Privacy policy

Personal Data
Personal data is information that allows a natural person to be identified directly or indirectly (such as: name, surname, email, telephone number).

User
For the purposes of this information, a “user” is defined as a natural person who browses and uses this Site.
While browsing this Site, a notice will appear to the user asking him or her to authorize the tracking of his or her “cookies”.
By authorizing the tracking of “cookies”, the user’s usage data will be anonymized (“anonymized cookies”), not allowing this website to directly identify the same interested user.
If the user who visits this Site authorizes the processing of his or her personal data (by filling out a contact form), the same will be defined as the “interested party”, or the subject to whom the personal data refers.

Usage Data
This is information that this site collects automatically without directly identifying users.
In particular, the following constitute data on the use of this site:
the IP addresses or domain names of the computers used by the user who connects to this Site;
the addresses in URI (Uniform Resource Identifier) ​​notation;
the time of the user's request;
the method used to submit the request to the server;
the country of origin of the user;
the characteristics of the browser and operating system used by the user;
the length of time the user visits the pages of this site;
the path of the user's visit within the Site, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the IT environment of the User.
Data Controller
The natural or legal person who decides how the personal data of the interested parties will be used. The data controller establishes the methods of use of the personal data of the users and guarantees their protection together with the Data Protection Officer (DPO).

Data Protection Officer (DPO)
The natural or legal person who ensures the protection of users' personal data, through the adoption of technical prevention measures and also through the adoption of internal codes of conduct.

Data Controller (or Controller)
The natural or legal person who is authorized by the Data Controller to process Personal Data, to process the personal data of the interested parties.

This Site
All web pages of the Lingerie Harness Boutique site
that contain information and informative content.

Cookie
A piece of code that collects data within the device used by the user for navigation.

DATA CONTROLLER AND DATA PROTECTION OFFICER

The data controller of this site is Lingerie Harness Boutique
Your contact details are:
mail: yourharnessboutique@gmail.com
The data protection officer (DPO) is Lingerie Harness Boutique
Your contact details are:
mail: yourharnessboutique@gmail.com
REGULATORY SOURCES

COMPLIANCE WITH EU REGULATION N. 679/2016 – GDPR (GENERAL DATA PROTECTION REGULATION). This Privacy Policy complies with the European regulation EU n. 679/2016 better known as “GDPR” (General Data Protection Regulation). This website and the data controller comply with consideration n. 82 and n. 83 of the European regulation EU n. 679/2016 better known as “GDPR” (General Data Protection Regulation).

REGISTER OF PROCESSING ACTIVITIES

This website and the data controller, in accordance with the provisions of art. 30, paragraph no. 1, of the European regulation EU no. 679/2016, have created the “Register of processing activities”.

The “Register of processing activities” meets the requirements indicated by art. 30, paragraph no. 1 (letters: a, b, c, d, e, f, g) of the European regulation EU no. 679/2016.
Pursuant to art. 30, paragraph no. 3 of the European regulation EU no. 679/2016, the “Register of processing activities” is kept in electronic format.
The “Register of processing activities” in electronic format is kept in a management software covered by encryption not accessible to users and third parties.
In the event of a request for access by the competent Authorities, this website and the data controller, in accordance with the provisions of art. 30, paragraph no. 4 of the European Regulation EU no. 679/2016, will make the register available to the supervisory authority.
This website and the data controller have implemented adequate technical and organizational measures to guarantee a level of security appropriate to the risk in accordance with the provisions of art. 32, paragraph no. 1 (letters: a, b, c, d, e, f, g) of the European Regulation EU no. 679/2016.
I THEREFORE INVITE YOU TO READ MY PRIVACY POLICY, DESCRIBED BELOW

PRIVACY POLICY

Scope of data communication
The personal data provided may be communicated to third parties to comply with legal obligations, in execution of orders from public authorities authorized to do so or to assert or defend a right in court.
Type of data processed and purpose of processing

Navigation data:
The computer systems and software procedures used to operate this site acquire, during normal operation, some personal data that are then implicitly transmitted in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.

