Privacy Policy

Introduction: GDPR and privacy
The General Data Protection Regulation (GDPR)  is a regulation (EU 2016/679) with which the European Commission intends to strengthen and homogenise the protection of personal data of citizens and residents of the European Union, within or outside its borders. This regulation replaces the privacy laws of individual states and has been in force since 25 May 2018.

For more information, see the official text of the GDPR, the website of the Data Protection Authority and the dedicated page on Wikipedia.

In accordance with the GDPR this policy is intended to explain in a clear and simple way what personal data is collected through this site, where it is stored, for how long, for what purposes and how you can update it or request its deletion.

Who is the Data Controller: Eleonora Tedeschi
Eleonora Tedeschi (hereinafter the ‘Company’) protects the confidentiality of your personal data and ensures that they are protected from any event that might put them at risk of being processed.

As provided for by the European Union Regulation no. 679/2016 (GDPR), and in particular art. 13, below we provide the user (‘Data Subject’) with the information required by law regarding the processing of his/her personal data.

www.testiandco.com (which we will refer to as the ‘Website’) is a website owned by Eleonora Tedeschi to which we will refer hereafter simply as ‘Company’.

The Company operates the sites listed above and controls the management of personal data as described in this policy, in accordance with current privacy laws (General Data Protection Regulation (GDPR) - EU Regulation 2016/679).

You can contact us by email at eleonoratestiandco.com.

On what legal basis does the Company collect and process personal data?
The Company uses as a legal basis the need to process personal data for the performance of its services, which include the sale of tourism products and services, transactional communication of orders from its website catalogue. Without collecting the required data, it would not be possible to provide the aforementioned services.

The Company then relies on its legitimate business interests to provide its services, promote them, prevent fraud and spam and improve its services.

Where required by applicable law, we will ask for your consent before processing your personal data for direct marketing purposes.

What kind of data does the Company collect on the Website? (Type of data processed)
The Company collects information that you provide us via the contact and/or purchase forms on this site. For users requesting information or purchasing products or services this data includes your name, email, phone number and any other information you choose to include in your request.

For each form submission on our sites we also collect data about the browser and operating system used and the IP address, to combat spam and to identify possible usability problems of our sites with particular configurations and devices.

When you visit our sites we automatically collect certain information. For example, your IP address, the date and time you access our site, the hardware, software or browser you use, and information about your computer's operating system and language settings. We also collect information about your clicks and the pages you have viewed, as well as information about which sites or marketing campaigns you used to arrive at our sites.

The Company does not ask you to provide any so-called ‘special’ data, i.e., in accordance with the provisions of the GDPR (art. 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning a person's health or sexual life or sexual orientation. In the event that the service requested from the Company requires the processing of such data, the data subject will receive prior information and will be asked to give his/her consent.

Why does the Company collect this data on the Website? (Purpose of Processing)
The data sent to us via the form on these sites is first and foremost used to provide the information, including any offers, explicitly requested via the form.

For the data relating to users who wish to join our affiliation programme, we collect the information that the user enters in the form in order to be able to send, by email or telephone, information and the contract for joining the affiliation programme as well as the related transactional communications of orders and anything else relevant to the service offered in the event that the user joins our affiliation programme.

The company keeps the request in its archives for statistical purposes and as a backup, so that it can be resent if necessary.

To those who make a request or purchase, the Company also sends an email confirming that the request or purchase has been correctly made and this email may contain information, including links to articles and offers on the Company websites.

Only with your explicit consent may the Company send you further commercial communications by email or SMS containing information and offers of interest about its Products and Services.

Further explicit consent may be required to send further commercial communications via email or SMS containing information and offers from third parties or partners of the Company.

Lastly, the data entered in the forms may be used to show you personalised online advertising campaigns (remarketing) instead of generic advertisements, through specialised platforms such as Google Adwords, Bing Ads, Facebook Advertising and Criteo. In this case, site users are grouped into virtual lists, in an aggregate form that cannot be traced back to individual users, based on the information entered and choices made on this site and others owned by the company, based on the site and pages visited and actions taken on the site such as sending an enquiry or subscribing to a newsletter. In this way we try to show you advertisements targeted to your interests, through advertising platforms such as Google Adwords, Bing Ads, Facebook Advertising and Criteo, instead of generic advertisements.

Where are the collected data stored and for how long? (Data retention)

Data collected both from our forms and from browsing our sites is acquired through the following platforms:

Google Analytics - for data related to site navigation and purchase.
Google Tag Manager - for data relating to site navigation and purchase.
Criteo - for data relating to site purchases, navigation and choices.
HotJar - for site navigation and shopping data.
Bing Ads - for site navigation and shopping data.
Google AdWords - for site navigation and shopping data.
Google Gmail - Each form generates an email addressed to the company which stores it in Gmail accounts ( Google Suite )
Google Pages Documents - Data can be exported to documents stored in Google's service, Google Workspace
Mailchimp - for requests sent via forms and subscriptions to our newsletters
Amazon SES AWS - for requests sent via forms and subscriptions to our newsletters
On databases stored on our servers
On documents and databases stored at the offices of Eleonora Tedeschi in Florence, Italy.
 

