This Privacy Policy is made pursuant to Article 13 of European Regulation No. 679/2016 and applies exclusively to all Data collected through the Website Gossip.al. This Privacy Policy is subject to updates that will be posted on the Website on a timely basis. This Privacy Policy, together with the Terms and Conditions, any other documents referred to in it and the Cookie Policy, establish the basis on which the Data Subject’s Personal Data will be processed.
Data Controller.
The Data Controller of the Data collected from this Website is Wolf & Shark Shpk with registered office in Tirana, Rruga Artan Lenja 13-1, Vila 1 kateshe, kati 1, 1001 , Tirane, Albania, NUIS: M32017028V
e-mail: info@tiranamagazine.al
Personal Data
Personal Data means any information concerning an identified or identifiable natural person (Data Subject). An identifiable person is any natural person who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, one or more characteristic elements of his/her physical identity.
Category of Personal Data Processed
Among the Personal Data processed by this Website, either independently or through third parties, are Common Data such as: Cookies, Usage Data, first name, last name, email, telephone, Tax Data useful for purchase.
Methods of Processing Personal Data
The Personal Data provided or acquired will be subject to Treatment based on the principles of fairness, lawfulness, transparency and protection of confidentiality in accordance with current regulations. The Data Controller processes Users’ Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The Processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.
Purpose of the Processing of Personal Data and Legal Basis.
Personal Data may be collected autonomously by the Data Controller or through third parties. In this case, the computer systems and software procedures in charge of the operation of this Website acquire certain Personal Data of the Users, of a technical-informatics nature (e.g. IP address, type of browser used, operating system, domain name and addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal operation of the Internet. Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.
The Data that the Data Subject chooses to voluntarily provide will be processed in compliance with the conditions of lawfulness ex art. 6 GDPR and will be processed to allow the Website to provide its services, as well as for the Purposes indicated below and will be kept for the time necessary for the fulfillment of the aforementioned Purposes.
The Purposes of the processing are:
(a) Information and pre-contractual fulfillment.
The Data will be processed in order to be contacted or follow up on specific requests made to the Data Controller by the Data Subject for communications of an informational nature and/or purchase interest regarding the Services of the same Data Controller, through e-mail messages or filling out the Contact Form and other communication tools such as telephone or instant messaging WhatsApp Business and live chat.
Legal basis: this processing is optional and based on the consent of the Data Subject, however, the provision of the Data is necessary for the pursuit of the indicated purpose.
Data retention period: 60 days, unless consent is revoked.
b) Processing necessary in the context of a contract.
The Data will be processed in order to fulfill the obligations arising from the contract entered into between the Data Subject and the Data Controller for the sale of the Services on the Website, to contact the Data Subject in relation to the Contract and for the management of the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and termination of the Contract itself, as well as for the purposes of the registration procedure aimed at purchasing and using the Services of the Data Controller.
Legal basis: this processing is necessary for the performance of the contract to which the Data Subject is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject.
Period of data retention: 10 (ten) years or different legal obligation.
c) Fulfillment of any obligations under applicable laws.
The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related rules, business customs and tax/fiscal matters, including also for the purposes provided for by the anti-money laundering legislation Legislative Decree 231/2007 and subsequent amendments.
Legal basis: this processing is necessary to fulfill a legal obligation to which the Data Controller is subject.
Period of data retention: 10 (ten) years or different legal obligation.
d) Softspam
The Data will be processed to allow the Data Controller to send by e-mail to the Data Subject commercial and promotional communications concerning Products and/or Services similar to the Products/Services being sold without the need for the express and prior consent of the Data Subject, as provided for in Article 130, paragraph 4, Privacy Code as amended by Legislative Decree no. 101 of 2018, and provided that the Data Subject does not exercise the right to object.
Legal basis: this processing is based on the legitimate interest of the Data Controller in accordance with Article 6(F) and Recital No. 47 of the GDPR.
Data retention period: until the Data Subject objects.
e) Direct Marketing.
The Data will be processed for direct sales of Products/Services, market research, sending of communications and promotional, commercial and advertising material or inherent to initiatives and events, through newsletters, e-mail, SMS, Whatsapp, Chat, Direct Messaging from social media, social networks or through phone calls, paper mail and other informative material.
Legal basis: this processing is based on the consent freely expressed by the Data Subject pursuant to Article 6(1)(A) of the GDPR.
Period of data retention: until the consent is revoked
f) Statistics
The Data will be processed to perform statistical analysis on aggregated and anonymous data to analyze the behavior of the Data Subject in order to improve the products and services provided by the Data Controller as well as to meet the Data Subject’s expectations.
Legal basis: this processing is based on the consent freely given by the Data Subject.
Data Retention Period: until the consent is revoked by the Data Subject.
g) Profiling.
Data will be processed for the analysis and evaluation of interests, habits, consumption choices, including the creation of profiles in order to be able to send personalized informative and promotional material about the Services/Products offered by the Data Controller.
Legal basis: this processing is based on the consent freely expressed by the Data Subject in accordance with Article 6(1)(A) of the GDPR.
