This information, intended for all subjects who browse the e-commerce website https://www.yamamay.com/ (hereinafter,"Site"),is issued pursuant to art. 13 of Reg. (EU) no. 2016/679 (hereinafter,"GDPR")and, with regard to cookies, in accordance with art. 122 of d. lgs. 196/2003 (hereinafter,"Privacy Code"),as well as with the provision on the subject of the Privacy Guarantor of 8 May 2014, as supplemented by the provision of 10 June 2021 (hereinafter,"Provision").

Identity and contact details of the data controller

the company Inticom S.p.a., c.f. e p. IVA 02649140122, REA number 274435, with legal and operational headquarters in Via Carlo Noè 22, 21013 – Gallarate (VA), e-mail address privacy@pianofortegroup.com, P.E.C address. inticomspa@certimprese.it (hereinafter, "DataController").

Types of data processed

a. Navigation data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.

These data, necessary for the use of web services, are also processed for the purpose of:

obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);

check the correct functioning of the services offered.

The navigation data do not persist for more than seven days (except for any need to ascertain crimes by the judicial authority).

The legal bases of the processing carried out for the aforementioned purposes are the execution of a contract of which the interested party is a party and the pursuit of the legitimate interest of the Data Controller.

b.Data provided voluntarily by the user

In order to use certain services – register on the Site, purchase products, subscribe to the newsletter, contact customer care, apply within the "work with us" section, etc. – it is necessary to provide personal data, in relation to which reference is made to the specific information provided at the time of collection.

c. Information processed through cookies

The Site uses cookies.

What are cookies?

Cookies (or markers) are small text files that are sent from the web server visited by the user on the user's device (usually to the browser), when the latter accesses a particular site with the aim of storing and transporting information. They are stored so that you can recognize that device on the next visit. At each subsequent visit, in fact, cookies are sent back from the user's device to the site.

Each cookie generally contains the name of the server from which the cookie was sent and the expiration and a value, usually a unique number randomly generated by the computer.

First-party and third-party cookies

Cookies can be installed not only by the same operator of the site visited by the user (first-party cookies), but also by a different site that installs them through the first site (third-party cookies) and is able to recognize them. This happens because on the visited site there may be elements (images, maps, sounds, links to web pages of other domains, etc.) that reside on servers other than that of the visited site.

Technical, analytical and profiling cookies

Depending on the purpose, cookies are divided into technical cookies and profiling cookies.

The technical cookies are installed for the sole purpose of"carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide this service " (cf. art. 122, co. 1, Privacy Code). They are usually used to allow efficient navigation between pages, store user preferences, store information about specific user configurations, authenticate users, etc.

Technical cookies can be divided into navigation cookies, used in order to record data useful for the normal navigation and use of the website on the user's computer (allowing, for example, to remember the preferred size of the page in a list) and functional cookies, which allow the website to remember the choices made by the user in order to optimize its functionality (for example, functional cookies allow the site to remember a user's specific settings, such as country selection and, if set, permanent access status). Some of these cookies (called essential or strictly necessary) enable functions without which it would not be possible to perform some operations.

Pursuant to the aforementioned art. 122, co. 1, Privacy Code, the use of technical cookies does not require the consent of users, but only requires the obligation to inform users.

Pursuant to the Provision, technical cookies are assimilated - and, therefore, for their installation, the consent of users is not required - so-called cookies. analytics se:

i) created and used directly by the first party site operator (without, therefore, the intervention of third parties) for the purpose of optimizing the same to collect aggregate information on the number of users and how they visit the site itself, as well as

ii) made and made available by third parties if:

a. used by the first part site for mere statistical purposes, if minimization measures are adopted to reduce its identifying power (for example, by masking appropriate portions of the IP address) and used solely for the production of aggregate statistics and in relation, as a rule, to a single site or a single mobile application, so as not to allow the tracking of the navigation of the person who uses different applications or browses sites different webs;

b. third parties, who provide the site with the web measurement service, do not combine, enrich or cross the data, even minimized as above, with other information that such third parties have (eg customer files or statistics of visits to other sites) or transmit them to other third parties.

The profiling cookies are used to track the user's navigation, analyze his behavior for marketing purposes and create profiles on his tastes, habits, choices, etc. in order to transmit targeted advertising messages in relation to his interests of the user and in line with the preferences expressed by them in online browsing. These cookies, pursuant to art. 122 of the Privacy Code, can be installed on the user's terminal only if he has expressed his consent after being informed with the simplified procedures indicated by the Guarantor in the Provision (publication on the site of a "short" information contained in an immediate pop-up banner on the home page (or other page through which the user can access the site), that refers to an "extended" information, which is accessed through a link clickable by the user).

Persistentand session cookies

According to their duration, cookies are divided into persistent, which remain stored, until their expiration, on the user's device, unless removed by the latter, and session, which are notstored permanently on the user's device and disappear when the browser is closed.

