Information on the processing of personal data

Below is the information for the processing of personal data in order to clarify to our users the type of data that is recorded during access and the related purposes of use

1. Data controller
The data controller within the meaning of the EU General Data Protection Regulation (GDPR), the national data protection laws of the Member States, as well as other relevant provisions is:

Bortolotto & C. S.r.l.
Casilina 1115
00133 Roma (RM)
Phone.: +39 06 200 4887
E-Mail: info@ciclibortolotto.it
Sito web: https://www.ciclibortolotto.it

This disclosure applies to the domains www.ciclibortolotto.it and www.bortolottocycle.uk and to the subdomains (hereinafter referred to as the CICLI BORTOLOTTO site).

2. Data Processing Principles
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, data such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behaviour. Information that is not likely (or only with a disproportionate effort) to be linked to your person, for example, anonymised information, does not constitute personal data. The processing of personal data (for example the collection, consultation, use, storage or transmission) must necessarily be based on a legal basis or on the user's consent. Personal data must be deleted when they are no longer necessary with respect to the purposes for which they were collected and the processing is not necessary for the fulfillment of a legal obligation. When processing personal data for certain offers, we inform you about the concrete procedures, the extent and purpose of the data processing, the legal basis for the processing and the duration of storage.

3. Processing of data for the use of the website

The personal data automatically transmitted by the user's browser to our servers is collected when accessing and using our website. By using the CICLI BORTOLOTTO site, the following data is collected, which is technically necessary to ensure its display, stability and security:

- IP address of the requesting computer,
- date and time of access,
- name and URL of the consulted file,
- website of origin (URL of the referrer),
- browser used, terminal used and, possibly, the operating system and the name of the user's service provider.

The processing of the data indicated is necessary for the preparation of the site and serves to protect the legitimate interest of CICLI BORTOLOTTO. The data mentioned is deleted if it is no longer required for displaying the website. The collection of data necessary for the preparation of the website and the storage of data is essential for the operation of the website. Consequently, the interested party has no right of opposition. Further storage takes place in cases prescribed by law.

4. Registration/user account

On our website CICLI BORTOLOTTO we offer the possibility to register by providing personal data.
With the processed data, we create an individual user account, with which certain contents and services such as an order summary, a list of preferred delivery addresses, message settings, etc. can be created. The user's e-mail address is processed for the purpose of sending new access data, in case of forgetting this e-mail, or for sending information that is directly related to the user account.
By specifying preferences within the message settings and areas of interest, the user also consents to the use of the specified e-mail address to send messages in accordance with the information provided. This consent can be revoked at any time by sending an email to privacy@ciclibortolotto.it.
After the first registration, it is mandatory to access the user account for future orders, as this allows CICLI BORTOLOTTO to assign the order directly to an existing account. Of course, the user is free to place all orders as a guest, but in doing so, he waives various services that can only be offered in the context of a customer account.
The following summary shows the personal data processed following registration:

- first name
- email address
- Country and language
- IP address
- sex
- VAT number

The following summary shows the type of personal data processed through indication in the user account or through orders associated with the customer account:

- address
- any different delivery addresses
- summary of orders
- message settings

The cancellation or modification of the registration on the CICLI BORTOLOTTO website determines the immediate cancellation of the data processed through the registration. Further storage takes place in cases prescribed by law.
The user can cancel the registration and modify the data concerning him at any time in the following way: by logging in and accessing the customer account or by sending a request to the e-mail address: privacy@ciclibortolotto.it.
However, if the data processed is necessary for the fulfillment of a contract or for the execution of pre-contractual measures, the early cancellation of the data is only possible if it does not conflict with the execution of contractual or legal obligations.

5. Purchase procedure

On our site we offer users the possibility to purchase goods by indicating their personal data. The necessary data, after being entered in an input mask, is transmitted to CICLI BORTOLOTTO and saved. The data is not passed on to third parties. The data collected in the context of placing orders are as follows:

- first name
- surname
- address
- telephone number
- email address
- payment information
- shipping methods
- IP address

The data is transmitted to the shipping company when it is necessary for the execution of the delivery. The payment data is communicated to the credit institution in charge of the execution of the payment. The aforementioned companies may use the data of the interested party exclusively for the execution of the assigned assignment.
The e-mail address, communicated when purchasing goods from our site, can subsequently be used to offer similar products or services, since, with a view to maintaining customer relations, we wish to provide them with the information we deem appropriate. 'interest.