Data provided voluntarily by users/visitors:
If users/visitors, connecting to this site, send their personal data to access certain services, or to make requests by email, this involves the acquisition by the data controller of the sender's address and/or any other personal data that will be processed exclusively to respond to the request, or to provide the service.
Personal data provided by users/visitors will be communicated to third parties only if communication is necessary to comply with the requests of the users/visitors themselves.

Processing methods and data retention period
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
For users subscribed to the newsletter: as soon as the user unsubscribes from the newsletter, personal data are completely deleted from my management system.
For my customers: personal data are stored for a period of active commercial relationship.
After the period of commercial activity, personal data of former customers are deleted.

Security measures for data retention
This site observes specific security measures to prevent data loss, illicit or incorrect use and unauthorized access.
Apart from what is specified for navigation data, users/visitors are free to provide their personal data. Failure to provide them may only result in the impossibility of obtaining what is requested.

Rights of interested parties
The subjects to whom the personal data refers (also defined with the term "interested parties") have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification.
Pursuant to the GDPR, the interested party has the right to request the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing.

The subjects to whom the personal data refers have the right to:
Revoke consent to the processing;
Obtain confirmation or otherwise of the existence of data concerning them;
Know to whom their data is transmitted;
Obtain the rectification, cancellation, integration of their data;
File a complaint with the Privacy Guarantor;
Know whether the data is subject to profiling;
Transfer their data to another provider (right of portability).
If you want to ask for more information on the processing of your data or if you want to exercise one of the rights previously mentioned, you can send an email to the following address: yourharnessboutique@gmail.com

On what legal basis do I process your data
When I process your personal data for the purposes indicated in this Policy I rely on one or more of the following legal bases:
Consent: I ask for your consent to use your data, to update you on my content, to send you information on my services and for profiling (i.e. to analyze the interests and behaviors of visitors to my site to improve my marketing campaigns).
Contractual scope: when you enter into a contract of any kind with me, your personal data will be processed to pursue the purposes of the service you have requested.
Legal obligations: when strictly necessary, I will process your personal data to comply with a legal obligation, an order imposed by the supervisory authority, a binding tax assessment.
Shopping:
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through their data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.

Payment:
If you choose a direct payment gateway to complete your purchase, Shopify stores your credit card information. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more information, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Policy (https://www.shopify.com/legal/privacy).

INFORMATION ON COOKIES

What are cookies?

Cookies are pieces of information that a server can send to your PC, smartphone or tablet when you visit a website or use a social network. The same server that sent them can then read and record the cookies that are on your PC, smartphone or tablet to obtain various types of information. Cookies have different functions: in many cases they are useful because they make browsing easier and faster, as happens with technical cookies, used for example to save language preferences or a shopping cart. In other cases, however, cookies are used to monitor users while browsing; the so-called profiling cookies record information about what you buy or might want to buy, analyzing your reading, your hobbies, your travels, to personalize the advertising that is shown to you when you open your email or browse a social network. Then there are third-party cookies, or information that is recorded by sites other than those you have visited and that are used for profiling purposes.

Further information can be found on the website of the Privacy Guarantor.
I remind you that, by continuing to browse this site or by clicking on the OK and X buttons on the short information banner, you declare that you have read and accepted the privacy policy and the cookies policy, thus consenting to the use of cookies on this site.

Types of cookies that I use
Two types of cookies can be used on the site: ‘session cookies’ and ‘persistent cookies’:
‘Session cookies’ are temporary cookies that remain on your device until you leave the site.
‘Persistent cookies’ remain on your device for longer or until you manually delete them.
The cookies used by my site:

Technical cookies
Technical cookies are those whose use does not require the user's consent. These cookies are essential to allow you to navigate a website and use all its features. Without these cookies, which are absolutely necessary, a website could not provide certain services or functions and navigation would not be as smooth and easy as it should be. A cookie of this type is also used to store a user's decision on the use of cookies on the website. Other technical cookies are those that allow, for example, the saving of preferences relating to the language or shopping cart.