Transmission of collected data

The transmission of personal data as described in this Policy may include transfer outside the European Union to countries that do not have data protection laws as comprehensive and complete as those of the European Union countries. Where required by EU law, we will only transfer personal data to recipients that offer an adequate level of data protection. Google, Bing, Amazon, Facebook, Criteo and Mailchimp are leading international companies and their servers are distributed worldwide, including outside the EU countries. OVH.com has its servers in Strasbourg, France. In some cases, data may also be stored in other data centres in the OVH.com network. For more information please consult the OVH.com data centre network or contact us. Company based in Florence (FI), Italy

The company relies on special procedures to prevent unauthorised access to and misuse of data. Only authorised personnel may access personal data while performing their work. We retain your personal data for as long as we deem necessary to enable you to use our services, perform our services, advertise our services, conduct our business, comply with legal obligations and resolve any disputes. All personal data held by us is governed by this Privacy Policy. If you have questions about a specific data retention period for certain types of personal data we process, please contact us as indicated below.

The data collected through the request and/or purchase forms arrive, in the form of email, both to the Company, which operates the Websites, and to the sender. Other than the use stated in this policy, data is not shared with any other third party.

Data collected through the forms with which the user wishes to join the affiliate programme is not shared by the Company with any third party.

Site navigation and usage data collected through tools such as Google Analytics is only shared in aggregate form (i.e., not attributable to individual users) with the Company employees and partners.

Third parties to whom the Company entrusts the performance of certain activities such as tax compliance, IT or business consulting, fraud prevention, debt collection. In these cases the recipients of the communication are appointed as Data Processors

How can you review, update and possibly delete personal data that you have shared with the Company?

At the request of the data controller and in accordance with current privacy laws (General Data Protection Regulation (GDPR) - EU Regulation 2016/679), the Company undertakes to have the personal data in its possession reviewed, amended or deleted.

To do this, the easiest way is to send us an email to eleonora@testiandco.com in which you can ask us to view, update or definitively delete the data concerning you that we have in our files.

Every communication from us sent via the Mailchimp platform, the server of this site, via the SMTP of the provider OVH.com or via Amazon SES AWS also includes a link from which you can update your data and consent and possibly choose not to be contacted again in the future.

We do our best to respond to each request promptly and comprehensively as is our duty. It is always your right to lodge a complaint with the supervisory authority.

This Policy may be changed in the future, so please visit this page regularly to be aware of any updates.

Processing methods
The data is processed by means of computerised and telematic tools and/or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which the data was collected and, in any case, in accordance with the relevant regulations in force.

Optional supply of data
Apart from that specified for navigation data, users/visitors are free to provide their personal data. Failure to provide them may only result in the impossibility of obtaining what has been requested.

Rights of data subjects
Users/visitors have the right to access at any time the data concerning them and to exercise the other rights (to request the origin of the data, the correction, updating or integration of inaccurate or incomplete data, or the cancellation or blocking of data processed in violation of the law, or to oppose their use for legitimate reasons) provided for in Article 7 of the Privacy Code, by contacting the data controller directly through the site or through the data below.

Data Controller
Eleonora Tedeschi, eleonora@testiandco.com

Since the installation of Cookies and other tracking systems operated by third parties through the services used within this Application cannot be technically controlled by the Data Controller, any specific reference to Cookies and tracking systems installed by third parties is to be considered indicative. For complete information, please consult the privacy policy of any third party services listed in this document. Given the objective complexity associated with the identification of technologies based on Cookies and their very close integration with the operation of the web, Users are invited to contact the Owner if they wish to receive any further information on the use of the Cookies themselves and on any use of the same - for example by third parties - carried out through this site.

Cookie Policy

This website uses cookies. In this policy we explain in detail what cookies we use and how they enable us to offer our users the best possible experience.

By continuing to browse this site you agree to our use of cookies.

What is a cookie?
A cookie is a short text sent to your browser from a website you visit. It allows the site to store information about your visit, such as your preferred language and other settings. This can facilitate your next visit and increase the usefulness of the site for you. Cookies play an important role. Without them, using the Web would be a much more frustrating experience.

There are different types of cookies and different ways of using them. Cookies can be distinguished according to their function, their duration and who has placed them on a website.

How are cookies used?
Our website uses the following types of cookies:

Technical cookies
Some cookies are essential for the proper functioning of our site, as they allow the web page to load and all essential functionality to work properly. Other technical cookies add functionality and improve or personalise the overall browsing experience.

Third party statistical cookies
These are cookies that allow us to monitor and analyse the behaviour of users of our website. Through these cookies we are able to monitor navigation on our website and can create profiles of our users in order to make improvements based on the analysis of this data. These cookies (third-party web services) provide anonymous/aggregated information on how visitors navigate the site.