With the execution of the contract and the payment of the purchase price, the data will be inaccessible and will be deleted after the expiry of the fiscal and commercial conservation terms, unless the interested party has expressly consented to their further use. Further storage takes place in cases prescribed by law.

6. Payments

When you purchase a product, you have the option of paying by credit card, paypal, satispay, bank transfer, cash on delivery. With each transaction, the data is transmitted to the company that manages your account according to the payment method selected. The data of your credit cards or your Paypal/Satispay accounts do not transit in any way on the CICLI BORTOLOTTO servers. To process digital payments we use:

CREDIT CARD - External payment directly on the Stripe website (www.stripe.com)
PAYPAL - External payment directly on the Paypal site (www.paypal.com)
SATISPAY - External payment directly on the Satispay website (www.satispay.com)
BANK TRANSFER - Only the data to which the customer must carry out the transfer are communicated
CASH ON DELIVERY - Payment is made directly to the courier

In cases of payment by CREDIT CARD/PAYPAL/SATISPAY, the data that is transmitted to the related third-party companies that manage payment transactions are:
- IP address
- Language setting
- The complete billing and delivery address of the order.
- Account data of a registered customer and from the customer's already existing account.
- Email address
- Order data (including details of the items purchased and the order summary)

7. Newsletter

Through the CICLI BORTOLOTTO website it is possible to subscribe to the newsletter. In order to send the newsletter regularly, CICLI BORTOLOTTO records the following data:

- first name
- email address

No data deriving from the newsletter service is communicated to third parties.

The e-mail address is kept for the time corresponding to the subscription to the newsletter. Unsubscribing from the newsletter results in the deletion of the e-mail address. Further storage takes place in cases prescribed by law.

8. Contact form

Forms are available on the CICLI BORTOLOTTO website for collecting requests made by customers which allow the user to get in touch with CICLI BORTOLOTTO. The user is asked for his consent to provide his data in relation to the use of the service. The following personal data are processed:

- first name
- surname
- email address
- telephone number

The indication of the e-mail address and telephone has the purpose of obtaining contact information to reply to the user. The indication of the data mentioned above or of additional data has the purpose of processing user requests and providing the corresponding services. No data acquired from the contact form is communicated to third parties.

After the request has been processed and the case has been concluded, the personal data resulting from the contact form are deleted. Further storage takes place in cases prescribed by law.

9. Communication of data to third parties

The personal data of the interested party are communicated to third parties only if:

- the interested party has given express consent pursuant to art. 6, par. 1, page 1, lett. to GDPR,
- insofar as this is permitted by law and is necessary pursuant to art. 6, par. 1, page 1, lett. b GDPR for the fulfillment of a contractual relationship,
- it is necessary for the fulfillment of a legal obligation pursuant to art. 6, par. 1, page 1, lett. to GDPR,
- the communication, pursuant to art. 6, par. 1, p. 1, lit. f GDPR, serves to protect a legitimate interest of the company or to establish, exercise or defend legal claims and there is no reason to assume that the data subject has an overriding interest in preventing such disclosure.

10. Communication of data to external service providers
CICLI BORTOLOTTO uses service providers for the execution of services and for the processing of data regarding its services and products. The data is processed by the service providers exclusively in the manner and within the limits established by the directives of CICLI BORTOLOTTO and by the provisions on data protection. The data processors are carefully selected and have access to user data exclusively to the extent and for the time necessary to perform the services, or to the extent and for the time for which the consent to the processing was given. Service providers located in countries such as the USA or other countries outside the European Economic Area are subject to data protection legislation which, in general, does not ensure the same level of protection for personal data as guaranteed by the laws of the members of the European Union. In the event that personal data is processed in a country that does not ensure a level of protection of personal data equal to that guaranteed by the European Union, CICLI BORTOLOTTO ensures through contractual regulations or other documents that personal data are adequately protected. Among the recipients of this data can e.g. include payment institutions within the scope of payment transactions, service providers entrusted with IT functions or providers of services and content that are integrated into a website.