Data Retention Period: until the consent is revoked.
Communication of Data
In addition to the Data Controller, in some cases, the Data may be accessed by:
(a) categories of specially trained Data Processors involved in the organization of the Website (administrative, sales, marketing, legal, system administrators);
b) external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller ex art. 28 GDPR. The updated list of Data Processors, if appointed, can always be requested from the Data Controller;
c) public or private entities that can access the Data in compliance with legal obligations;
d) subjects that perform accessory and instrumental tasks with respect to the activity of the Data Controller;
Timing of the Processing
As expressly provided by Art. 5, co. 1, letter e) of the GDPR, the Data are kept for the time necessary for the Processing of the same in relation to the performance of the service requested by the Data Subject, or required by the Purposes described above in this document.
At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, deletion, rectification and portability of the Data can no longer be exercised
Cookies
This Website uses cookies. Cookies are small text files that can be used by Websites to make the experience more efficient for the Data Subject and to personalize content and ads, provide social network features, and analyze traffic. Cookie Policy
Place of Processing and Transfer of Data Abroad
The Data is processed at the operational headquarters of the Data Controller. For further information you may contact the Data Controller. The Data may be processed by individuals and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and based in EU or non-EU member countries. In the event that Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate protection of the Data.
Exercise of data subject’s rights
The Data Subject has the right to exercise the faculties provided for in Articles 7, 15-22 of European Reg. 679/2016. In particular, he/she has the right to revoke his/her consent at any time and, upon simple request to the Data Controller, he/she may request access to the Personal Data, receive the Personal Data provided to the Data Controller and where possible transmit it to another Data Controller without hindrance (so-called portability), obtain the updating, limitation of the processing, rectification of the Data and the deletion of the Data processed in breach of the regulations in force. He/she has the right, for legitimate reasons, to object to the Processing of Personal Data concerning him/her and to the Processing for purposes of sending advertising material, direct sales and for carrying out market research. He/she also has the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data or to take appropriate legal action. Data subjects may exercise their rights by contacting the Data Controller by e-mail at: info@wolfandshark.com
Tools used for the Processing of Personal Data
CONTACT FORM
The Data Subject, by filling in the Contact Form with his/her Data, consents to their use to respond to requests for information, or any other purpose indicated by the header of the form. Personal Data collected through Contact Form: Email, Name, and Phone.
Contact Form 7 (Rock Lobster LLC)
is a Form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Various types of Data as specified by the Privacy Policy of the service. Place of Processing: Japan – Privacy Policy
OTHER CONTACT TOOLS
WhatsApp Business
WhatsApp Business is an instant messaging service provided by WhatsApp Ireland Limited. For the purposes of the processing methods, reference is also made to the WhatsApp Business Data Processing Terms found at the following link: https://www.whatsapp.com/legal/business-data-processing-terms/. The Data Subject’s data will transit in WhatsApp Business services according to the terms that WhatsApp reports in the document “WhatsApp Business Terms of Service” at the following link: https://www.whatsapp.com/legal/business-terms/ . Personal Data Collected: phone number, email, Usage Data, Cookie. Place of Processing: Ireland- Privacy Policy
Chat
To handle inquiries with users this website uses a Chat service provided by:
Tawk.to (tawk.to Inc)
Tawk.to is an online messaging service that allows to chat with Users visiting the Website, monitor the progress of conversations, personalize the messages displayed by Users, ban Users. Place of Processing: USA – Privacy Policy
EMAIL ADDRESS MANAGEMENT
These services enable the management of a database of email contacts, telephone contacts or contacts of any other kind used to communicate with the Data Subject. These services may also allow for the collection of Data related to the date and time of viewing of messages by the Data Subject, as well as the Data Subject’s interaction with them, such as information about clicks on links included in messages.
Newsletter
By registering for the newsletter, the Data Subject’s email address is automatically added to a list of contacts to whom email messages containing information, including information of a commercial and promotional nature, relating to this Website may be sent. The Data Subject’s email address may also be added to this list as a result of registering with this Website or after making a purchase. The Interested Party may choose at any time to unsubscribe from the newsletter by clicking on a specific button they will find within the emails. After clicking the unsubscribe button the Data Subject’s Data will be deleted immediately from the “email marketing” software. Personal Data collected: email and Name. This Website uses the newsletter service provided by:
Mailchimp (The Rocket Science Group).
Mailchimp is a service that organizes and analyzes newsletter distribution. In case a Data Subject does not want his/her Data to be handled by Mailchimp, it will be necessary for him/her to unsubscribe from the newsletter. For this purpose, a link is provided in each newsletter sent. Personal Data collected: email and name. Place of Processing: USA – Privacy Policy
SendinBlue (SendinBlue SAS).
