Privacy Policy

Introduction: the GDPR and privacy

The General Data Protection Regulation (GDPR) or General Data Protection Regulation is a regulation (EU 2016/679) with which the European Commission intends to strengthen and homogenise the protection of personal data of citizens and residents of the European Union, within or outside its borders. This regulation replaces the privacy laws of individual states and has been in force since 25 May 2018.

For more information you can see the official text of the GDPR , the website of the privacy watchdog and the dedicated page on Wikipedia.

In accordance with the RGPD, this policy is intended to explain clearly and simply what personal data is collected through this website, where it is stored, for how long, for what purposes and how you can update it or request its deletion.

Who is the Data Controller: Luna s.r.l.

Luna s.r.l. (hereinafter referred to as the "Company") protects the confidentiality of personal data and guarantees them the necessary protection from any event that may put them at risk of violation.

As provided for by the European Union Regulation no. 679/2016 ("RGPD"), and in particular art. 13, below we provide the user ("Data Subject") with the information required by law regarding the processing of his/her personal data.

lunaticamilanob2b.com (which we will refer to as the "Website") are websites owned by Luna s.r.l. - P.IVA IT13609550960 to which we will refer hereafter simply as the "Company".

Luna s.r.l., our company, is located in Lissone (MI), Via Cappuccina 61, postcode 20851 (Italy).

The Company operates the websites listed above and controls the management of personal data as described in this policy, in accordance with current privacy laws (General Data Protection Regulation (GDPR) - EU Regulation 2016/679).

You can contact us by email at lunasrl@legpec.it (PEC) or via the contact form

On what legal basis does Azienda collect and manage personal data?

Company uses as a legal basis the need to process personal data for the performance of its services, which include the sale of tourism products and services, transactional communication of orders from its Website catalogue. Without collecting the required data, it would not be possible to provide the aforementioned services.

Company then relies on its legitimate business interests to provide its services, promote them, prevent fraud and spam and improve its services.

Where required by applicable law, we will ask for your consent before processing your personal data for direct marketing purposes.

What kind of data does the Company collect on the Website? (Type of data processed)

Company collects information that you provide to us via the contact and/or purchase forms on this site. For users requesting information or purchasing products or services this data includes your name, email, phone number and any other information you choose to include in your request.

For users wishing to join our affiliate programme we collect data on company name, official site, phone number and email, business interests, city and province, as well as the date of the request and the site from which the request originated.

For each form submission on our sites we also collect data about the browser and operating system used and the IP address, to combat spam and to identify any usability problems with our sites with particular configurations and devices.

When you visit our sites we automatically collect certain information. For example, your IP address, the date and time you access our site, the hardware, software or browser you use, and information about your computer's operating system and language settings. We also collect information about your clicks and the pages you have viewed, as well as information about which sites or marketing campaigns you used to arrive at our sites.

The Company does not ask you to provide so-called "special" data, i.e., in accordance with the provisions of the GDPR (art. 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning a person's health or sexual life or sexual orientation. In the event that the service requested from Azienda requires the processing of such data, the interested party will receive prior notice and will be asked to give his/her consent.

Why does the Company collect this data on the Website? (Purpose of Processing)

The data sent to us through the form on these sites are first and foremost used to provide the information, including any offers, explicitly requested through the form itself.

For the data relating to users who wish to join our affiliation programme, we collect the information that the user enters in the form in order to be able to send, by email or telephone, information and the contract for joining the affiliation programme as well as the related transactional communications of orders and anything else relevant to the service offered in the event that the user joins our affiliation programme.

Only with your express consent may we also send you any offers relating to services related to visibility on our sites or otherwise directed to products and services that we believe may be of interest to you.

The company keeps the request in its archives for statistical purposes and as a backup, so that it can be resent if necessary.

To those who make a request or purchase, Azienda also sends an email confirming that the request or purchase has been correctly made and this email may contain information, including links to articles and offers on Azienda websites.

Only with your explicit consent may we send you further commercial communications via email or SMS containing information and offers of interest about our Products and Services.

Further explicit consent may be required to send further commercial communications via email or SMS containing information and offers from third parties or partners of the Company.