11. Use of Cookies
Cookies are used on the CICLI BORTOLOTTO website. Cookies are small files which, during visits to the site, are sent and saved on the user's browser. By disabling the saving of technical cookies, some features of the site could be compromised. Other cookies, on the other hand, allow for various analyses. For example, cookies are able to recognize the user's browser on the next visit and to transmit various information to it. Among other things, cookies are used to make the site more usable and effective, for example, by monitoring its use and ascertaining the user's preferred settings (such as country and language). Cookies processed by third parties collect information directly from the user's browser. Cookies do not cause any damage to the user's terminal, they cannot run programs and contain viruses.
The CICLI BORTOLOTTO site uses temporary cookies which are automatically deleted when the user's browser is closed. This type of cookie allows you to record the session ID. In this way the various requests of the user's browser are assigned to a common session and this makes it possible to recognize the terminal on subsequent visits. Session cookies are deleted when the user logs out or the browser is closed.
Permanent cookies are also used on the CICLI BORTOLOTTO site. Persistent cookies are saved longer on the user's browser and are aimed at transmitting information to CICLI BORTOLOTTO. The duration of storage differs according to the cookies. Persistent cookies can be deleted independently by the user via the browser settings.
Personal data is deleted when it is no longer required for this purpose, in particular when cookies are deactivated. As regards unnecessary technical cookies or so-called third-party cookies, we need the user's consent. If on the basis of a notice provided by us on the website ("cookie banner") the user has given us his consent to the use of cookies, the legitimacy of the processing also depends on Article 6 par. 1 sentence 1 letter. a of the GDPR. As soon as the data transmitted to us via the cookie for the achievement of the purposes described above is no longer required, this information will be deleted. Further storage takes place in cases prescribed by law.
Most browsers are configured to accept standard cookies. However, the browser can be configured by the user to accept only certain cookies or to reject them altogether. Note that disabling cookies through your browser settings may compromise some site features. The cookies saved on the user's browser can also be deleted through the settings. Furthermore, it is possible to set the browser in such a way that it sends a warning before saving cookies.

12. Tracking and analysis programs (performance cookies)
In order to ensure continuous optimization and best respond to user needs, tracking and analysis tools are used. With the help of the tracking measures, it is also possible to carry out statistical surveys on the use of the website by visitors and, with the help of the knowledge gained, to further develop the online offer. If on the basis of a notice provided by us on the website ("cookie banner") the user has given us his consent to the use of performance cookies, the legitimacy of the processing also depends on Article 6 par. 1 sentence 1 letter. a of the GDPR. As soon as the data transmitted to us via the cookie for the achievement of the purposes described above is no longer required, this information will be deleted. Further storage takes place in cases prescribed by law.

12.1 Google Analytics
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA ("Google"). Google Analytics uses so-called "cookies", text files saved on the user's computer which allow the analysis of the use of the site by the user.
The information generated by these cookies, such as the time, place and frequency of use of the site, are generally transmitted to and stored on Google's servers located in the United States. It cannot be excluded that the cookies set by Google Analytics collect further personal data in addition to the IP address. It should be noted that Google may possibly transmit this information to third parties in the cases established by law or if the aforementioned third parties process this data on behalf of Google.
The information generated by the cookies will be used by Google on behalf of the site manager to evaluate its use by the user, compile reports on the activities carried out and provide the manager with other services relating to the site and internet use. The IP address transmitted by Google Analytics within the scope of Google Analytics is not associated by Google, according to its own information, with other data collected by Google.
The user can prevent the saving of cookies via the browser settings; note, however, that in this case some features of the site could be compromised.
It cannot be excluded that the cookies set by Google Analytics may collect other personal data in addition to the IP address. In order to prevent information on the use of the site by Google Analytics from being collected and transferred to Google Analytics, the user can download and install the browser plug-in by clicking on the following link: http://tools.google. com/dlpage/gaoptout?hl=en. The aforementioned plug-in prevents information on the use of the site from being transmitted to Google Analytics. Further analysis via such a plugin cannot be ruled out.
In the event that the user browses our site via smartphone or tablet, this plugin cannot be used. By clicking on this link, a so-called opt-out option is installed in the user's browser, which prevents information about the use of the website from being transmitted to Google Analytics. Please note that opt-out cookies are only valid for that browser and that domain. If the cookies are deleted from the browser, the opt-out cookie is also deleted. To prevent the collection of data by Google Analytics, you must click on the site again. The use of opt-out cookies is also possible as an alternative to the above plugin when using the browser on your computer.
In order to ensure the best possible protection of your personal data, Google Analytics has been extended to include the code "anonymizeIP" on this website. This code causes the last 8 bits of the IP addresses to be deleted and the user's IP address to be recorded anonymously (so-called IP masking). The IP address will in principle be shortened by Google before transfer within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus anonymised. Only in exceptional cases will the full address be transmitted by Google to the USA and shortened there.