SendinBlue is a service that organizes and analyzes newsletter distribution. In case a Data Subject does not want their Data to be handled by SendinBlue, it will be necessary for them to unsubscribe from the newsletter. For this purpose, a link is provided in each newsletter sent. Personal Data Collected: Email and Name. Place of Processing: FRANCE – Privacy Policy
SECURITY MEASURES TAKEN
This Website, to secure the moment when Personal Data is entered, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, the transactions and data that are transmitted in the Websites take place with maximum security and the content of the communication is not read or manipulated in any way by third parties.
reCAPTCHA
This Website uses reCAPTCHA which is a service subject to the privacy policy
and the terms and conditions of use of Google.
REGISTRATION
With the registration service, the Data Subject allows the Website to identify him/her and give him/her access to dedicated services.
Registration and authentication services can also take place with the help of third parties. In this case, the application may access some Data stored by the third-party service used for registration and identification.
Simple Direct Registration
The Interested Party registers directly on the site by filling in the Form and providing their Data.
Indirect Registration
The Data Subject logs in to the website via:
Facebook Connect (Meta Platforms Inc.).
Facebook Connect is a service provided by Meta Platforms Inc. that facilitates and integrates the site’s connection with the social network. This Website may require certain permissions from Facebook that allow it to perform actions with the Data Subject’s Facebook account and collect information, including Personal Data, from it. For more information on the following permissions, the Data Subject may refer to Facebook’s Privacy Policy.
Google Account Access (Google Ireland Limited).
This service, offered by Google Ireland Limited, allows this Website to connect with the Data Subject’s Google Account. Personal Data collected: Various types of Data as specified by the Privacy Policy of the service. Place of Processing: Ireland – Privacy Policy
STATISTICS
Statistics services allow the Data Controller exclusively to monitor and analyze traffic data and are used to track the behavior of the Data Subject. This Website uses the following services:
Google Analytics (Google Ireland Limited)
Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process this information on Google’s behalf. IP address anonymization is enabled on this site. The IP address transmitted by your browser for purposes related to Google Analytics will not be merged with other data already held by Google.
At the following link https://tools.google.com/dlpage/gaoptout?hl=it the browser add-on for deactivating Google Analytics is made available by Google. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
Google Search Console (Google Ireland Limited)
is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process this information on Google’s behalf. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
Hotjar (Hotjar Ltd)
Hotjar is a statistics service that allows the Data Controller to monitor its customers’ conversions and record sessions. A Do Not Track browser add-on is made available by Hotjar at the following link https://www.hotjar.com/privacy/do-not-track/. Personal Data Collected: Cookies; Usage Data. Place of Processing: Malta – Privacy Policy
Clarity (Microsoft Ireland Operations Limited)
Clarity is a service that enables the Data Controller to track its customers’ conversions. Personal Data Collected: Cookies; Usage Data. Place of Processing: Ireland – Privacy Policy
Smartlook (Smartlook.com s.r.o.)
Smartlook is a service that allows the Data Controller to monitor the conversions of its customers. Personal Data Collected: Cookies; Usage Data. Place of Processing: Czech Republic – Privacy Policy
TAG MANAGEMENT
Google Tag manager (Google Ireland Limited)
Google Tag manager is a service that allows you to manage and monitor all third-party Tags on the Website to get information about the interest shown by Users towards the Website itself and consequently the quality of the content. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
INTERACTION WITH SOCIAL NETWORKS
These services enable interactions with social networks directly from the pages of this Website. Interactions and information captured by this Website are in each case subject to the Data Subject’s privacy settings related to each social network. In the event that a social network interaction service is installed, it is possible that, even if Users do not use the service, it will collect traffic data related to the pages where it is installed.
Facebook (Meta Platforms, Inc.)
Facebook buttons are services for interaction with the social network Facebook, provided by Meta Platforms, Inc. Personal data collected: cookies and usage data. Place of processing: Ireland – Privacy Policy
Instagram (Meta Platforms, Inc.)
Instagram buttons are interaction services with the social network Instagram, provided by Meta Platforms, Inc. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
LinkedIn (LinkedIn Ireland Unlimited Company)
LinkedIn buttons are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
Twitter (Twitter International Company)
Twitter buttons are services for interaction with the social network Twitter, provided by Twitter, Inc. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy
Telegram (Telegram UK Holdings Ltd)
Telegram buttons are communication interaction services provided by Telegram. Personal Data Collected: Cookies and Usage Data. Place of processing: UK- Privacy Policy
Tik Tok (TikTok Technology Limited)
Tik Tok buttons are social network interaction services provided by TikTok Technology Limited. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy
REMARKETING AND RETARGETING
These services allow this Website to communicate, optimize, and serve advertisements based on a Data Subject’s past use of this Website. This activity is done through tracking of Usage Data and the use of Cookies. This Website uses the following services:
Facebook Remarketing (Meta Platforms, Inc.).
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which links this Website’s activity with the Facebook advertising network. This Website makes use of the Facebook Pixel tool in order to measure conversions. Thanks to the Facebook Pixel you can understand the actions that people perform on the Website. The Data that is collected can be used to:
- ensure that advertisements are shown to the right people;
- create audience groups to target ads to;
- take advantage of the additional advertising tools of the platform on which you advertise.