Lastly, the data entered in the forms may be used to show you personalised online advertising campaigns (remarketing) instead of generic advertisements, through specialised platforms such as Google Ads, Bing Ads, Facebook Advertising and Criteo. In this case, site users are grouped into virtual lists, in an aggregate form that cannot be traced back to individual users, based on information entered and choices made on this site and others owned by the company, based on the site and pages visited and actions taken on the site such as sending an enquiry or subscribing to a newsletter. In this way we try to show you advertisements targeted to your interests, through advertising platforms such as Google Ads, Bing Ads, Facebook Advertising and Criteo, instead of generic ads.

Where is the data collected stored and for how long? (Data retention)

The data collected both from our forms and from browsing our sites are acquired through the following platforms:

  • Google Analytics - for data related to site navigation and purchase.
  • Google Tag Manager - for data relating to site navigation and purchase.
  • Criteo - for data relating to site purchases, navigation and choices.
  • HotJar - for site navigation and shopping data.
  • Bing Ads - for site navigation and shopping data.
  • Google Ads - for site navigation and shopping data.
  • Google Gmail - Each form generates an email addressed to the company which stores it in Gmail accounts ( Google Suite )
  • Google Pages Documents - Data can be exported to documents stored in Google's service, Google Workspace
  • Mailchimp - for requests sent via forms and subscriptions to our newsletters
  • Amazon SES AWS - for requests sent via forms and subscriptions to our newsletters
  • On databases stored on our servers at the provider OVH.com or Hetzner.com
  • On documents and databases stored at the offices of Business Click s.r.l. in Lissone and Rome, Italy.
  • On documents and databases stored at the Amazon AWS service

Transmission of collected data

The transmission of personal data as described in this Policy may include transfer outside the European Union to countries that do not have data protection laws as comprehensive and complete as those of the European Union countries. Where required by EU law, we will only transfer personal data to recipients that offer an adequate level of data protection. Google, Bing, Amazon, Facebook, Criteo and Mailchimp are leading international companies and their servers are distributed worldwide, including outside the EU countries. OVH.com has its servers in Strasbourg, France. In some cases, data may also be stored in other data centres in the OVH.com network. For more information please consult the OVH.com data centre network or contact us. Company based in Lissone (MI), Italy

The company relies on special procedures to prevent unauthorised access to data, as well as its misuse. Only authorised personnel may access personal data while performing their work. We retain your personal data for as long as we deem necessary to enable you to use our services, perform our services, advertise our services, conduct our business, comply with legal obligations and resolve any disputes. All personal data held by us is governed by this Privacy Policy. If you have questions about a specific data retention period for certain types of personal data we process, please contact us as indicated below.

The data collected through the request and/or purchase forms arrive, in the form of email, both to Company, which operates the Websites, and to the sender. Other than the use stated in this policy, data is not shared with any other third party.

Data collected through the forms with which the user wishes to join the affiliate programme is not shared by Azienda with any third party.

Site navigation and usage data collected through tools such as Google Analytics is only shared in aggregate form (i.e., not attributable to individual users) with Azienda employees and partners.

Third parties to whom the Company entrusts the performance of certain activities such as tax compliance, IT or business consulting, fraud prevention, debt collection. In these cases the recipients of the communication are appointed as Data Processors

How does Azienda handle children's personal data?

The services offered by Azienda.com are intended only for persons over the age of 16. For persons under the age of 16, use of our services is only permitted with the consent of their parents or legal guardian. If we become aware of the processing of data of persons under 16 years of age without the valid consent of a relative or legal guardian, we reserve the right to delete such data.

How can you check, update and possibly delete personal data that you have shared with the Company?

At the request of the data controller and in accordance with current privacy laws (General Data Protection Regulation (GDPR) - EU Regulation 2016/679), Company will undertake to have the personal data in its possession reviewed, amended or deleted.

The easiest way to do this is to send us an email via the contact form in which you can ask us to view, update or permanently delete the data held on you in our files.

Every communication from us sent via the Mailchimp platform, the server of this site, via SMTP of the provider OVH.com or via Amazon SES AWS also includes a link from which you can update your data and consent and possibly choose not to be contacted again in the future.

