PRIVACY AND COOKIE POLICY
This information, intended for all subjects who browse the e-commerce website www.Carpisa.com (hereinafter, "Site"), is issued pursuant to Article 13 of Reg. (EU) no. 2016/679 (hereinafter, "GDPR") and, as regards cookies, in accordance with Article 122 of Legislative Decree 196/2003 (hereinafter, "Privacy Code"), as well as with the provision on the subject of the Privacy Guarantor of 8 May 2014, as supplemented by the provision of 10 June 2021 (hereinafter, "Provision"). Identity and contact details of the data controllerKuvera S.p.a., c.f. e p. IVA 07563710636, with registered office in Piazza dei Martiri n. 30, 80100 – Napoli (NA) and operational headquarters in Interporto Lotto C, A19 – A20 – A2, 80035 - Nola (NA), e-mail address privacy@pianofortegroup.com,P.E.C address. kuvera@pec.it (hereinafter, "Data Controller").
Types of data processed

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data, necessary for the use of web services, are also processed for the purpose of: obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.); check the correct functioning of the services offered. The navigation data do not persist for more than seven days (except for any need to ascertain crimes by the judicial authority). The legal bases of the processing carried out for the aforementioned purposes are the execution of a contract of which the interested party is a party and the pursuit of the legitimate interest of the Data Controller.

Data provided voluntarily by the user

In order to use certain services – register on the Site, purchase products, subscribe to the newsletter, contact customer care, apply within the "work with us" section, etc. – it is necessary to provide personal data, in relation to which reference is made to the specific information provided at the time of collection.

Information processed through cookies

The Site uses cookies.

What are cookies

Cookies (or markers) are small text files that are sent from the web server visited by the user on the user's device (usually to the browser), when the latter accesses a particular site with the purpose of storing and transporting information. They are stored so that you can recognize that device on the next visit. At each subsequent visit, in fact, cookies are sent back from the user's device to the site. Each cookie generally contains the name of the server from which the cookie was sent and the expiration and a value, usually a unique number randomly generated by the computer.

First-party and third-party

cookies Cookies can be installed not only by the same operator of the site visited by the user (first-party cookies), but also by a different site that installs them through the first site (third-party cookies) and is able to recognize them. This happens because on the visited site there may be elements (images, maps, sounds, links to web pages of other domains, etc.) that reside on servers other than that of the visited site.

Technical, analytical and profiling cookies

Depending on the purpose, cookies are divided into technical cookies and profiling cookies.
Technical cookies are installed for the sole purpose of "carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide this service" (see Article 122, paragraph 1, Privacy Code). They are usually used to allow efficient navigation between pages, store user preferences, store information about specific user configurations, authenticate users, etc. Technical cookies can be divided into navigation cookies, used in order to record data useful for the normal navigation and use of the website on the user's computer (allowing, for example, to remember the preferred size of the page in a list) and functional cookies, which allow the website to remember the choices made by the user in order to optimize its functionality (for example, functional cookies allow the site to remember a user's specific settings, such as country selection and, if set, permanent access status). Some of these cookies (called essential or strictly necessary) enable functions without which it would not be possible to perform some operations. Pursuant to the aforementioned art. 122, co. 1, Privacy Code, the use of technical cookies does not require the consent of users, but only requires the obligation to inform users. Pursuant to the Provision, technical cookies are assimilated - and, therefore, for their installation, the consent of users is not required - so-called cookies. analytics se: created and used directly by the first party site operator (without, therefore, the intervention of third parties) for the purpose of optimizing the same to collect aggregate information on the number of users and how they visit the site itself, as well as made available by third parties if: used by the first party site for mere statistical purposes, if appropriate minimization measures are adopted to reduce its identifying power (for example, by masking appropriate portions of the IP address) and used solely for the production of aggregate statistics and in relation, as a rule, to a single site or a single mobile application, so as not to allow the tracking of the navigation of the person who uses different applications or browses different websites; that provide the site with the web measurement service, do not combine, enrich or cross-reference the data, even minimized as above, with other information that such third parties have (eg customer files or statistics of visits to other sites) or transmit them to other third parties.