12.2 Google Ads
CICLI BORTOLOTTO uses the "Google Ads" technology and in particular the conversion tracking. Google Conversion Tracking is an analysis service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA ("Google"). By clicking on an ad published by Google, a cookie for conversion tracking will be placed on the user's PC. Cookies are valid for 30 days and do not contribute to personal identification. By visiting certain pages of our site, in the event that the cookie has not expired, CICLI BORTOLOTTO and Google are able to verify whether the user has clicked on a particular advertisement and has been redirected to that page. Google Ads customers always receive another cookie. Therefore, the possibility exists to track Google Ads via the customers' Google Ads site.
The data collected with the help of the conversion cookie provides conversion statistics for Google Ads customers who use conversion tracking. Customers will be told how many users clicked on their ad and were subsequently redirected to a conversion tracking tag page. However, customers do not receive information that allows users to be identified.
You can opt out of conversion tracking via your browser settings, e.g. in the way in which the installation of a cookie is prevented. It is also possible to disable conversion tracking by setting the browser in such a way that only cookies are blocked from the "googleadservices.com" site.

12.3 Google Remarketing and "Similar Audiences"
CICLI BORTOLOTTO uses the "Google Remarketing" technology and the "Similar audience segments" function of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA ("Google"). Google Remarketing and the "Similar audience segments" function will show advertisements for users who have already visited the Internet pages and viewed the online services and are interested in a particular offer. Within the Google Network, targeted and interest-based ads can be viewed on the CICLI BORTOLOTTO website. Google Remarketing or the "Similar Audiences" function uses cookies to perform this analysis. This will allow site visitors to be recognized as soon as they visit websites located within the Google advertising network. Within the Google advertising network, targeted and interest-based ads may be served based on the sites in the Google network (which also use Google's remarketing function) previously visited by the user.
If you prefer not to receive targeted and interest-based ads, you can disable the use of cookies by Google for this purpose by clicking on the following link: https://www.google.com/settings/ads

12.4 Facebook pixel
The "Facebook Pixel" of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook") is set up on the CICLI BORTOLOTTO website. This way, after users have seen or clicked on a Facebook ad, their behavior can be tracked. This procedure is designed to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize advertising measures.
The data collected is anonymous for CICLI BORTOLOTTO and does not allow any identification of the users. However, the data is recorded and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook's data usage policy. The user can enable Facebook and its partners to show advertisements on and off Facebook. For this purpose, a cookie can be stored on the user's terminal device. In order to prevent the use of cookies on the user's computer, it is possible to set the browser to prevent their storage or to determine their cancellation. However, disabling all cookies could compromise the functionality of some internet pages.
The aforementioned data processing and the purpose pursued are based on the legitimate interest of CICLI BORTOLOTTO. The legal basis is the art. 6, par. 1, lit. f GDPR.
Further information on the protection of your privacy can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.
In addition, you can deactivate the remarketing function in the "Custom Audience" area in the ad settings at the link: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.
If you do not have a Facebook account, you can opt out of Facebook usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/preferentialmanagement/

12.5 Buttons and plugins (Facebook, Google, Apple)

Social network buttons are integrated on our website, which consist of their logo. By visiting the site, a direct connection (link) is established via the buttons between the user's browser and the respective server of the provider. The social network thus receives the information that the user has visited the site with a specific IP address. We point out that the provider of the pages has no knowledge of the content of the transmitted data and their use by the social network. If the user logs into the site with his personal user account of the respective network, the network can assign the access to this account. Further details on data collection (purpose, extent, further processing, use), as well as your rights and setting options can be found in the privacy policy of the social networks.

a) Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

https://www.facebook.com/policy.php

b) Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

https://www.google.com/policies/privacy/partners/?hl=it

c) Apple Inc. One Apple Park Way. Cupertino, CA 95014. United States.