Profiling cookies
This site uses cookies of this type. Advertising cookies are installed to show site visitors content related to their preferences. They can therefore be used to show advertising content targeted to the person's interests. Cookies of this type work in collaboration with third-party sites and can track past navigation on pages present on different domains. Cookies of this type usually track the user's IP address as well as other information, some of which may be personal.

Third-party cookies
These cookies are used to collect information on the use of the site made by users in anonymous form such as: pages visited, time spent, origins of the traffic of origin, geographic origin, age, gender and interests for statistical purposes and marketing campaigns. These cookies are sent from third-party domains external to the site.

Google analytics cookies with anonymized IP
My pages use third-party performance cookies from Google Analytics with anonymized IP (service offered by Google, Inc.) to allow me to anonymously collect and examine the behavior of visitors while using the site and to improve its usability and user experience. They are defined as anonymous as they cannot be used to identify specific individuals.
By using the Google Analytics panel, I can understand whether the visits were made by new or returning visitors by checking the navigation mode of the pages (entry links, exit links, movements between pages, time spent, geographical origin, etc.).

For further information on Google Analytics, you can consult the sites:

https://www.google.it/policies/privacy/partners/

https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage


You can disable the action of Google Analytics through the tools provided by Google. For information on this, consult the site:

https://tools.google.com/dlpage/gaoptout

The cookies used by Google Analytics are:

_ga (persistent – ​​2 years)
_utma (persistent – ​​2 years)
__utmb (session)
__utmt (session)
__utmz (session)
_gat (persistent – ​​10 minutes)

How to control or delete cookies
Most browsers are configured to accept, control or possibly disable cookies through the settings. For more information on cookie management, visit the appropriate links:


For more information on cookies and to manage cookie preferences (first and/or third party) you can also visit the platform  www.youronlinechoices.com.

Social network buttons and widgets
To ensure that the contents of a site can be shared on social networks by visitors to the site, it is possible to integrate the tools (widgets) made available by the social networks themselves into the pages.
These tools (usually blocks of code inserted into the pages of the host site) can collect third-party cookies installed by social networks (for example Facebook, Twitter, YouTube, etc.); the site does not share any information with these widgets.
For further information about the cookies of the main social networks, you can visit the sites:


Consent to the use of Cookies
We remind you that if you do not consent to the use of cookies and decide to disable the cookies that we use, this could affect your user experience while visiting my site (preventing you from seeing some parts or some web pages).

SECURITY PROTOCOLS

This website uses the secure communication protocol "https" (Hypertext Transfer Protocol Secure).

The "https" protocol is used to ensure secure communication between two computer devices connected to the Internet.

In this way, if you fill out one of the contact forms on my site, your message will be transmitted within an encrypted connection, using asymmetric encryption (thanks to the TLS - Transport Layer Security and SSL - Secure Sockets Layer protocols).
The “https” protocol guarantees:
– authentication of the website visited;
– protection of privacy (confidentiality);
– integrity of data exchanged between the communicating parties.
I use the “https” protocol to protect your data through bidirectional encryption of communications between a client and a server.
This allows me to protect your data from possible operations of:
– eavesdropping à action by which the private conversation between the parties is secretly intercepted without their consent;
– opertampering à literally “tampering or alteration of communication”, action by which the contents of a web communication are falsified.
In practice, the “https” protocol guarantees that:
– the user is communicating with exactly the intended website (as opposed to a fake site);
– the contents of communications between the user and the website cannot be intercepted or altered by third parties.

PROFILING AND MARKETING ACTIVITIES

Lingerie Harness Boutique, through this website, carries out marketing and profiling activities.

Marketing and profiling activities are carried out only towards people who have given their consent to the processing of personal data.

Marketing activities are aimed at making the services and contents created by
Lingerie Harness Boutique known to interested people who have given their consent to the processing of data.

Profiling activities are carried out to measure the results of marketing campaigns; these activities consist of collecting and processing the data of users interested in a service to divide them into groups based on their behavior.
To carry out marketing and profiling activities, Lingerie Harness Boutique
uses the following tools.