The information collected is anonymous to the operators of this Site and cannot be used to identify an individual Data Subject. However, the information is saved and analyzed by Facebook, which could link the action back to an individual profile and use this information for internal Facebook advertising purposes, as outlined by Facebook’s privacy policy. This will allow Facebook to show advertisements on both Facebook and third-party sites. The Site Owner has no control over how this data is used. For more information on how users can protect their privacy, please refer to Facebook’s Privacy Policy.
Google ADS
Google ADS is a service provided by Google Ireland Limited that links this Web Site with Google’s advertising network. This Web Site makes use of the Remarketing functionality of Google Analytics combined with the cross-device adaptability of Google ADS. This functionality makes it possible to connect target groups for promotional campaigns created by the Marketing function of Google Analytics with the adaptability to different Google ADS devices. This makes it possible to show advertisements based on the Respondent’s personal interests, identified through an analysis of the Respondent’s web behavior, whether on a mobile device or other devices. You can permanently disable targeting and remarketing features by disabling the “personalized advertising” feature in your Google account. To do so, simply follow this link: https://www.google.com/settings/ads/onweb/ Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company).
This Website uses a script named “LinkedIn Insight Tag.” The LinkedIn Insight Tag adds a cookie to Users’ browsers each time they visit this Website. Using this tool, the Owner can record when a LinkedIn member performs a certain action on the Website (such as booking a service or leaving email). This tool is used for collecting statistical data to measure the effectiveness of paid advertising. Using the LinkedIn Insight Tag, one can understand the actions that people perform on the Website. The Data collected is used to: make sure ads are shown to the right people; create audience groups to target ads to; take advantage of the platform’s additional advertising tools on you advertise. This Website uses the LinkedIn Insight Tag to perform “remarketing” and “Retargeting” activities; thanks to these activities, cookies that the Data Subject leaves on the Website are used, but without identifying him or her. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland- Privacy Policy
Instagram Remarketing (Meta Platforms, Inc.).
Instagram Remarketing is a Remarketing and Behavioral Targeting service provided by Meta Platforms, Inc. that connects this Website’s activity with the Instagram advertising network. This Website makes use of the Pixel tool in order to measure conversions and understand the actions people perform on the Website. The information collected is anonymous to the operators of this Website and cannot be used to identify an individual Data Subject. However, the information is saved and analyzed by Facebook, which could link the action back to an individual profile and use this information for internal Facebook advertising purposes, as outlined by Facebook’s privacy policy. For more information on how users can protect their privacy, we refer to Instagram’s Privacy Policy.
TikTok Ads (TikTok Technology Limited)
TikTok Ads is a Remarketing and Behavioral Targeting service provided by (TikTok Technology Limited) that links the activity of this Website with the TikTok advertising network. This Website makes use of the Pixel Tracking tool in order to measure conversions and understand the actions people perform on the Website. For more information on how users can protect their privacy, please refer to TikTok’s Privacy Policy.
Twitter ADS (Twitter International Company)
Twitter Ads is an advertising service offered by Twitter International Company. Twitter Ads allows advertisers to purchase promoted tweets to reach a specific target audience, identified based on the specific products/services offered by the advertiser. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy
CONTENT ON EXTERNAL PLATFORMS
These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them.
Where such a service is installed, it is possible that, even if Users do not use the service, it may collect Traffic Data related to the pages where it is installed.
This Website uses the following.
Google Maps
Google Maps is a map display service operated by Google that allows this Website to integrate such content within its pages. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy
Vimeo (Vimeo Inc.).
Vimeo is a video content display service operated by Vimeo Inc. that allows this Application to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: USA – Privacy Policy
Youtube (Google Ireland Limited)
Youtube is a video content display service operated by Google that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy
Google My Business (Google Ireland Limited)
Google My Business is a business promotion service offered by Google Ireland Limited. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland – Privacy Policy
PAYMENT MANAGEMENT
Payment processing services enable this Website to process payments by credit card, bank transfer or other means. The Data used for payment is acquired directly from the operator of the requested payment service without being processed in any way by this Website. Some of these services may also allow the scheduled sending of messages to the Data Subject, such as emails containing invoices or notifications regarding payment. This Website uses the following services:
PayPal (Paypal Europe S.à.r.l. et Cie, S.C.A Inc.).
PayPal is a payment service provided by PayPal Europe S.à.r.l. et Cie, S.C.A Inc. that allows the Data Subject to make online payments using their PayPal credentials. Personal Data collected: Cookies and various types of Data as specified by the privacy policy of the service. Place of processing: Luxembourg – Privacy Policy
Stripe (Stripe Payments Europe Ltd.).
Stripe is a payment service provided by Stripe Payments Europe, Ltd. that enables the Data Subject to make online donations or payments using their Stripe credentials. Personal Data collected: Various types of Data as specified by the privacy policy of the service. Place of processing: USA – Privacy Policy
Changes to this Privacy Policy
The Data Controller of wolfandshark.com reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as reference the date of last modification indicated at the bottom. If you do not accept the changes made to this Privacy Policy, you must cease using this Website and may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that point. The Data Controller is not responsible for updating all links displayed in this Privacy Policy, so whenever a link is not working and/or updated, Users acknowledge and agree that they should always refer to the document and/or section of the websites referred to by that link.
Privacy Policy updated as of August 2023
This Privacy Policy is made pursuant to Article 13 of European Regulation No. 679/2016 and applies exclusively to all Data collected through the Website
. This Privacy Policy is subject to updates that will be posted on the Website on a timely basis. This Privacy Policy, together with the Terms and Conditions, any other documents referred to in it and the Cookie Policy, establish the basis on which the Data Subject’s Personal Data will be processed.
Data Controller.
The Data Controller of the Data collected from this Website is Wolf & Shark Shpk with registered office in Tirana, Rruga Artan Lenja 13-1, Vila 1 kateshe, kati 1, 1001 , Tirane, Albania, e-mail: info@wolfandshark.com
Personal Data
Personal Data means any information concerning an identified or identifiable natural person (Data Subject). An identifiable person is any natural person who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, one or more characteristic elements of his/her physical identity.
Category of Personal Data Processed
Among the Personal Data processed by this Website, either independently or through third parties, are Common Data such as: Cookies, Usage Data, first name, last name, email, telephone, Tax Data useful for purchase.
Methods of Processing Personal Data
The Personal Data provided or acquired will be subject to Treatment based on the principles of fairness, lawfulness, transparency and protection of confidentiality in accordance with current regulations. The Data Controller processes Users’ Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The Processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.
Purpose of the Processing of Personal Data and Legal Basis.
Personal Data may be collected autonomously by the Data Controller or through third parties. In this case, the computer systems and software procedures in charge of the operation of this Website acquire certain Personal Data of the Users, of a technical-informatics nature (e.g. IP address, type of browser used, operating system, domain name and addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal operation of the Internet. Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.
The Data that the Data Subject chooses to voluntarily provide will be processed in compliance with the conditions of lawfulness ex art. 6 GDPR and will be processed to allow the Website to provide its services, as well as for the Purposes indicated below and will be kept for the time necessary for the fulfillment of the aforementioned Purposes.
The Purposes of the processing are:
(a) Information and pre-contractual fulfillment.
The Data will be processed in order to be contacted or follow up on specific requests made to the Data Controller by the Data Subject for communications of an informational nature and/or purchase interest regarding the Services of the same Data Controller, through e-mail messages or filling out the Contact Form and other communication tools such as telephone or instant messaging WhatsApp Business and live chat.
Legal basis: this processing is optional and based on the consent of the Data Subject, however, the provision of the Data is necessary for the pursuit of the indicated purpose.
Data retention period: 60 days, unless consent is revoked.
b) Processing necessary in the context of a contract.
The Data will be processed in order to fulfill the obligations arising from the contract entered into between the Data Subject and the Data Controller for the sale of the Services on the Website, to contact the Data Subject in relation to the Contract and for the management of the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and termination of the Contract itself, as well as for the purposes of the registration procedure aimed at purchasing and using the Services of the Data Controller.
Legal basis: this processing is necessary for the performance of the contract to which the Data Subject is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject.
Period of data retention: 10 (ten) years or different legal obligation.
c) Fulfillment of any obligations under applicable laws.
The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related rules, business customs and tax/fiscal matters, including also for the purposes provided for by the anti-money laundering legislation Legislative Decree 231/2007 and subsequent amendments.
Legal basis: this processing is necessary to fulfill a legal obligation to which the Data Controller is subject.
Period of data retention: 10 (ten) years or different legal obligation.
d) Softspam
The Data will be processed to allow the Data Controller to send by e-mail to the Data Subject commercial and promotional communications concerning Products and/or Services similar to the Products/Services being sold without the need for the express and prior consent of the Data Subject, as provided for in Article 130, paragraph 4, Privacy Code as amended by Legislative Decree no. 101 of 2018, and provided that the Data Subject does not exercise the right to object.
Legal basis: this processing is based on the legitimate interest of the Data Controller in accordance with Article 6(F) and Recital No. 47 of the GDPR.
Data retention period: until the Data Subject objects.
e) Direct Marketing.
The Data will be processed for direct sales of Products/Services, market research, sending of communications and promotional, commercial and advertising material or inherent to initiatives and events, through newsletters, e-mail, SMS, Whatsapp, Chat, Direct Messaging from social media, social networks or through phone calls, paper mail and other informative material.
Legal basis: this processing is based on the consent freely expressed by the Data Subject pursuant to Article 6(1)(A) of the GDPR.
Period of data retention: until the consent is revoked
f) Statistics
The Data will be processed to perform statistical analysis on aggregated and anonymous data to analyze the behavior of the Data Subject in order to improve the products and services provided by the Data Controller as well as to meet the Data Subject’s expectations.
Legal basis: this processing is based on the consent freely given by the Data Subject.
Data Retention Period: until the consent is revoked by the Data Subject.
g) Profiling.
Data will be processed for the analysis and evaluation of interests, habits, consumption choices, including the creation of profiles in order to be able to send personalized informative and promotional material about the Services/Products offered by the Data Controller.
Legal basis: this processing is based on the consent freely expressed by the Data Subject in accordance with Article 6(1)(A) of the GDPR.
Data Retention Period: until the consent is revoked.
Communication of Data
In addition to the Data Controller, in some cases, the Data may be accessed by:
(a) categories of specially trained Data Processors involved in the organization of the Website (administrative, sales, marketing, legal, system administrators);
b) external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller ex art. 28 GDPR. The updated list of Data Processors, if appointed, can always be requested from the Data Controller;
c) public or private entities that can access the Data in compliance with legal obligations;
d) subjects that perform accessory and instrumental tasks with respect to the activity of the Data Controller;
Timing of the Processing
As expressly provided by Art. 5, co. 1, letter e) of the GDPR, the Data are kept for the time necessary for the Processing of the same in relation to the performance of the service requested by the Data Subject, or required by the Purposes described above in this document.
At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, deletion, rectification and portability of the Data can no longer be exercised
Cookies
This Website uses cookies. Cookies are small text files that can be used by Websites to make the experience more efficient for the Data Subject and to personalize content and ads, provide social network features, and analyze traffic. Cookie Policy
Place of Processing and Transfer of Data Abroad
The Data is processed at the operational headquarters of the Data Controller. For further information you may contact the Data Controller. The Data may be processed by individuals and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and based in EU or non-EU member countries. In the event that Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate protection of the Data.
Exercise of data subject’s rights
The Data Subject has the right to exercise the faculties provided for in Articles 7, 15-22 of European Reg. 679/2016. In particular, he/she has the right to revoke his/her consent at any time and, upon simple request to the Data Controller, he/she may request access to the Personal Data, receive the Personal Data provided to the Data Controller and where possible transmit it to another Data Controller without hindrance (so-called portability), obtain the updating, limitation of the processing, rectification of the Data and the deletion of the Data processed in breach of the regulations in force. He/she has the right, for legitimate reasons, to object to the Processing of Personal Data concerning him/her and to the Processing for purposes of sending advertising material, direct sales and for carrying out market research. He/she also has the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data or to take appropriate legal action. Data subjects may exercise their rights by contacting the Data Controller by e-mail at: info@wolfandshark.com
Tools used for the Processing of Personal Data
CONTACT FORM
The Data Subject, by filling in the Contact Form with his/her Data, consents to their use to respond to requests for information, or any other purpose indicated by the header of the form. Personal Data collected through Contact Form: Email, Name, and Phone.
Contact Form 7 (Rock Lobster LLC)
is a Form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Various types of Data as specified by the Privacy Policy of the service. Place of Processing: Japan – Privacy Policy
OTHER CONTACT TOOLS
WhatsApp Business
WhatsApp Business is an instant messaging service provided by WhatsApp Ireland Limited. For the purposes of the processing methods, reference is also made to the WhatsApp Business Data Processing Terms found at the following link: . The Data Subject’s data will transit in WhatsApp Business services according to the terms that WhatsApp reports in the document “WhatsApp Business Terms of Service” at the following link: . Personal Data Collected: phone number, email, Usage Data, Cookie. Place of Processing: Ireland-
Chat
To handle inquiries with users this website uses a Chat service provided by:
Tawk.to (tawk.to Inc)
Tawk.to is an online messaging service that allows to chat with Users visiting the Website, monitor the progress of conversations, personalize the messages displayed by Users, ban Users. Place of Processing: USA –
EMAIL ADDRESS MANAGEMENT
These services enable the management of a database of email contacts, telephone contacts or contacts of any other kind used to communicate with the Data Subject. These services may also allow for the collection of Data related to the date and time of viewing of messages by the Data Subject, as well as the Data Subject’s interaction with them, such as information about clicks on links included in messages.
Newsletter
By registering for the newsletter, the Data Subject’s email address is automatically added to a list of contacts to whom email messages containing information, including information of a commercial and promotional nature, relating to this Website may be sent. The Data Subject’s email address may also be added to this list as a result of registering with this Website or after making a purchase. The Interested Party may choose at any time to unsubscribe from the newsletter by clicking on a specific button they will find within the emails. After clicking the unsubscribe button the Data Subject’s Data will be deleted immediately from the “email marketing” software. Personal Data collected: email and Name. This Website uses the newsletter service provided by:
Mailchimp (The Rocket Science Group).
Mailchimp is a service that organizes and analyzes newsletter distribution. In case a Data Subject does not want his/her Data to be handled by Mailchimp, it will be necessary for him/her to unsubscribe from the newsletter. For this purpose, a link is provided in each newsletter sent. Personal Data collected: email and name. Place of Processing: USA –
SendinBlue (SendinBlue SAS).
SendinBlue is a service that organizes and analyzes newsletter distribution. In case a Data Subject does not want their Data to be handled by SendinBlue, it will be necessary for them to unsubscribe from the newsletter. For this purpose, a link is provided in each newsletter sent. Personal Data Collected: Email and Name. Place of Processing: FRANCE –
SECURITY MEASURES TAKEN
This Website, to secure the moment when Personal Data is entered, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, the transactions and data that are transmitted in the Websites take place with maximum security and the content of the communication is not read or manipulated in any way by third parties.
reCAPTCHA
This Website uses reCAPTCHA which is a service subject to the and the
of use of Google.