Profiling cookies are used to track the user's navigation, analyze his behavior for marketing purposes and create profiles on his tastes, habits, choices, etc. in order to transmit targeted advertising messages in relation to his interests of the user and in line with the preferences expressed by them in online browsing. These cookies, pursuant to art. 122 of the Privacy Code, can be installed on the user's terminal only if he has expressed his consent after being informed with the simplified procedures indicated by the Guarantor in the Provision (publication on the site of a "short" information contained in an immediate pop-up banner on the home page (or other page through which the user can access the site), that refers to an "extended" information, which is accessed through a link clickable by the user).

Persistent and session cookies

Based on their duration, cookies are divided into persistent, which remain stored, until they expire, on the user's device, unless removed by the latter, and session, which are not stored permanently on the user's device and disappear when the browser is closed.

List of cookies used by this website
The website uses the cookies listed below. It should be noted that the Data Controller uses the Transparency and Consent Framework 2.0 ("TCF 2.0") of the Interactive Advertising Bureau Europe (IAB Europe) association and that therefore the cookies developed by the Vendors participating in the TCF 2.0 are classified according to purposes established by IAB Europe.

Technical cookies

This site uses technical cookies, installed by the site itself for the purposes indicated below.

This type of cookie cannot be disabled and for their installation, as indicated above, the prior consent of users is not required pursuant to art. 122 of the Privacy Code.

Below, for each technical cookie used, the name, the purpose of use and the duration are reported.

Name First or third party Purpose Duration
VtexRCSessionIdv7 Kuvera Randomly created IDs to identify the user 1 day
biggy-session-carpisa Kuvera Records "tag analytics" events (search clicks, search queries) of a user in that specific session. Session
biggy-anonymous Kuvera Records "tag analytics" events (search clicks, search queries) of a user in that specific session. 365 days
biggy-event-queue Kuvera Tracks the "events" that are sent before the session.start event runs on the client side. Session
VtexRCMacIdv7 Kuvera Randomly created IDs to identify the user 1 year
VtexWorkspace Kuvera 30 days
vtex_session Kuvera Contains the ID of the user's browsing session values. 5 days
vtex_segment Kuvera Used to segment navigation and as a cache key in some systems. 5 days
vtex_binding_address Kuvera 365 days
checkout.vtex.com Kuvera It contains the orderForm ID, allowing you to restore the user's cart. 730 days
. ASPXAUTH Kuvera 730 days
unique_daily_cookie_homeView Kuvera 1 day
_gat_UA-45358052-1 Kuvera It is used to limit data collection on high-traffic sites. Session
C Adform Identifies whether the user accepts cookies. 30 days
cto_pxsig Kuvera Conversion Tracking Session

Analytical cookies equivalent to profiling cookies

The Site uses analytical cookies created and made available by third parties to statistically analyze accesses or visits to the site itself, allow the Data Controller to improve its structure, navigation logic and content and collect information on the use of the site.

For more details and information you can visit the following link: https://support.google.com/analytics/answer/1011397

These cookies, not being anonymized, allow the collection of information about users and how they visit the site. For these cookies, the prior consent of users is required in accordance with the Provision.

Below, for each analytics cookie used, the name, the purpose of use and the duration are reported.

Name First or third party Purpose Duration
uid Criteo Register a single user ID. 390 days
MR Bing Measure the use of the website for internal analysis. 7 days
_ga Kuvera Stores and counts page views. 730 days
_gid Kuvera Stores and counts page views. 1 day
TCID Commander Act Identify the visitor to calculate statistics per user (for campaign and site tracking, segmentation, ...). 1 year

Cookies in profile

The Site uses profiling cookies created and made available by third parties with which it is possible to monitor users while browsing, tracking and storing their preferences and thus creating profiles that allow them to send personalized messages and more adherent to their interests on the domains indicated above. As indicated above, the prior consent of users is required pursuant to art. 122 of the Privacy Code and in accordance with the Provision.

Below, are reported, for each profiling cookie used, the name, the purpose of use and theduration.