We do our best to respond to each request promptly and comprehensively as is our duty. It is always your right to lodge a complaint with the supervisory authority.

This Policy may be changed in the future, so please visit this page regularly to be aware of any updates.

Method of processing

The data is processed using computer and telematic tools and/or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which the data was collected and, in any case, in accordance with the relevant regulations in force.

Optional supply of data

Apart from that specified for navigation data, users/visitors are free to provide their personal data. Failure to provide them may only result in the impossibility of obtaining what has been requested.

Rights of data subjects

Users/visitors have the right to access their data at any time and to exercise the other rights (to request the origin of the data, the correction, updating or integration of inexact or incomplete data, or the cancellation or blocking of data processed in violation of the law, or to oppose their use for legitimate reasons) provided for in Article 7 of the Privacy Code, by contacting the data controller directly through the site or through the data below.

Data Controller

Luna s.r.l. - Via Cappuccina 61 - 20851, Lissone (MI) - P.IVA IT13609550960 - PEC: lunasrl@legpec.it

Since the installation of Cookies and other tracking systems operated by third parties through the services used within this Application cannot be technically controlled by the Owner, any specific reference to Cookies and tracking systems installed by third parties is to be considered indicative. For complete information, please consult the privacy policy of any third party services listed in this document. Given the objective complexity associated with the identification of Cookie-based technologies and their very close integration with the operation of the web, Users are invited to contact the Controller if they wish to receive any further information on the use of Cookies and any use of the same - for example by third parties - carried out through this site.

Copyright

All the contents of the site, including textual, photographic and graphic contents are the property of the Company, except for those photographic contents owned by third parties and used with their consent. All the contents of the site are protected by Italian and European copyright laws; no content may be copied or imitated, even in part, without the written consent of Azienda.

Cookie Policy

This website uses cookies. In this policy we explain in detail what cookies we use and how they enable us to offer our users the best possible experience.

By continuing to browse this site you agree to our use of cookies.

What is a cookie?

A cookie is a short text sent to your browser from a website you visit. It allows the site to store information about your visit, such as your preferred language and other settings. This can facilitate your next visit and increase the usefulness of the site for you. Cookies play an important role. Without them, using the Web would be a much more frustrating experience.

There are different types of cookies and different ways of using them. Cookies can be distinguished according to their function, their duration and who has placed them on a website.

How are cookies used?

Our website uses the following types of cookies:

Technical cookies

Some cookies are indispensable for the correct functioning of our site, as they allow the web page to load and all essential functions to function correctly. Other technical cookies add functionality and improve or personalise the overall browsing experience.

Third party statistical cookies

These are cookies that allow us to monitor and analyse the behaviour of users of our website. Through these cookies we are able to monitor navigation on our website and can create profiles of our users in order to make improvements based on the analysis of this data. These cookies (third-party web services) provide anonymous/aggregated information on how visitors navigate the site.

In particular, Google Analytics, a system provided by Google Inc., uses cookies that are placed on your computer to enable the website operator to analyse how you use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity. Users who do not want the cookies in question may prevent them from being stored on their computers by using the "Google Analytics opt-out browser add-on" made available by Google at https://tools.google.com/dlpage/gaoptout . To activate the component, which inhibits the system from sending information on the user's visit, simply install it by following the instructions on the screen, close and reopen your browser.

Visit the following link to learn how to refuse or delete cookies from Google: https: //policies.google.com/privacy?hl=it

Visit the following link to read Google's privacy policy: http: //www.google.co.uk/intl/en/policies/privacy/

Third-party profiling cookies

We use a number of different suppliers who may in turn install cookies in order for the services they are providing to work properly. If you would like information about these third party cookies and how to disable them please access the list links below.

These cookies store information about user behaviour obtained through the observation of browsing habits in order to develop a specific profile to display ads based on it.

We also use Google Ads features and remarketing lists for Display Network ads from Google Analytics. We use Google cookies (such as Google Analytics and Google Ads cookies) and other third-party cookies (such as DoubleClick cookies) combined together to inform, optimise and serve ads based on previous visits to our website. This implies that suppliers (such as Google) display our promotional material on other websites that you visit on the Internet.