REGISTRATION
With the registration service, the Data Subject allows the Website to identify him/her and give him/her access to dedicated services.
Registration and authentication services can also take place with the help of third parties. In this case, the application may access some Data stored by the third-party service used for registration and identification.
Simple Direct Registration
The Interested Party registers directly on the site by filling in the Form and providing their Data.
Indirect Registration
The Data Subject logs in to the website via:
Facebook Connect (Meta Platforms Inc.).
Facebook Connect is a service provided by Meta Platforms Inc. that facilitates and integrates the site’s connection with the social network. This Website may require certain permissions from Facebook that allow it to perform actions with the Data Subject’s Facebook account and collect information, including Personal Data, from it. For more information on the following permissions, the Data Subject may refer to
.
Google Account Access (Google Ireland Limited).
This service, offered by Google Ireland Limited, allows this Website to connect with the Data Subject’s Google Account. Personal Data collected: Various types of Data as specified by the Privacy Policy of the service. Place of Processing: Ireland –
STATISTICS
Statistics services allow the Data Controller exclusively to monitor and analyze traffic data and are used to track the behavior of the Data Subject. This Website uses the following services:
Google Analytics (Google Ireland Limited)
Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process this information on Google’s behalf. IP address anonymization is enabled on this site. The IP address transmitted by your browser for purposes related to Google Analytics will not be merged with other data already held by Google.
At the following link the browser add-on for deactivating Google Analytics is made available by Google. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
Google Search Console (Google Ireland Limited)
is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its advertising network. Google may also transfer this information to third parties where required to do so by law or where such third parties process this information on Google’s behalf. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
Hotjar (Hotjar Ltd)
Hotjar is a statistics service that allows the Data Controller to monitor its customers’ conversions and record sessions. A Do Not Track browser add-on is made available by Hotjar at the following link . Personal Data Collected: Cookies; Usage Data. Place of Processing: Malta –
Clarity (Microsoft Ireland Operations Limited)
Clarity is a service that enables the Data Controller to track its customers’ conversions. Personal Data Collected: Cookies; Usage Data. Place of Processing: Ireland –
Smartlook (Smartlook.com s.r.o.)
Smartlook is a service that allows the Data Controller to monitor the conversions of its customers. Personal Data Collected: Cookies; Usage Data. Place of Processing: Czech Republic –
TAG MANAGEMENT
Google Tag manager (Google Ireland Limited)
Google Tag manager is a service that allows you to manage and monitor all third-party Tags on the Website to get information about the interest shown by Users towards the Website itself and consequently the quality of the content. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
INTERACTION WITH SOCIAL NETWORKS
These services enable interactions with social networks directly from the pages of this Website. Interactions and information captured by this Website are in each case subject to the Data Subject’s privacy settings related to each social network. In the event that a social network interaction service is installed, it is possible that, even if Users do not use the service, it will collect traffic data related to the pages where it is installed.
Facebook (Meta Platforms, Inc.)
Facebook buttons are services for interaction with the social network Facebook, provided by Meta Platforms, Inc. Personal data collected: cookies and usage data. Place of processing: Ireland –
Instagram (Meta Platforms, Inc.)
Instagram buttons are interaction services with the social network Instagram, provided by Meta Platforms, Inc. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
LinkedIn (LinkedIn Ireland Unlimited Company)
LinkedIn buttons are interaction services with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
Twitter (Twitter International Company)
Twitter buttons are services for interaction with the social network Twitter, provided by Twitter, Inc. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland –
Telegram (Telegram UK Holdings Ltd)
Telegram buttons are communication interaction services provided by Telegram. Personal Data Collected: Cookies and Usage Data. Place of processing: UK-
Tik Tok (TikTok Technology Limited)
Tik Tok buttons are social network interaction services provided by TikTok Technology Limited. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland –
REMARKETING AND RETARGETING
These services allow this Website to communicate, optimize, and serve advertisements based on a Data Subject’s past use of this Website. This activity is done through tracking of Usage Data and the use of Cookies. This Website uses the following services:
Facebook Remarketing (Meta Platforms, Inc.).
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which links this Website’s activity with the Facebook advertising network. This Website makes use of the Facebook Pixel tool in order to measure conversions. Thanks to the Facebook Pixel you can understand the actions that people perform on the Website. The Data that is collected can be used to:
- ensure that advertisements are shown to the right people;
- create audience groups to target ads to;
- take advantage of the additional advertising tools of the platform on which you advertise.