https://www.apple.com/legal/privacy/en-ww/

12.6 YouTube Video
On the CICLI BORTOLOTTO website we use the integration of videos from YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube").
Some of our sites use plugins from the provider YouTube. By visiting the pages of our site that have this plugin, the user is connected to the YouTube servers and, at the same time, the plugin is displayed, which will send information on the site visited to the YouTube server. If you are logged in as a YouTube member, YouTube associates this information with your personal user account. When using the plugin, for example by clicking on the start button of a video, this information is also associated with your user account. You can prevent this association by disconnecting your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. before using the CICLI BORTOLOTTO site and deleting the cookies corresponding to the companies.
Further information on data protection and privacy by YouTube (Google) can be found at the following link: https://policies.google.com/privacy

13. Hyperlink
On our site there are so-called hyperlinks of other providers. By activating these links, the user will be redirected from the CICLI BORTOLOTTO site directly to these other sites. The redirect will be marked by the URL change. CICLI BORTOLOTTO assumes no responsibility for the confidentiality of the information on these third-party sites, since it has no control over their compliance with the privacy policy. It is advisable to find out about the processing of personal data by these companies by visiting these sites.

14. Rights of the interested party

The GDPR gives the user, as an interested party in the processing of personal data, the following rights:

- The right to obtain from the data controller, pursuant to art. 15 GDPR, information on the processing of personal data concerning him. The right to obtain information on the purposes of the processing, on the categories of personal data processed, on the categories of recipients to whom the data have been or will be communicated, on the expected retention period, on the existence of the right to rectification, cancellation, limitation of processing or opposition, on the existence of a right to complain, on the origin of the data, if these have not been collected by us and on the existence of an automated decision-making process, including profiling activity, and any significant information on the related details .
- The right to obtain, pursuant to art. 16 GDPR, the immediate rectification of inaccurate personal data concerning you or the completion of incomplete personal data.
- The right to obtain, pursuant to art. 17 GDPR, the cancellation of personal data concerning him, provided that the processing of the same is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assessment, exercise or defense of a right in court.
- The right to obtain, pursuant to art. 18 GDPR, the limitation of the processing of personal data concerning him if the accuracy of it is disputed, if the relative processing is considered unlawful, if the data controller no longer needs it for the purposes of the processing and the personal data are necessary for the concerned for the assessment, exercise or defense of a right in court, the right pursuant to art. 18 GDPR it is up to the interested party even if he has opposed the treatment pursuant to art. 21 GDPR.
- The right to receive, pursuant to art. 20 GDPR, in a structured, updated and machine-readable format, the personal data concerning him provided to a data controller or to request its transfer to another data controller.
- The right to revoke, pursuant to art. 7, par. 3 GDPR, consent at all times. The withdrawal of consent to data processing is effective for the future.
- Pursuant to art. 77 GDPR, the interested party has the right to lodge a complaint with the supervisory authority. The competent supervisory authority is that of the usual place of residence, the place of work or the headquarters of CICLI BORTOLOTTO.

15. Right to object
The interested party has the right to object, pursuant to art. 21 of the GDPR, to the processing of personal data concerning him necessary for the pursuit of a legitimate interest pursuant to art. 6, par. 1, lit. f of the GDPR, for reasons connected to your particular situation or if the objection concerns data processed for the purpose of direct marketing. The interested party has the right to oppose direct marketing without the need to cite a specific situation.

16. Data Protection and Security Measures
CICLI BORTOLOTTO is committed to protecting private life and guaranteeing the confidentiality of personal data. To avoid manipulation, loss or improper use of stored data, CICLI BORTOLOTTO adopts large-scale technical and organizational security measures which are periodically reviewed and adapted to technological progress. This includes the use of recognized encryption methods (SSL or TLS). Note that, however, due to the structure of the Internet, it is possible that the data protection rules and the aforementioned security measures of persons or institutions that are located outside the area of responsibility of CICLI BORTOLOTTO are not observed. In particular, third parties could see, for example, unencrypted data, if transmitted by e-mail. Over this circumstance, CICLI BORTOLOTTO is unable to exercise any control. It is your responsibility to protect the data you provide by encryption or otherwise against misuse.