Some of our cookies may serve to identify you and others only provide anonymous statistical information about your navigation on our website, however this function can be disabled by setting your browser directly.

These cookies (third-party advertising services) are used in order to send you personalised advertising and content based on your browsing history on the site. Below are the links to the respective privacy policy pages and the consent form where you can disable the use of the third-party service's profiling cookies.

Google

Social media cookies

These third-party cookies are used to integrate some popular social media features and provide them within the site. In particular, they allow registration and authentication on the site via Facebook.

Facebook

Privacy policy: https: //www.facebook.com/privacy/policy/ .

Facebook offers targeted advertisements based on the behaviour and interests of online users. For more information: https: //www.facebook.com/privacy/policies/cookies .

Like button and social widgets of Facebook (Facebook, Inc.)

The Facebook "Like" button and social widgets are services for interaction with the social network Facebook, provided by Facebook, Inc. Personal data collected: Cookies and Usage Data. Place of processing : USA - Privacy Policy

Twitter Tweet button and social widgets (Twitter, Inc.)

The Tweet button and Twitter social widgets are services for interaction with the social network Twitter, provided by Twitter, Inc. Personal data collected: Cookies and Usage Data. Place of processing : USA - Privacy Policy

Web beacons

We use web beacons, these elements are images found on a web page or in an email and are used to monitor the online behaviour of users who visit our website or receive one of our newsletters.

The purpose of using this technology is to monitor user activity, such as the area of the site visited and the time spent browsing.

Statistics

The services contained in this section allow the Data Controller to monitor and analyse traffic data and serve to keep track of User behaviour.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the Personal Data collected in order to track and examine the use of this Application, compile reports and share them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the ads of its advertising network.

Personal Data collected: Cookies and Usage Data. Place of processing : USA - Privacy Policy - Opt Out

Google Tag Manager (Google Inc.)

Google Tag Manager is a statistics service provided by Google Inc. Personal data collected: Cookie and Usage Data. Place of processing : USA - Privacy Policy

How to disable cookies

Most internet browsers are initially set to accept cookies automatically. The user can modify these settings to block cookies or to warn that cookies are being sent to the user's device. There are various ways to manage cookies. Users can refer to the instruction manual or help screen of their browser to find out how to adjust or change their browser settings.

If you use any other browser, look in your browser's settings for how to manage cookies.

If you use different devices (e.g. computers, smartphones, tablets, etc.), you should ensure that each browser on each device is adjusted to reflect your cookie preferences.

Please note, however, that explicitly rejecting profiling cookies will not prevent you from receiving advertisements, but will simply mean that these advertisements will no longer be personalised.

How to contact us

If you have any questions or concerns regarding this privacy policy, the handling of your personal data and the use of cookies on this site, you can contact us by email via the contact form.

Last updated: 22 February 2022

Do not sell or share my personal data

As described in our Privacy Policy, we collect personal information from your interactions with us and our website, including through cookies and similar technologies. We may also share this personal information with third parties, including advertising partners. We do this to show you ads on other websites that are more relevant to your interests and for other reasons set out in our Privacy Policy.

Sharing personal information for targeted advertising based on your interaction on different websites may be considered "selling," "sharing," or "targeted advertising" under certain United States privacy laws. Depending on where you live, you may have the right to explicitly opt out of these activities. If you wish to exercise this right to explicitly opt out, please follow the instructions below.

If you visit our website with the explicit opt-out preference indicator at the Global Privacy Control enabled, depending on where you are located, we will treat this as a request to explicitly opt out of activities that could be considered a "sale" or "sharing" of personal information or other uses that could be considered targeted advertising for the device and browser used to visit our website.

To explicitly opt out of the "sale" or "sharing" of your personal information collected using cookies and other device-based identifiers as described above, you must navigate from one of the applicable United States states mentioned above.

Continue without accepting
Cookie Policy

We and selected third parties use cookies or similar technologies for technical purposes and, with your consent, also for other purposes as specified in the cookie policy. Refusal of consent may render the relevant functions unavailable. You can consent to the use of such technologies by using the "Accept" button. By closing this policy, you continue without accepting.

Informativa sulla Privacy Find out more and customise