The information collected is anonymous to the operators of this Site and cannot be used to identify an individual Data Subject. However, the information is saved and analyzed by Facebook, which could link the action back to an individual profile and use this information for internal Facebook advertising purposes, as outlined by Facebook’s privacy policy. This will allow Facebook to show advertisements on both Facebook and third-party sites. The Site Owner has no control over how this data is used. For more information on how users can protect their privacy, please refer to
Google ADS
Google ADS is a service provided by Google Ireland Limited that links this Web Site with Google’s advertising network. This Web Site makes use of the Remarketing functionality of Google Analytics combined with the cross-device adaptability of Google ADS. This functionality makes it possible to connect target groups for promotional campaigns created by the Marketing function of Google Analytics with the adaptability to different Google ADS devices. This makes it possible to show advertisements based on the Respondent’s personal interests, identified through an analysis of the Respondent’s web behavior, whether on a mobile device or other devices. You can permanently disable targeting and remarketing features by disabling the “personalized advertising” feature in your Google account. To do so, simply follow this link: Personal Data Collected: Cookies and Usage Data. Place of processing: Ireland –
LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company).
This Website uses a script named “LinkedIn Insight Tag.” The LinkedIn Insight Tag adds a cookie to Users’ browsers each time they visit this Website. Using this tool, the Owner can record when a LinkedIn member performs a certain action on the Website (such as booking a service or leaving email). This tool is used for collecting statistical data to measure the effectiveness of paid advertising. Using the LinkedIn Insight Tag, one can understand the actions that people perform on the Website. The Data collected is used to: make sure ads are shown to the right people; create audience groups to target ads to; take advantage of the platform’s additional advertising tools on you advertise. This Website uses the LinkedIn Insight Tag to perform “remarketing” and “Retargeting” activities; thanks to these activities, cookies that the Data Subject leaves on the Website are used, but without identifying him or her. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland-
Instagram Remarketing (Meta Platforms, Inc.).
Instagram Remarketing is a Remarketing and Behavioral Targeting service provided by Meta Platforms, Inc. that connects this Website’s activity with the Instagram advertising network. This Website makes use of the Pixel tool in order to measure conversions and understand the actions people perform on the Website. The information collected is anonymous to the operators of this Website and cannot be used to identify an individual Data Subject. However, the information is saved and analyzed by Facebook, which could link the action back to an individual profile and use this information for internal Facebook advertising purposes, as outlined by Facebook’s privacy policy. For more information on how users can protect their privacy, we refer to
.
TikTok Ads (TikTok Technology Limited)
TikTok Ads is a Remarketing and Behavioral Targeting service provided by (TikTok Technology Limited) that links the activity of this Website with the TikTok advertising network. This Website makes use of the Pixel Tracking tool in order to measure conversions and understand the actions people perform on the Website. For more information on how users can protect their privacy, please refer to
Twitter ADS (Twitter International Company)
Twitter Ads is an advertising service offered by Twitter International Company. Twitter Ads allows advertisers to purchase promoted tweets to reach a specific target audience, identified based on the specific products/services offered by the advertiser. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland –
CONTENT ON EXTERNAL PLATFORMS
These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them.
Where such a service is installed, it is possible that, even if Users do not use the service, it may collect Traffic Data related to the pages where it is installed.
This Website uses the following.
Google Maps
Google Maps is a map display service operated by Google that allows this Website to integrate such content within its pages. Personal Data Collected: Cookies and Usage Data. Place of Processing: Ireland –
Vimeo (Vimeo Inc.).
Vimeo is a video content display service operated by Vimeo Inc. that allows this Application to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: USA –
Youtube (Google Ireland Limited)
Youtube is a video content display service operated by Google that allows this Website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland –
Google My Business (Google Ireland Limited)
Google My Business is a business promotion service offered by Google Ireland Limited. Personal Data collected: Cookies and Usage Data. Place of Processing: Ireland –
PAYMENT MANAGEMENT
Payment processing services enable this Website to process payments by credit card, bank transfer or other means. The Data used for payment is acquired directly from the operator of the requested payment service without being processed in any way by this Website. Some of these services may also allow the scheduled sending of messages to the Data Subject, such as emails containing invoices or notifications regarding payment. This Website uses the following services:
PayPal (Paypal Europe S.à.r.l. et Cie, S.C.A Inc.).
PayPal is a payment service provided by PayPal Europe S.à.r.l. et Cie, S.C.A Inc. that allows the Data Subject to make online payments using their PayPal credentials. Personal Data collected: Cookies and various types of Data as specified by the privacy policy of the service. Place of processing: Luxembourg –
Stripe (Stripe Payments Europe Ltd.).
Stripe is a payment service provided by Stripe Payments Europe, Ltd. that enables the Data Subject to make online donations or payments using their Stripe credentials. Personal Data collected: Various types of Data as specified by the privacy policy of the service. Place of processing: USA –
Changes to this Privacy Policy
The Data Controller of
reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as reference the date of last modification indicated at the bottom. If you do not accept the changes made to this Privacy Policy, you must cease using this Website and may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that point. The Data Controller is not responsible for updating all links displayed in this Privacy Policy, so whenever a link is not working and/or updated, Users acknowledge and agree that they should always refer to the document and/or section of the websites referred to by that link.
Privacy Policy updated as of August 2023
Copyright: Wolfandshark.com