Name First or third party Purpose Duration
cto_tld_test Kuvera Used to identify the visitor through visits and devices to show the visitor personalized advertising. The service is provided by third-party advertising hubs, which facilitate real-time bidding for advertisers. Session
cto_bundle Kuvera It provides functions through the pages of the website. 395 days
_gcl_au Kuvera Stores conversions. 90 days
WE Bing Track visits through websites. 390 days
test_cookie Doubleclick Used to check if the user's browser supports cookies. Session
_uetsid Kuvera Determine which ads should be shown to the end user who visits the site. 1 day
_uetvid Kuvera Used to monitor users. 390 days
_fbp Kuvera Track visits through websites 90 days
Fri Facebook Used to deliver advertisements and retargeting. 90 days
Once the above retention terms have elapsed, the data will be destroyed or made anonymous, compatibly with the technical procedures of cancellation and backup.
Provision of data

Navigation data are necessary to implement computer and telematic protocols.

In addition, there are other data that are necessary for the provision of the related service (e.g. the e-mail address for subscribing to the newsletter or registering on the Site); therefore, failure to provide such data will make it impossible to use the requested service.

Recipient

The treatments connected to the web services of this Site are carried out by personnel expressly authorized to process who have received adequate operating instructions.

The data may be disclosed to third parties operating as independent data controllers, such as public authorities and professional firms.

The data may also be processed, on behalf of the Data Controller, by third parties, designated as Data Processors pursuant to art. 28 of the GDPR, as natural and / or legal persons who carry out activities functional to the purposes indicated above, also operating outside the European Union.

In particular, the data will be transferred to the company that deals with the management and maintenance of the Site, namely VTEX Ecommerce Platform Limited, located in the United Kingdom (a third country deemed adequate by the European Commission pursuant to Article 45 of the GDPR with decision of 28 June 2021 as well as maybe transferred to its sub-managers. In this case, the standard contractual clauses adopted by the European Commission pursuant to art. 46, par. 2, letter .c) of the GDPR, with the possible provision of "additional measures" to guarantee a level of protection substantially equivalent to that required by EU law.

In the event that cookies are installed through the Site by third parties, please refer to the respective privacy policies indicated in the tables above.

How to issue and revoke consent to the installation of profiling cookies

Profiling cookies will be installed on your devices only with prior consent, expressed by selecting the "Accept all cookies" button within the banner containing the brief information or by selecting "Manage preferences", in which it is possible to manage cookies separately (both by selecting and deselecting them) for the purposes indicated. Consent to the use of cookies is recorded with a special "technical cookie".

You can always change your choice and, in particular, revoke the consent previously given, by clicking on "Cookie settings" at the bottom of each page of the Site.

It is understood that where the user clicks on "Technical cookies only", profiling cookies will not be installed.

Users can still express their options on cookies also through the settings of the browser used. Even if the web browser used by the user is set to automatically accept cookies, the latter can change the default configuration through the settings menu, deleting and / or removing all or some cookies, blocking the sending of cookies or limiting it to certain sites. Disabling, blocking cookies or deleting them could compromise the optimal use of some areas of the Site or prevent some features of the same, as well as affect the operation of third-party services. Below are the links to the guides for managing cookies of the main browsers:

Microsoft Internet Explorer
Microsoft Edge
Google Chrome
Mozilla Firefox
Safari
Opera

For browsers other than those listed above, it is necessary to consult the relevant guide to identify how to manage cookies.

The rights of data subjects

In relation to the processing of personal data carried out by the Data Controller, the interested party, in addition to what is indicated in the previous paragraph, may exercise the rights referred to in Articles. from 15 to 22 of the GDPR, where applicable, and, in particular, you can request access to the data concerning you and to the information referred to in art. 15 (purpose of the processing, categories of personal data, etc.), their cancellation in the cases provided for by art. 17, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18, in addition to data portability (i.e. to receive the data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another holder without hindrance) in the event that the processing is based on consent or contract and is carried out with automated tools.

To exercise the rights, the interested party can contact the Data Controller at the contact points indicated in par. 1.

The data subject shall have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which he or she habitually resides or works or in the State where the alleged infringement occurred.