payment

• yith_wcwl_session_[hash] / wishlist cookie — YITH WooCommerce Wishlist — wishlist management for non-logged-in users — session
• Accessibility preferences — Ally / One Click Accessibility widget (Elementor) — saves the accessibility settings chosen by the user via browser localStorage (not an actual cookie)

• tk_ai, tk_qs, tk_lr, tk_or, tk_r3d — Automattic / Jetpack (Stats + WooCommerce Analytics) — e-commerce traffic statistics and analytics — session to ~24 months
• _ga — Google Analytics — distinguishes individual users — 2 years
• _ga_Y43RHZLVXN — Google Analytics (GA4) — maintains session state — 2 years
• sbjs_first, sbjs_first_add, sbjs_current, sbjs_current_add, sbjs_session, sbjs_udata, sbjs_migrations — WooCommerce Order Attribution (Sourcebuster) — records the traffic source/campaign associated with an order — session to ~6 months

Third-party cookies

While browsing, you may receive cookies from websites operated by other organisations (third parties), due to the presence of "social plugins" for Facebook, X and other services such as Google Maps and Google Analytics. The presence of these plugins involves the transmission of cookies to and from websites operated by third parties. The management of information collected by third parties is governed by their respective privacy policies, to which we ask you to refer.

For greater transparency, the third-party cookies collected on BARBARARIZZI.COM are:

• vuid — Vimeo — video view statistics — 2 years
• player — Vimeo — stores video player preferences — 1 year
• __cf_bm — Cloudflare (serving Vimeo) — distinguishing human and bot traffic — ~30 minutes
• ts, ts_c, tsrce, x-pp-s, enforce_policy, l7_az, LANG, nsid — PayPal — payment management, fraud prevention and preferences — session to ~3 years
• __stripe_mid — Stripe (via WooCommerce Payments) — payment fraud prevention — 1 year
• __stripe_sid — Stripe (via WooCommerce Payments) — payment session-level fraud prevention — 30 minutes

The BARBARARIZZI.COM website includes components of Google Analytics, a web traffic analysis service provided by Google, Inc. These are third-party cookies managed anonymously to monitor and improve the performance of the website (performance cookies). Google Analytics uses cookies to collect and analyse, anonymously, information on how the website is used (including the user's IP address) in order to compile reports on website activity. This site does not use, and does not allow third parties to use, Google's analytics tool to monitor or collect personally identifiable information. Google does not associate the IP address with any other data it holds, nor does it attempt to link it to a user's identity. Google may disclose this information to third parties where required by law or where they process it on Google's behalf.

Further information: google.it/policies/privacy/partners. You can selectively disable Google Analytics by installing the opt-out tool: tools.google.com/dlpage/gaoptout.

Purposes

Cookies are installed and processed for the following purposes:

• to ensure normal browsing of the website and use of BARBARARIZZI.COM (navigation / session cookies);
• to enable browsing according to a set of selected criteria, with a view to improving the service provided (first-party functionality cookies).

• to collect information, in anonymised and aggregated form, on the number of users and how they visit BARBARARIZZI.COM.

• collected to ensure the website functions properly; usually set only in response to information you provide, to personalise and optimise your experience and remember your chat history.

Failure to give consent, or its subsequent withdrawal, will not prevent you from using the features of BARBARARIZZI.COM. To disable third-party cookies or block their use, please refer to the privacy policies of the relevant providers.

Cookie management

You can accept all, none, or only certain categories of cookies by setting your preferences via the "Cookie Settings" link at the bottom of the website and in the cookie banner shown on your first visit (which remains visible until you make a selection). Clicking the link opens a dialogue organised into tabs showing the categories of cookies used by the site; click on these to learn more and change the default settings. You can also prevent the installation of cookies through your browser settings.

Total or partial disabling of technical cookies may compromise the site features reserved for users; public content remains accessible even with cookies completely disabled. Disabling third-party cookies does not compromise navigability in any way.

To disable cookies through your browser:

• Chrome — support.google.com/chrome
• Firefox — support.mozilla.org
• Microsoft Edge — windows.microsoft.com
• Opera — help.opera.com
• Safari — support.apple.com

Cookie processing

Cookies are processed by formally appointed data processors using paper-based, magnetic, computerised or electronic tools suitable for ensuring their security and confidentiality. Processing may also be carried out using automated tools designed to store, manage and transmit data electronically. The databases are stored in secure environments where access is constantly monitored, in compliance with Reg. (EU) 679/2016 and the Privacy Code. Third-party companies act as joint data controllers.