List of cookies used by this website

The website uses the cookies listed below. It should be noted that the Data Controller uses the Transparency and Consent Framework 2.0 ("TCF 2.0") of the Interactive Advertising Bureau Europe (IAB Europe) association and that therefore the cookies developed by the Vendors participating in the TCF 2.0 are classified according to purposes established by IAB Europe.

Technical Cookies

This site uses technical cookies, installed by the site itself for the purposes indicated below.

This type of cookie cannot be disabled and for their installation, as indicated above, the prior consent of users is not required pursuant to art. 122 of the Privacy Code.

Below, for each technical cookie used, the name, the purpose of use and the duration are reported.

Analytical cookies equivalent to profiling cookies

The Site uses analytical cookies created and made available by third parties to statistically analyze accesses or visits to the site itself, allow the Data Controller to improve its structure, navigation logic and content and collect information on the use of the site.

For more details and information you can visit the following link: https://support.google.com/analytics/answer/1011397

These cookies, not being anonymized, allow the collection of information about users and how they visit the site. For these cookies, the prior consent of users is required in accordance with the Provision.

Below, for each analytics cookie used, the name, the purpose of use and the duration are reported.

Profiling Cookies

The Site uses profiling cookies created and made available by third parties with which it is possible to monitor users while browsing, tracking and storing their preferences and thus creating profiles that allow them to send personalized messages and more adherent to their interests on the domains indicated above. As indicated above, the prior consent of users is required pursuant to art. 122 of the Privacy Code and in accordance with the Provision.

Below, are reported, for each profiling cookie used, the name, the purpose of use and theduration.

Once the above retention terms have elapsed, the data will be destroyed or made anonymous, compatibly with the technical procedures of cancellation and backup.

Provision of data

Navigation data are necessary to implement computer and telematic protocols.

In addition, there are other data that are necessary for the provision of the related service (e.g. the e-mail address for subscribing to the newsletter or registering on the Site); therefore, failure to provide such data will make it impossible to use the requested service.
Destinatari

The treatments connected to the web services of this Site are carried out by personnel expressly authorized to process who have received adequate operating instructions.

The data may be disclosed to third parties operating as independent data controllers, such as public authorities and professional firms.

The data may also be processed, on behalf of the Data Controller, by third parties, designated as Data Processors pursuant to art. 28 of the GDPR, as natural and / or legal persons who carry out activities functional to the purposes indicated above, also operating outside the European Union.

In particular, the data will be transferred to the company that deals with the management and maintenance of the Site, namely VTEX Ecommerce Platform Limited, located in the United Kingdom (a third country deemed adequate by the European Commission pursuant to Article 45 of the GDPR with decision of 28 June 2021) as well as maybe transferred to its sub-managers. In this case, the standard contractual clauses adopted by the European Commission pursuant to art. 46, par. 2, letter .c) of the GDPR, with the possible provision of "additional measures" to guarantee a level of protection substantially equivalent to that required by EU law.

In the event that cookies are installed through the Site by third parties, please refer to the respective privacy policies indicated in the tables above.

How to issue and revoke consent to the installation of profiling cookies

Profiling cookies will be installed on your devices only with prior consent, expressed by selecting the "Accept all cookies" button within the banner containing the brief information or by selecting "Manage preferences", in which it is possible to manage cookies separately (both by selecting and deselecting them) for the purposes indicated. Consent to the use of cookies is recorded with a special "technical cookie".

You can always change your choice and, in particular, revoke the consent previously given, by clicking on "Cookie settings" at the bottom of each page of the Site.

It is understood that where the user clicks on "Technical cookies only", profiling cookies will not be installed.

Users can still express their options on cookies also through the settings of the browser used. Even if the web browser used by the user is set to automatically accept cookies, the latter can change the default configuration through the settings menu, deleting and / or removing all or some cookies, blocking the sending of cookies or limiting it to certain sites. Disabling, blocking cookies or deleting them could compromise the optimal use of some areas of the Site or prevent some features of the same, as well as affect the operation of third-party services. Below are the links to the guides for managing cookies of the main browsers:

Microsoft Internet Explorer

Microsoft Edge

Google Chrome

Mozilla Firefox

Safari

Opera

For browsers other than those listed above, it is necessary to consult the relevant guide to identify how to manage cookies.

The rights of data subjects

In relation to the processing of personal data carried out by the Data Controller, the interested party, in addition to what is indicated in the previous paragraph, may exercise the rights referred to in Articles. from 15 to 22 of the GDPR, where applicable, and, in particular, you can request access to the data concerning you and to the information referred to in art. 15 (purpose of the processing, categories of personal data, etc.), their cancellation in the cases provided for by art. 17, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18, in addition to data portability (i.e. to receive the data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another holder without hindrance) in the event that the processing is based on consent or contract and is carried out with automated tools.

To exercise the rights, the interested party can contact the Data Controller at the contact points indicated in par. 1.

The data subject shall have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which he or she habitually resides or works or in the State where the alleged infringement occurred.