In particular, Google Analytics, a system provided by Google Inc., uses cookies that are stored on your computer to enable the website operator to analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity. Users who do not want the cookies in question may prevent them from being stored on their computers by using the ‘Google Analytics opt-out browser add-on’ made available by Google at https://tools.google.com/dlpage/gaoptout . To activate the component, which inhibits the system from sending information on the user's visit, simply install it by following the instructions on the screen, close and reopen your browser.

Visit the following link to learn how to refuse or delete cookies from Google: http://www.google.com/intl/en/privacypolicy.html

Visit the following link to read Google's privacy policy: http://www.google.co.uk/intl/en/policies/privacy/

Third-party profiling cookies
We use a number of different suppliers who may in turn install cookies in order for the services they are providing to work properly. If you would like information about these third party cookies and how to disable them please access the list links below.
Also by accessing http://www.youronlinechoices.com you can find out about behavioural advertising as well as disable or enable the companies listed and who work with website operators to collect and use information for advertising.

These cookies store information about user behaviour obtained by observing browsing habits, with the aim of developing a specific profile to display ads based on it.

We also use Google AdWords features and remarketing lists for Display Network ads from Google Analytics. We use Google cookies (such as Google Analytics and Google Adwords cookies) and other third-party cookies (such as DoubleClick cookies) combined together to inform, optimise and serve ads based on previous visits to our website. This implies that suppliers (such as Google) display our promotional material on other websites that you visit on the Internet.

Some of our cookies may serve to identify you and others provide only anonymous statistical information about your navigation on our website, however this function can be disabled by setting your browser directly.

These cookies (third party advertising services) are used in order to send you personalised advertising and content based on your browsing history on the site. Below are the links to the respective privacy policy pages and the consent form where you can disable the use of profiling cookies from the third-party service.

Google

Adwords: Campaign remarketing and conversion service.
Remarketing and conversion cookies.
Doubleclick.
Privacy policy: https://www.google.com/intl/it/policies/technologies/ads/ .
Consent form: https://www.google.com/settings/ads?hl=it .
Social media cookies
These third-party cookies are used to integrate some popular social media features and provide them within the site. In particular, they allow registration and authentication on the site via Facebook.

Facebook
Privacy policy: https://www.facebook.com/about/privacy/ .

Facebook offers targeted advertisements based on the behaviour and interests of online users. For more information: https://www.facebook.com/help/cookies?ref_type=sitefooter .

Like button and social widgets of Facebook (Facebook, Inc.)
The Facebook ‘Like’ button and social widgets are services for interaction with the social network Facebook, provided by Facebook, Inc. Personal data collected: Cookies and Usage Data. Place of processing :USA - Privacy Policy

Twitter Tweet button and social widgets (Twitter, Inc.)
The Tweet button and Twitter social widgets are services for interaction with the social network Twitter, provided by Twitter, Inc. Personal data collected: Cookies and Usage Data. Place of processing : USA - Privacy Policy

Web beacons

We use web beacons, these elements are images found on a web page or in an e-mail and are used to monitor the online behaviour of users who visit our website or receive one of our newsletters.

The purpose of using this technology is to monitor user activity, such as the area of the site visited and the time spent browsing.

Statistics
The services contained in this section allow the Data Controller to monitor and analyse traffic data and serve to keep track of User behaviour.

Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (‘Google’). Google uses the Personal Data collected in order to track and examine the use of this Application, compile reports and share them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the advertisements of its advertising network.

Personal data collected: Cookies and Usage Data. Place of processing : USA - Privacy Policy - Opt Out

Google Tag Manager (Google Inc.)
Google Tag Manager is a statistics service provided by Google Inc. Personal data collected: Cookie and Usage Data. Place of processing : USA - Privacy Policy

How to disable cookies
Most internet browsers are initially set to accept cookies automatically. The user can modify these settings to block cookies or to warn that cookies are being sent to the user's device. There are various ways to manage cookies. Users can refer to the instruction manual or help screen of their browser to find out how to adjust or change their browser settings.

Chrome https://support.google.com/accounts/answer/61416?hl=it
Firefox https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie
Microsoft Edge https://support.microsoft.com/it-it/microsoft-edge/eliminare-i-cookie-in-microsoft-edge
Safari https://support.apple.com/it-it/guide/safari/sfri11471/mac

If you use any other browser, look in the browser settings for how to manage cookies.

In the case of different devices (e.g. computers, smartphones, tablets, etc.), you should ensure that each browser on each device is adjusted to reflect your cookie preferences.

Please note, however, that explicitly rejecting profiling cookies will not prevent you from receiving advertisements, but will simply mean that these advertisements will no longer be personalised.

How to Contact Us
If you have any questions or queries regarding this privacy policy, the handling of your personal data and the use of cookies on this site, you can contact us by email at: eleonora@testiandco.com

Last updated: 22 February 2022