Nature of the data processing and legal basis

For the use of technical cookies (purpose 2.a). The legal basis is the legitimate interest of the owner of BARBARARIZZI.COM, as these tools are necessary both for the operation of the site and for statistical purposes, and to protect against fraud and unlawful acts in general. Any refusal to provide such data, in whole or in part, or to authorise its processing and/or disclosure to third parties, may result in Rivair S.r.l. being unable to grant access to and use of BARBARARIZZI.COM.

For analysis/statistics and operation/functionality purposes (2.b and 2.c). The legal basis is your specific consent for each individual purpose. Any refusal to provide such data, in whole or in part, or to authorise its processing and/or disclosure to third parties, will make it impossible for Rivair S.r.l. to carry out profiling activity.

Changing browser settings (refusal to install cookies)

Third-party cookies are generally not essential for browsing, so you can refuse them by default using the relevant browser settings. To change your browser settings and disable or delete cookies (analytical and/or functional), please use the relevant links below:

• Chrome — support.google.com/chrome
• Firefox — support.mozilla.org
• Microsoft Edge — windows.microsoft.com
• Opera — help.opera.com
• Safari — support.apple.com

This page can be accessed via a link at the bottom of every page on the website, pursuant to art. 122, para. 2 of Legislative Decree 196/2003.

"Do Not Track" option

The "Do Not Track" option is available in most modern browsers. Websites designed to respect this option should automatically stop collecting certain browsing data when it is enabled.

"InPrivate" / anonymous browsing

This feature allows you to browse without leaving any browsing data in your browser. The pages you visit are not saved in your history, and new cookies are deleted. However, incognito mode does not guarantee anonymity on the internet, as it merely prevents browsing data from being stored in your browser; this data remains available to website operators and internet service providers.

Your rights (as data subject) — cookies

With regard to cookies, you may:

• withdraw your consent to the installation of profiling cookies at any time; and, if consent has been given, withdraw it at any time;
• express your preferences regarding the use of cookies by BARBARARIZZI.COM through your browser settings and the tool provided by this website, pursuant to art. 122, para. 2 of the Privacy Code;
• exercise the further rights under Reg. (EU) 679/2016, as listed below.

Communication of data processing

Without prejudice to any disclosures or transmissions made in compliance with legal obligations, data may be disclosed within Europe to service and content providers (providers of services and electronic communications).

Storage

Cookies are stored as follows:

• Session cookies — deleted every time the browser is closed;
• Persistent cookies — not deleted when the browser is closed; they remain until a pre-set expiry date.

For specific retention periods, please refer to the table above.

Opt-out

You can withdraw your consent at any time.

Your rights (as data subject) — personal data

With regard to your personal data, you, as the data subject, may — by sending a written request by email to sales@barbararizzi.com — request from Rivair S.r.l., as data controller, access to your personal data, its rectification or erasure, the restriction of processing, or object to the processing (pursuant to arts. 15, 16, 17, 18, 19 and 21 of Reg. (EU) 679/2016). In particular:

• Rectification — taking into account the purposes of processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement.
• Restriction of processing — you may request this where: (a) you contest the accuracy of the data, for the period needed for Rivair S.r.l. to verify it; (b) the processing is unlawful and you object to erasure, requesting restriction instead; (c) Rivair S.r.l. no longer needs the data for processing purposes but you require it for the establishment, exercise or defence of legal claims.
• Erasure without undue delay — where: (a) the data are no longer necessary for the purposes collected; (b) you withdraw the consent on which processing is based and there is no other legal basis; (c) the data were processed unlawfully; (d) erasure is required to comply with a legal obligation under Union or Member State law.
• Data portability — receive the personal data concerning you, which you provided, in a structured, commonly used and machine-readable format, and transmit it to another data controller without hindrance from Rivair S.r.l. (art. 20 of Reg. (EU) 679/2016).
• Withdraw consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal (art. 8, para. 3 of Reg. (EU) 679/2016).

Your personal data will not be disclosed and will not be transferred to third countries or international organisations. It is stored on servers located within the European Union.

Data controller — data processor

The data controller in relation to cookies is Rivair S.r.l. The full and up-to-date list of data processors is available on request by writing to sales@barbararizzi.com.