Facebook Pixel
This website uses a script called “Facebook Pixel”.
I use this tool to collect statistical data that allows me to measure the effectiveness of paid advertising.
Thanks to the Facebook Pixel I can understand the actions that people perform on my website. The data I collect is used to:
Ensure that the ads are shown to the right people;
Create audience groups to target the ads to;
Exploit the additional advertising tools of the platform on which I advertise.
I use the Facebook Pixel to carry out "remarketing" and "retargeting" activities; thanks to these activities I use the cookies that you leave on my site, without identifying you. In this way your browsing data is not linked to your identity and your personal data. The data collected thanks to the Facebook Pixel is used only by me.

TikTok Pixel

This website uses a script called "TikTok Pixel". I use this tool to collect statistical data that allows me to measure the effectiveness of paid advertising on the social network called "TikTok". Thanks to the TikTok Pixel I can understand the actions that people who have a TikTok account perform on my website.

The data I collect is used to:
Ensure that ads are shown to the right people;
Create audience groups to target ads to;
Exploit additional advertising tools on the platform on which I advertise.
I use the TikTok Pixel to carry out “remarketing” and “retargeting” activities; thanks to these activities I use the cookies that you leave on my site, without identifying you.
In this way, your browsing data is not linked to your identity and your personal data.
The data collected thanks to the TikTok Pixel is used only by me.
If you have a TikTok account, I do not collect any personal data that you have entered on TikTok.
After running an advertising campaign on TikTok, I analyze some statistical data, processed by the TikTok platform dedicated to advertisers.
In this way, I study the way in which TikTok users interact with my advertising content, without directly identifying the recipients of the ads and without processing their personal data entered into the platform.

Newsletter and email marketing software
If you decide to subscribe to my newsletter, I will ask you to enter your personal data (name, surname, email) in a contact form.
I will use your personal data to send you emails that will update you on my content (blog articles, videos, etc.).
If you decide to receive "updates on my services", I will use your data to send you emails in which I will explain whether my services can be useful to you.
When you enter your data in the contact form, the data will end up in an "email marketing" software called Active Campaign.
Access to the Active Campaign software is covered by "end to end" encryption; to access the software I use a double authentication procedure; this tool prevents third parties from accessing the data in my account.
The data collected on Active Campaign are consulted only by me.
You can choose to unsubscribe from my newsletter at any time; to unsubscribe you can click on a specific button that you will find in my emails.
After clicking on the delete button, your data will be immediately deleted from the “email marketing” software.

Messenger BOT

To manage my newsletter, the publication of my content and the communication of my commercial offers, we use a chatbot within the Facebook messaging application called “Messenger”. You can decide to receive my communications, either by email to your email address, or by subscribing to my Messenger BOT. My Messenger BOT collects your personal data entered on Facebook (name, surname, email) and uses them to send you messages in the Facebook messaging application called “Messenger”.

I will use your personal data to send you chat messages that will contain updates on my content (blog articles; videos; communications about my services).

When you agree to subscribe to my Messenger BOT, your personal data entered on Facebook (name, surname, email) will end up in an external software called  ManyChat.


Access to the ManyChat software is covered by “end to end” encryption.

To access the software I use a double authentication procedure; this tool prevents third parties from accessing the data in my account.

The data collected on ManyChat are consulted only by me.

You can choose to unsubscribe from my Messenger Bot at any time; to unsubscribe you can click on a specific button that you will find in my chat messages.

After clicking on the delete button your data will be immediately deleted from the “ManyChat” software.

SERVICES

In this section we will explain how we use your data if you request one of my services.

Lingerie Harness Boutique Services

When you request one of the Lingerie Harness Boutique services I use the data you entered in the contact form to respond to your requests and to provide you with and process the request you sent.

To protect your data I adopt predefined processing procedures and follow an internal code of conduct; in this way I protect your data safely.

In processing data I may use:

– “cloud” storage tools, applications or services;

– email tools, applications or services;

– data transfer tools, applications or services such as Wetransfer.

These activities may involve the transfer of data to servers located outside the European Union, regardless of my will.

To carry out my services I use these software: Gmail, Apple Mail, iCloud, iCalendar, Dropbox, Zapier.

I invite you to consult the privacy policy of these programs on these pages: